Samovolná modrá obrazovka - critical_process_died ...

[matestu]

Zdravím,
Už nějakou dobu mi notebook samovolně přechází na modrou obrazovku, hazí hlášky jako critical_process_died, unexpected_store_exception atd. a poté se restartuje a šlape dál v pohodě. Vyměňoval jsem SSD za HDD a to jsem dal místo dvd mechaniky. Chvilku to bylo v pohodě a potom začalo tohle a zdá se mi, že to je čím dál častější . Musím podotknout, že jsem dost nezkušený. Přečetl jsem si, že sem mám hodit "log". Tak tady je: ... Díky moc za rady.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Matej at 2016-09-01 11:22:38
Microsoft Windows 10 Home
System drive C: has 64 GB (53%) free of 122 GB
Total RAM: 6034 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:22:43, on 01.09.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0545)
Boot mode: Normal

Running processes:
C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe
C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe
C:\Program Files (x86)\TOSHIBA\TRCMan\TRCMan.exe
D:\Steam\Steam.exe
C:\Users\Matej\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe
D:\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Matej.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://toshiba13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://toshiba13.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [ToshibaDynamicIconUtility] "C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe"
O4 - HKLM\..\Run: [KeNotify] "C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe" LPCM
O4 - HKLM\..\Run: [DriveTheLife2013] "C:\Program Files (x86)\DTLSoft\DriveTheLife\DriveTheLife.exe" /start
O4 - HKCU\..\Run: [Steam] "D:\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Matej\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Matej\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Matej\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk = C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AOMEI Backupper Scheduler Service (Backupper Service) - AOMEI Tech Co., Ltd. - C:\Program Files (x86)\AOMEI Backupper\ABService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero Update (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TEMPRO Service (TemproMonitoringService) - Toshiba Europe GmbH - C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe
O23 - Service: TOSHIBA HDD Protection (Thpsrv) - Unknown owner - C:\windows\system32\ThpSrv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\Windows\system32\TieringEngineService.exe (file missing)
O23 - Service: TMachInfo - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - Unknown owner - C:\Windows\system32\TODDSrv.exe (file missing)
O23 - Service: TOSHIBA eco Utility Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Teco\TecoService.exe
O23 - Service: TPCH Service (TPCHSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12294 bytes

======Listing Processes======







winlogon.exe

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
"C:\WINDOWS\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\igfxCUIService.exe
C:\Windows\SysWow64\IntelCpHeciSvc.exe
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\AOMEI Backupper\ABService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\Windows\System32\svchost.exe -k utcsvc
C:\Windows\SysWOW64\svchost.exe -k LocalDriverService
"C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
C:\Windows\system32\svchost.exe -k appmodel
C:\Windows\system32\TODDSrv.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe"
dashost.exe {8ae76217-0f70-4596-872b38d877887047}

"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SRSPS
"C:\Program Files\TOSHIBA\Teco\TecoService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe"
sihost.exe
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\Explorer.EXE
"C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
\??\C:\Windows\system32\conhost.exe 0x4

igfxEM.exe
igfxHK.exe
igfxTray.exe
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 --no-rate-limit "--database=C:\Users\Matej\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel=-m --annotation=plat=Win32 --annotation=prod=Chrome --annotation=ver=52.0.2743.116 --handshake-handle=0x1a8
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="368.0.917322023\1509928306" --mojo-application-channel-token=5622279EFA6A2799D2AC62C407AEEAEE --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/Aggressive/AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ClientSideDetectionModel/Model0/DirectWriteFontProxy/UseDirectWriteFontProxy/DisallowFetchForDocWrittenScriptsInMainFrame/Default/EnableMediaRouter/Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/OmniboxBundledExperimentV1/StandardR7/OutOfProcessPac/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/PasswordManagerSettingsMigration/Disable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/ResourcePriorities/Launch25PermanentA_11011_1_1_10/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/BiMonthlyPrompt/SSLCommonNameMismatchHandling/Enabled/SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_61/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_18/*UMA-Uniformity-Trial-50-Percent/group_01/*UMA_CheckStates/Checks/ --supports-dual-gpus=false --gpu-driver-bug-workarounds=4,13,27,47,55 --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.4358 --gpu-driver-date=12-21-2015 --gpu-secondary-vendor-ids=0x10de --gpu-secondary-device-ids=0x0fd2 --mojo-platform-channel-handle=1264 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/Aggressive/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/DirectWriteFontProxy/UseDirectWriteFontProxy/DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/OutOfProcessPac/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Launch25PermanentA_11011_1_1_10/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/BiMonthlyPrompt/SSLCommonNameMismatchHandling/Enabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_61/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_18/*UMA-Uniformity-Trial-50-Percent/group_01/*UMA_CheckStates/Checks/ --primordial-pipe-token=F8219421FA3F8C382240EF541DAA2BFC --lang=cs --instant-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=fetchDeferLateScripts=true,fetchIncreaseFontPriority=true,fetchIncreasePriorities=true --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=7A81CAFC25EB9426940B183F9C7E94EB --mojo-application-channel-token=F9E24DB6A9B58D70731A8AF03FA3EAE6 --channel="368.1.1391515433\1716098632" --mojo-platform-channel-handle=2244 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/Aggressive/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/DirectWriteFontProxy/UseDirectWriteFontProxy/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/OutOfProcessPac/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Launch25PermanentA_11011_1_1_10/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/BiMonthlyPrompt/SSLCommonNameMismatchHandling/Enabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_61/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_18/*UMA-Uniformity-Trial-50-Percent/group_01/*UMA_CheckStates/Checks/ --primordial-pipe-token=039BCFF14BD9ED54F54F0D95DB2BD1E5 --lang=cs --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=fetchDeferLateScripts=true,fetchIncreaseFontPriority=true,fetchIncreasePriorities=true --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=FBCBA3AC68F9D2C287B5AEBD8DEA5F62 --mojo-application-channel-token=8F90189D39CC49A290C0E637BA1D74F8 --channel="368.3.1762695877\1328020031" --mojo-platform-channel-handle=2816 /prefetch:1
C:\Windows\system32\SettingSyncHost.exe -Embedding
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\Windows\System32\svchost.exe -k UnistackSvcGroup
"C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe" /f="C:\Program Files\SRS Labs\SRS Control Panel\SRS_Premium_Sound_PS3D.zip" /h
"C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe"
"C:\Program Files\TOSHIBA\Hotkey\Hotkey\TcrdKBB.exe"
"C:\Program Files\TOSHIBA\Teco\TecoResident.exe"
"C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe"
"C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe"
"C:\Program Files (x86)\TOSHIBA\TRCMan\TRCMan.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"D:\Steam\Steam.exe" -silent
"C:\Users\Matej\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE" /tsr
"C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe" LPCM
D:\Steam\bin\steamwebhelper.exe "-cachedir=C:\Users\Matej\AppData\Local\Steam\htmlcache" "-steampid=3512" "-buildid=1471977975" "-steamid=0" --disable-gpu-compositing --disable-gpu --process-per-tab --enable-system-flash --disable-spell-checking --enable-widevine-cdm --enable-direct-write
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/Aggressive/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/DirectWriteFontProxy/UseDirectWriteFontProxy/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/OutOfProcessPac/Default/PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Launch25PermanentA_11011_1_1_10/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/BiMonthlyPrompt/SSLCommonNameMismatchHandling/Enabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/SafeBrowsingUpdateFrequency/Default/*SyncHttpContentCompression/Enabled/TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_61/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_18/*UMA-Uniformity-Trial-50-Percent/group_01/*UMA_CheckStates/Checks/ --primordial-pipe-token=94F90D947A16AFAD791D2029F9A8235B --lang=cs --instant-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=fetchDeferLateScripts=true,fetchIncreaseFontPriority=true,fetchIncreasePriorities=true --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=19EF42094F9B4B99E3DF423676248D60 --mojo-application-channel-token=74C2BD0B50CE05A9B46243EB07D9DF91 --channel="368.10.1409442994\297852081" --mojo-platform-channel-handle=3384 /prefetch:1
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe"
"C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe"
"C:\Program Files\Windows Defender\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey A7EFDBF7-D152-F358-EF64-54B0B5C926B6 -Reinvoke
"C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/Aggressive/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/DirectWriteFontProxy/UseDirectWriteFontProxy/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/OutOfProcessPac/Default/*PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Launch25PermanentA_11011_1_1_10/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/BiMonthlyPrompt/SSLCommonNameMismatchHandling/Enabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/*SyncHttpContentCompression/Enabled/*TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_61/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_18/*UMA-Uniformity-Trial-50-Percent/group_01/*UMA_CheckStates/Checks/ --primordial-pipe-token=CE6BBAD36A808C31B3348F4A1A57640B --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=fetchDeferLateScripts=true,fetchIncreaseFontPriority=true,fetchIncreasePriorities=true --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=7ACAEA9341E8B8C5987E32517024CE00 --mojo-application-channel-token=B7CC8A6A6ED9EBB004BA8BD92ABE083A --channel="368.18.2028203013\813283231" --mojo-platform-channel-handle=5872 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-features=AutomaticTabDiscarding<AutomaticTabDiscarding,*PreconnectMore<PreconnectMore,*TranslateUI2016Q2<TranslateUI2016Q2,UsePasswordSeparatedSigninFlow<PasswordSeparatedSigninFlow --disable-features=DocumentWriteEvaluator<DisallowFetchForDocWrittenScriptsInMainFrame,UpdateRendererPriorityOnStartup<UpdateRendererPriorityOnStartup --force-fieldtrials=AppBannerTriggering/Aggressive/*AutomaticTabDiscarding/Enabled_Once_10-gen2/CaptivePortalInterstitial/Enabled/*ChildAccountDetection/Disabled/*ClientSideDetectionModel/Model0/DirectWriteFontProxy/UseDirectWriteFontProxy/*DisallowFetchForDocWrittenScriptsInMainFrame/Default/*EnableMediaRouter/Enabled/ExtensionDeveloperModeWarning/Enabled/*GFE/Default/GoogleBrandedContextMenu/default/InstanceID/Enabled/MaterialDesignDownloads/Enabled/*NetworkQualityEstimator/Enabled/*OmniboxBundledExperimentV1/StandardR7/OutOfProcessPac/Default/*PasswordBranding/Disabled/*PasswordGeneration/Disabled/*PasswordManagerSettingsMigration/Disable/PasswordSeparatedSigninFlow/Enabled/PasswordSmartBubble/3-Times/*PreconnectMore/Default/*QUIC/EnabledNoId/ReportCertificateErrors/ShowAndPossiblySend/*ResourcePriorities/Launch25PermanentA_11011_1_1_10/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/BiMonthlyPrompt/SSLCommonNameMismatchHandling/Enabled/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingUnverifiedDownloads/DisableByParameterMostSbTypes2/*SafeBrowsingUpdateFrequency/Default/*SyncHttpContentCompression/Enabled/*TranslateUI2016Q2/DefaultTranslateUI2016Q2/*TriggeredResetFieldTrial/On/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_61/*UMA-Uniformity-Trial-10-Percent/group_09/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/default/*UMA-Uniformity-Trial-5-Percent/group_18/*UMA-Uniformity-Trial-50-Percent/group_01/*UMA_CheckStates/Checks/ --primordial-pipe-token=B5138CF9E95D0CAD0898F14FC7E25435 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=fetchDeferLateScripts=true,fetchIncreaseFontPriority=true,fetchIncreasePriorities=true --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --mojo-channel-token=6765655255B938DEDF248865EC9DE4C5 --mojo-application-channel-token=A5581634EAA3FA096B7BEE54B9580A82 --channel="368.24.666136494\241471217" --mojo-platform-channel-handle=7396 /prefetch:1
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 640 644 652 8192 648

"C:\Users\Matej\Downloads\RSITx64.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-3770710310-1054924074-817000779-10024_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-3770710310-1054924074-817000779-10024 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
C:\Windows\system32\wbem\wmiprvse.exe


======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\Synaptics TouchPad Enhancements.job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\tasks\Uninstaller_SkipUac_Matej.job - C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe /UninstallExplorer

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SRS Premium Sound 3D"=C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2012-08-20 2170784]
"TCrdMain"=C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2012-08-30 2609064]
"TecoResident"=C:\Program Files\TOSHIBA\Teco\TecoResident.exe [2012-08-14 169896]
"TSleepSrv"=C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe [2012-08-05 1548952]
"TODDMain"=C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [2012-08-05 213136]
"TosWaitSrv"=C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [2012-07-11 356776]
"TRCMan"=C:\Program Files (x86)\TOSHIBA\TRCMan\TRCMan.exe [2012-08-27 751528]
"TosPU"=C:\Program Files\TOSHIBA\PasswordUtility\TosPU.exe [2012-08-27 2374552]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-12-16 2771576]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2015-12-16 1846016]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-11-09 16409496]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-06-30 3936936]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=D:\Steam\steam.exe [2016-08-23 2857248]
"OneDrive"=C:\Users\Matej\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-08-19 633024]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\Matej\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"=C:\WINDOWS\system32\cmd.exe [2015-10-30 233984]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ToshibaDynamicIconUtility"=C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe [2012-08-09 1498624]
"KeNotify"=C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [2012-07-21 34160]
"DriveTheLife2013"=C:\Program Files (x86)\DTLSoft\DriveTheLife\DriveTheLife.exe [2015-07-23 2132320]

C:\Users\Matej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableLinkedConnections"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-09-01 11:22:38 ----D---- C:\rsit
2016-09-01 11:22:38 ----D---- C:\Program Files\trend micro
2016-09-01 11:06:49 ----ASH---- C:\pagefile.sys
2016-09-01 08:37:26 ----HD---- C:\OneDriveTemp
2016-08-19 19:44:10 ----A---- C:\Windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2016-08-19 19:42:52 ----A---- C:\Windows\system32\RtNicProp64.dll
2016-08-19 19:42:52 ----A---- C:\Windows\system32\drivers\rt640x64.sys
2016-08-19 19:42:23 ----A---- C:\Windows\SYSWOW64\SynCom.dll
2016-08-19 19:42:23 ----A---- C:\Windows\system32\WdfCoInstaller01011.dll
2016-08-19 19:42:23 ----A---- C:\Windows\system32\SynTPCo32.dll
2016-08-19 19:42:23 ----A---- C:\Windows\system32\SynTPAPI.dll
2016-08-19 19:42:23 ----A---- C:\Windows\system32\SynCOM.dll
2016-08-19 19:42:23 ----A---- C:\Windows\system32\drivers\SynTP.sys
2016-08-19 19:42:23 ----A---- C:\Windows\system32\drivers\Smb_driver_Intel_Aux.sys
2016-08-19 19:42:23 ----A---- C:\Windows\system32\drivers\Smb_driver_Intel.sys
2016-08-19 19:42:23 ----A---- C:\Windows\system32\drivers\Smb_driver_AMDASF_Aux.sys
2016-08-19 19:41:39 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2016-08-19 19:41:38 ----A---- C:\Windows\system32\tosade.dll
2016-08-19 19:41:38 ----A---- C:\Windows\system32\tepeqapo64.dll
2016-08-19 19:41:38 ----A---- C:\Windows\system32\tadefxapo264.dll
2016-08-19 19:41:38 ----A---- C:\Windows\system32\tadefxapo.dll
2016-08-19 19:41:37 ----A---- C:\Windows\system32\sltech64.dll
2016-08-19 19:41:37 ----A---- C:\Windows\system32\slcnt64.dll
2016-08-19 19:41:36 ----A---- C:\Windows\system32\sl3apo64.dll
2016-08-19 19:41:36 ----A---- C:\Windows\system32\RtPgEx64.dll
2016-08-19 19:41:36 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2016-08-19 19:41:36 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2016-08-19 19:41:36 ----A---- C:\Windows\system32\RtkCfg64.dll
2016-08-19 19:41:36 ----A---- C:\Windows\system32\RtkApi64.dll
2016-08-19 19:41:36 ----A---- C:\Windows\system32\RTEEP64A.dll
2016-08-19 19:41:36 ----A---- C:\Windows\system32\RTEEL64A.dll
2016-08-19 19:41:36 ----A---- C:\Windows\system32\RTEEG64A.dll
2016-08-19 19:41:36 ----A---- C:\Windows\system32\RTEED64A.dll
2016-08-19 19:41:35 ----A---- C:\Windows\system32\RtDataProc64.dll
2016-08-19 19:41:35 ----A---- C:\Windows\system32\RTCOM64.dll
2016-08-19 19:41:35 ----A---- C:\Windows\system32\RP3DHT64.dll
2016-08-19 19:41:35 ----A---- C:\Windows\system32\RP3DAA64.dll
2016-08-19 19:41:35 ----A---- C:\Windows\system32\RltkAPO64.dll
2016-08-19 19:41:35 ----A---- C:\Windows\system32\RCoInstII64.dll
2016-08-19 19:41:31 ----A---- C:\Windows\system32\FMAPO64.dll
2016-08-19 19:41:30 ----A---- C:\Windows\system32\CX64APO.dll
2016-08-19 19:41:29 ----A---- C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2016-08-19 19:41:29 ----A---- C:\Windows\system32\AERTAR64.dll
2016-08-19 19:41:29 ----A---- C:\Windows\system32\AERTAC64.dll
2016-08-19 19:41:25 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2016-08-19 19:40:23 ----A---- C:\Windows\system32\igfxCoIn_v4338.dll
2016-08-19 08:54:08 ----D---- C:\Users\Matej\AppData\Roaming\Skype
2016-08-10 12:36:00 ----A---- C:\Windows\SYSWOW64\Windows.StateRepositoryBroker.dll
2016-08-10 12:36:00 ----A---- C:\Windows\system32\MusNotificationUx.exe
2016-08-10 12:35:59 ----A---- C:\Windows\SYSWOW64\Windows.StateRepositoryClient.dll
2016-08-10 12:35:59 ----A---- C:\Windows\SYSWOW64\Windows.StateRepository.dll
2016-08-10 12:35:59 ----A---- C:\Windows\system32\SettingSyncHost.exe
2016-08-10 12:35:59 ----A---- C:\Windows\system32\rdpudd.dll
2016-08-10 12:35:59 ----A---- C:\Windows\system32\OneDriveSettingSyncProvider.dll
2016-08-10 12:35:59 ----A---- C:\Windows\system32\MusNotification.exe
2016-08-10 12:35:58 ----A---- C:\Windows\SYSWOW64\wmp.dll
2016-08-10 12:35:58 ----A---- C:\Windows\system32\WWAHost.exe
2016-08-10 12:35:58 ----A---- C:\Windows\system32\rdpcorets.dll
2016-08-10 12:35:58 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2016-08-10 12:35:57 ----A---- C:\Windows\system32\Windows.Data.Pdf.dll
2016-08-10 12:35:57 ----A---- C:\Windows\system32\wevtutil.exe
2016-08-10 12:35:57 ----A---- C:\Windows\system32\drivers\bthport.sys
2016-08-10 12:35:56 ----A---- C:\Windows\system32\wmp.dll
2016-08-10 12:35:55 ----A---- C:\Windows\SYSWOW64\wldp.dll
2016-08-10 12:35:55 ----A---- C:\Windows\SYSWOW64\SensorsNativeApi.dll
2016-08-10 12:35:55 ----A---- C:\Windows\SYSWOW64\NetSetupEngine.dll
2016-08-10 12:35:55 ----A---- C:\Windows\SYSWOW64\NetSetupApi.dll
2016-08-10 12:35:55 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2016-08-10 12:35:55 ----A---- C:\Windows\system32\dbgeng.dll
2016-08-10 12:35:54 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2016-08-10 12:35:54 ----A---- C:\Windows\system32\drivers\cng.sys
2016-08-10 12:35:53 ----A---- C:\Windows\system32\lsasrv.dll
2016-08-10 12:35:53 ----A---- C:\Windows\system32\drivers\bthenum.sys
2016-08-10 12:35:52 ----A---- C:\Windows\system32\drivers\rfcomm.sys
2016-08-10 12:35:52 ----A---- C:\Windows\system32\drivers\bthpan.sys
2016-08-10 12:35:51 ----A---- C:\Windows\system32\win32kbase.sys
2016-08-10 12:35:51 ----A---- C:\Windows\system32\NetSetupEngine.dll
2016-08-10 12:35:51 ----A---- C:\Windows\system32\NetSetupApi.dll
2016-08-10 12:35:51 ----A---- C:\Windows\system32\musdialoghandlers.dll
2016-08-10 12:35:51 ----A---- C:\Windows\system32\drivers\dxgmms2.sys
2016-08-10 12:35:51 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2016-08-10 12:35:51 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2016-08-10 12:35:51 ----A---- C:\Windows\system32\cdd.dll
2016-08-10 12:35:50 ----A---- C:\Windows\system32\wwansvc.dll
2016-08-10 12:35:50 ----A---- C:\Windows\system32\usocore.dll
2016-08-10 12:35:50 ----A---- C:\Windows\system32\NetSetupSvc.dll
2016-08-10 12:35:50 ----A---- C:\Windows\system32\ActiveSyncProvider.dll
2016-08-10 12:35:49 ----A---- C:\Windows\system32\Windows.UI.Xaml.dll
2016-08-10 12:35:49 ----A---- C:\Windows\system32\win32kfull.sys
2016-08-10 12:35:49 ----A---- C:\Windows\system32\TpmTasks.dll
2016-08-10 12:35:48 ----A---- C:\Windows\SYSWOW64\WWAHost.exe
2016-08-10 12:35:48 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2016-08-10 12:35:48 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2016-08-10 12:35:48 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2016-08-10 12:35:48 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2016-08-10 12:35:48 ----A---- C:\Windows\SYSWOW64\BluetoothApis.dll
2016-08-10 12:35:47 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2016-08-10 12:35:47 ----A---- C:\Windows\system32\mstscax.dll
2016-08-10 12:35:46 ----A---- C:\Windows\system32\RecoveryDrive.exe
2016-08-10 12:35:45 ----A---- C:\Windows\SYSWOW64\VEEventDispatcher.dll
2016-08-10 12:35:45 ----A---- C:\Windows\SYSWOW64\tdlrecover.exe
2016-08-10 12:35:45 ----A---- C:\Windows\SYSWOW64\LogonController.dll
2016-08-10 12:35:45 ----A---- C:\Windows\system32\WUDFPlatform.dll
2016-08-10 12:35:45 ----A---- C:\Windows\system32\winsrv.dll
2016-08-10 12:35:44 ----A---- C:\Windows\system32\GdiPlus.dll
2016-08-10 12:35:44 ----A---- C:\Windows\system32\drivers\pdc.sys
2016-08-10 12:35:43 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.dll
2016-08-10 12:35:43 ----A---- C:\Windows\SYSWOW64\wevtutil.exe
2016-08-10 12:35:43 ----A---- C:\Windows\SYSWOW64\ole32.dll
2016-08-10 12:35:42 ----A---- C:\Windows\system32\wuaueng.dll
2016-08-10 12:35:42 ----A---- C:\Windows\system32\wuauclt.exe
2016-08-10 12:35:42 ----A---- C:\Windows\system32\wuapi.dll
2016-08-10 12:35:42 ----A---- C:\Windows\system32\wshbth.dll
2016-08-10 12:35:42 ----A---- C:\Windows\system32\sppwinob.dll
2016-08-10 12:35:42 ----A---- C:\Windows\system32\sppobjs.dll
2016-08-10 12:35:42 ----A---- C:\Windows\system32\BluetoothApis.dll
2016-08-10 12:35:41 ----A---- C:\Windows\system32\wininet.dll
2016-08-10 12:35:41 ----A---- C:\Windows\system32\urlmon.dll
2016-08-10 12:35:41 ----A---- C:\Windows\system32\iertutil.dll
2016-08-10 12:35:41 ----A---- C:\Windows\system32\drivers\pci.sys
2016-08-10 12:35:40 ----A---- C:\Windows\system32\ntoskrnl.exe
2016-08-10 12:35:40 ----A---- C:\Windows\system32\drivers\storport.sys
2016-08-10 12:35:39 ----A---- C:\Windows\SYSWOW64\shell32.dll
2016-08-10 12:35:38 ----A---- C:\Windows\system32\Windows.StateRepositoryClient.dll
2016-08-10 12:35:38 ----A---- C:\Windows\system32\Windows.StateRepositoryBroker.dll
2016-08-10 12:35:38 ----A---- C:\Windows\system32\Windows.StateRepository.dll
2016-08-10 12:35:38 ----A---- C:\Windows\system32\AppXDeploymentExtensions.dll
2016-08-10 12:35:37 ----A---- C:\Windows\system32\Windows.UI.Logon.dll
2016-08-10 12:35:37 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-08-10 12:35:37 ----A---- C:\Windows\system32\AppXDeploymentServer.dll
2016-08-10 12:35:37 ----A---- C:\Windows\system32\appraiser.dll
2016-08-10 12:35:37 ----A---- C:\Windows\system32\acmigration.dll
2016-08-10 12:35:36 ----A---- C:\Windows\system32\VEEventDispatcher.dll
2016-08-10 12:35:36 ----A---- C:\Windows\system32\tileobjserver.dll
2016-08-10 12:35:36 ----A---- C:\Windows\system32\tdlrecover.exe
2016-08-10 12:35:36 ----A---- C:\Windows\system32\LockAppHost.exe
2016-08-10 12:35:36 ----A---- C:\Windows\system32\IdCtrls.dll
2016-08-10 12:35:35 ----A---- C:\Windows\SYSWOW64\GdiPlus.dll
2016-08-10 12:35:35 ----A---- C:\Windows\system32\wldp.dll
2016-08-10 12:35:35 ----A---- C:\Windows\system32\VEDataLayerHelpers.dll
2016-08-10 12:35:34 ----A---- C:\Windows\SYSWOW64\wininet.dll
2016-08-10 12:35:34 ----A---- C:\Windows\SYSWOW64\Windows.UI.Logon.dll
2016-08-10 12:35:34 ----A---- C:\Windows\SYSWOW64\SettingSyncHost.exe
2016-08-10 12:35:34 ----A---- C:\Windows\SYSWOW64\OneDriveSettingSyncProvider.dll
2016-08-10 12:35:34 ----A---- C:\Windows\SYSWOW64\LockAppHost.exe
2016-08-10 12:35:34 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2016-08-10 12:35:34 ----A---- C:\Windows\system32\ie4uinit.exe
2016-08-10 12:35:33 ----A---- C:\Windows\SYSWOW64\Windows.Data.Pdf.dll
2016-08-10 12:35:33 ----A---- C:\Windows\SYSWOW64\edgehtml.dll
2016-08-10 12:35:33 ----A---- C:\Windows\SYSWOW64\ActiveSyncProvider.dll
2016-08-10 12:35:32 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2016-08-10 12:35:32 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2016-08-10 12:35:32 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2016-08-10 12:35:32 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2016-08-10 12:35:32 ----A---- C:\Windows\system32\iedkcs32.dll
2016-08-10 12:35:31 ----A---- C:\Windows\SYSWOW64\SensorsApi.dll
2016-08-10 12:35:31 ----A---- C:\Windows\SYSWOW64\IdCtrls.dll
2016-08-10 12:35:31 ----A---- C:\Windows\SYSWOW64\Chakra.dll
2016-08-10 12:35:31 ----A---- C:\Windows\system32\msfeeds.dll
2016-08-10 12:35:30 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2016-08-10 12:35:30 ----A---- C:\Windows\system32\jscript9.dll
2016-08-10 12:35:29 ----A---- C:\Windows\system32\SensorsApi.dll
2016-08-10 12:35:29 ----A---- C:\Windows\system32\Chakradiag.dll
2016-08-10 12:35:29 ----A---- C:\Windows\system32\Chakra.dll
2016-08-10 12:35:28 ----A---- C:\Windows\system32\ieframe.dll
2016-08-10 12:35:28 ----A---- C:\Windows\system32\edgehtml.dll
2016-08-10 12:35:27 ----A---- C:\Windows\system32\wuuhext.dll
2016-08-10 12:35:27 ----A---- C:\Windows\system32\mshtml.dll
2016-08-10 12:35:27 ----A---- C:\Windows\system32\kerberos.dll
2016-08-10 12:35:26 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2016-08-10 12:35:26 ----A---- C:\Windows\system32\LogonController.dll
2016-08-10 12:35:26 ----A---- C:\Windows\system32\ieapfltr.dll
2016-08-10 12:35:26 ----A---- C:\Windows\system32\drivers\rdbss.sys
2016-08-10 12:35:25 ----A---- C:\Windows\system32\SensorsNativeApi.dll
2016-08-10 12:35:25 ----A---- C:\Windows\system32\ole32.dll
2016-08-10 12:35:25 ----A---- C:\Windows\system32\MusUpdateHandlers.dll
2016-08-10 12:35:25 ----A---- C:\Windows\system32\bthserv.dll
2016-08-10 12:35:24 ----A---- C:\Windows\system32\shell32.dll
2016-08-10 12:35:22 ----A---- C:\Windows\system32\SensorService.dll
2016-08-08 21:26:08 ----D---- C:\Windows\Panther

======List of files/folders modified in the last 1 month======

2016-09-01 11:22:38 ----RD---- C:\Program Files
2016-09-01 11:22:32 ----D---- C:\Windows\Temp
2016-09-01 11:13:07 ----D---- C:\Windows\System32
2016-09-01 11:13:07 ----D---- C:\Windows\INF
2016-09-01 11:13:07 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-09-01 11:11:44 ----D---- C:\Windows\Prefetch
2016-09-01 11:08:52 ----A---- C:\Windows\SYSWOW64\log.txt
2016-09-01 11:06:52 ----D---- C:\Windows\system32\sru
2016-09-01 11:06:50 ----D---- C:\Windows\Minidump
2016-09-01 11:06:49 ----D---- C:\Windows
2016-09-01 10:34:16 ----D---- C:\Windows\AppReadiness
2016-09-01 10:32:02 ----D---- C:\Windows\WinSxS
2016-09-01 10:32:01 ----D---- C:\Windows\CbsTemp
2016-09-01 10:29:09 ----HD---- C:\Program Files\WindowsApps
2016-09-01 08:47:09 ----SD---- C:\Users\Matej\AppData\Roaming\Microsoft
2016-08-31 03:34:18 ----D---- C:\Windows\Microsoft.NET
2016-08-29 21:23:38 ----D---- C:\Users\Matej\AppData\Roaming\uTorrent
2016-08-27 16:31:51 ----D---- C:\Users\Matej\AppData\Roaming\vlc
2016-08-26 15:44:21 ----D---- C:\Windows\system32\config
2016-08-26 14:52:14 ----D---- C:\ProgramData\ProductData
2016-08-19 19:44:03 ----D---- C:\Windows\SysWOW64
2016-08-19 19:44:03 ----D---- C:\Windows\system32\drivers
2016-08-19 19:43:52 ----D---- C:\Windows\system32\CatRoot
2016-08-19 19:43:16 ----D---- C:\Users\Matej\AppData\Roaming\DriveTheLife2013
2016-08-19 19:43:04 ----D---- C:\Windows\system32\DriverStore
2016-08-19 19:42:34 ----D---- C:\Windows\system32\catroot2
2016-08-19 19:41:48 ----D---- C:\Windows\SYSWOW64\RTCOM
2016-08-19 19:41:48 ----D---- C:\Program Files\Realtek
2016-08-19 19:41:20 ----D---- C:\Program Files (x86)\Realtek
2016-08-19 19:41:17 ----D---- C:\Program Files (x86)\Intel
2016-08-19 19:38:43 ----D---- C:\ProgramData\DriveTheLife2013
2016-08-19 19:38:29 ----D---- C:\Program Files (x86)\DTLSoft
2016-08-19 19:37:49 ----RD---- C:\Program Files (x86)
2016-08-19 19:37:49 ----D---- C:\Windows\Tasks
2016-08-19 19:37:49 ----D---- C:\Windows\system32\Tasks
2016-08-19 10:47:13 ----D---- C:\Windows\system32\LogFiles
2016-08-12 14:54:32 ----HD---- C:\$WINDOWS.~BT
2016-08-12 11:31:28 ----D---- C:\Windows\rescache
2016-08-11 18:54:55 ----D---- C:\Windows\SYSWOW64\en-US
2016-08-11 18:54:55 ----D---- C:\Windows\SYSWOW64\cs-CZ
2016-08-11 18:54:54 ----D---- C:\Windows\system32\en-US
2016-08-11 18:54:54 ----D---- C:\Windows\system32\cs-CZ
2016-08-11 18:54:54 ----D---- C:\Windows\system32\appraiser
2016-08-11 18:54:52 ----RD---- C:\Windows\ImmersiveControlPanel
2016-08-11 18:54:52 ----D---- C:\Program Files\Windows Journal
2016-08-11 18:54:52 ----D---- C:\Program Files\Internet Explorer
2016-08-11 18:54:52 ----D---- C:\Program Files (x86)\Internet Explorer
2016-08-11 13:05:19 ----D---- C:\Windows\system32\SecureBootUpdates
2016-08-11 13:05:19 ----D---- C:\Windows\system32\MRT
2016-08-11 13:03:25 ----AC---- C:\Windows\system32\MRT.exe
2016-08-08 21:26:06 ----D---- C:\Windows\Logs

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ambakdrv;ambakdrv; C:\Windows\system32\ambakdrv.sys [2015-02-26 30648]
R0 iaStorA;iaStorA; C:\Windows\System32\drivers\iaStorA.sys [2012-07-31 645952]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2015-12-18 40080]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\Windows\system32\drivers\filecrypt.sys [2016-04-23 87552]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\Windows\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [2015-09-26 26528]
R1 LDrvPro;LDrvPro; C:\Windows\system32\drivers\LDrvPro64.sys [2015-07-23 195824]
R2 ammntdrv;ammntdrv; \??\C:\WINDOWS\system32\ammntdrv.sys [2015-02-26 151480]
R2 amwrtdrv;amwrtdrv; \??\C:\WINDOWS\system32\amwrtdrv.sys [2015-02-26 17848]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\Windows\system32\drivers\mmcss.sys [2015-10-30 47616]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\drivers\BTHUSB.sys [2016-08-03 84992]
R3 enecir;@oem8.inf,%enecir.SVCDESC%;ENE CIR Receiver; C:\Windows\system32\DRIVERS\enecir.sys [2013-11-04 71168]
R3 enecirhid;@oem8.inf,%enecirhid.SVDESC%;ENE CIR HID Receiver; C:\Windows\system32\DRIVERS\enecirhid.sys [2013-11-04 24064]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2016-05-03 3811288]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-11-09 4655872]
R3 IntcDAud;@oem4.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2015-08-21 463112]
R3 iwdbus;@oem36.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\Windows\System32\drivers\iwdbus.sys [2015-12-01 38896]
R3 MEIx64;@oem12.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\System32\drivers\HECIx64.sys [2012-07-03 62784]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2015-12-18 12426896]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-12-16 19576]
R3 nvvad_WaveExtensible;@oem52.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-12-16 50472]
S0 LSI_SAS2i;LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\Windows\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\Windows\System32\drivers\percsas3i.sys [2015-10-30 58720]
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\Windows\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\Windows\System32\drivers\BthEnum.sys [2016-08-03 112640]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\Windows\System32\drivers\BthLEEnum.sys [2016-03-29 245760]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\System32\drivers\bthpan.sys [2016-08-03 128512]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\Windows\System32\drivers\BTHport.sys [2016-08-03 954368]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\Windows\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\Windows\System32\drivers\capimg.sys [2016-01-03 117248]
S3 CeKbFilter;CeKbFilter; C:\Windows\system32\DRIVERS\CeKbFilter.sys [2012-10-22 20312]
S3 dg_ssudbus;@oem42.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2015-12-11 108800]
S3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\System32\drivers\dtlitescsibus.sys [2015-04-18 30352]
S3 EsgScanner;EsgScanner; C:\Windows\system32\DRIVERS\EsgScanner.sys [2016-01-02 22704]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\Windows\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\Windows\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\Windows\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\Windows\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 intaud_WaveExtensible;@oem29.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2015-12-01 50160]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\Windows\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\Windows\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\Windows\System32\drivers\ndfltr.sys [2015-10-30 76128]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Backupper Service;AOMEI Backupper Scheduler Service; C:\Program Files (x86)\AOMEI Backupper\ABService.exe [2015-09-15 29912]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\Windows\System32\svchost.exe [2015-10-30 43944]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-12-16 1156216]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2016-05-03 337888]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-07-18 128896]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-07-18 165760]
R2 LDrvSvc;Local Driver Service; C:\Windows\System32\svchost.exe [2015-10-30 43944]
R2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2015-07-29 2909472]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-18 276864]
R2 NAUpdate;Nero Update; C:\Program Files (x86)\Nero\Update\NASvc.exe [2012-07-13 769432]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-12-16 1872504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-12-16 6477432]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2015-12-16 1256240]
R2 OneSyncSvc_3c110;Hostitel synchronizace_3c110; C:\Windows\system32\svchost.exe [2015-10-30 43944]
R3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2016-05-03 299488]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\Windows\System32\svchost.exe [2015-10-30 43944]
R3 NvStreamNetworkSvc;NVIDIA Streamer Network Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [2015-12-16 8185464]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29 144200]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_1053664;Hostitel synchronizace_1053664; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_10f1cf1;Hostitel synchronizace_10f1cf1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_116b269;Hostitel synchronizace_116b269; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_139b418;Hostitel synchronizace_139b418; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_13d3739;Hostitel synchronizace_13d3739; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_1468e56;Hostitel synchronizace_1468e56; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_1e642f1;Hostitel synchronizace_1e642f1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_2007d6;Hostitel synchronizace_2007d6; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_22a27a8;Hostitel synchronizace_22a27a8; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_290e8b1;Hostitel synchronizace_290e8b1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_2b352;Hostitel synchronizace_2b352; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_2b759;Hostitel synchronizace_2b759; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_2c962;Hostitel synchronizace_2c962; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_2da0536;Hostitel synchronizace_2da0536; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_36150;Hostitel synchronizace_36150; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_36a9e03;Hostitel synchronizace_36a9e03; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_385b8;Hostitel synchronizace_385b8; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_38730;Hostitel synchronizace_38730; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3916c;Hostitel synchronizace_3916c; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_396b6;Hostitel synchronizace_396b6; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_39bde;Hostitel synchronizace_39bde; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_39c14;Hostitel synchronizace_39c14; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_39c3b;Hostitel synchronizace_39c3b; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3a192;Hostitel synchronizace_3a192; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3a1d8;Hostitel synchronizace_3a1d8; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3a3cd;Hostitel synchronizace_3a3cd; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3a462;Hostitel synchronizace_3a462; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3a55e;Hostitel synchronizace_3a55e; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3a93a;Hostitel synchronizace_3a93a; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3abcf;Hostitel synchronizace_3abcf; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3add5;Hostitel synchronizace_3add5; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3ae11;Hostitel synchronizace_3ae11; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3ae1a;Hostitel synchronizace_3ae1a; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3ae4f;Hostitel synchronizace_3ae4f; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3aefa;Hostitel synchronizace_3aefa; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3b0a3;Hostitel synchronizace_3b0a3; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3b166;Hostitel synchronizace_3b166; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3b2bb;Hostitel synchronizace_3b2bb; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3b304;Hostitel synchronizace_3b304; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3b64c;Hostitel synchronizace_3b64c; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3b7d8;Hostitel synchronizace_3b7d8; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3b818;Hostitel synchronizace_3b818; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3b830;Hostitel synchronizace_3b830; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3b9fc;Hostitel synchronizace_3b9fc; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3bba2;Hostitel synchronizace_3bba2; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3bc7c;Hostitel synchronizace_3bc7c; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3bd50;Hostitel synchronizace_3bd50; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3c22b;Hostitel synchronizace_3c22b; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3c375;Hostitel synchronizace_3c375; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3c4b4;Hostitel synchronizace_3c4b4; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3c8c1;Hostitel synchronizace_3c8c1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3ca14;Hostitel synchronizace_3ca14; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3cc33;Hostitel synchronizace_3cc33; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3cce1;Hostitel synchronizace_3cce1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3cce5;Hostitel synchronizace_3cce5; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_3ce1e;Hostitel synchronizace_3ce1e; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_43eb3a;Hostitel synchronizace_43eb3a; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4b88fc;Hostitel synchronizace_4b88fc; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4c2fd;Hostitel synchronizace_4c2fd; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_4d1f62;Hostitel synchronizace_4d1f62; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_59b76d;Hostitel synchronizace_59b76d; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_61ee3;Hostitel synchronizace_61ee3; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_65820;Hostitel synchronizace_65820; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_66f1a;Hostitel synchronizace_66f1a; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_75426d;Hostitel synchronizace_75426d; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_790d3;Hostitel synchronizace_790d3; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_9056d1;Hostitel synchronizace_9056d1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_9752d5;Hostitel synchronizace_9752d5; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_a80b5c;Hostitel synchronizace_a80b5c; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_ab917e;Hostitel synchronizace_ab917e; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_d56fca;Hostitel synchronizace_d56fca; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_e061a;Hostitel synchronizace_e061a; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_e24ee;Hostitel synchronizace_e24ee; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29 144200]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_1053664;Služba zasílání zpráv_1053664; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_10f1cf1;Služba zasílání zpráv_10f1cf1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_116b269;Služba zasílání zpráv_116b269; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_139b418;Služba zasílání zpráv_139b418; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_13d3739;Služba zasílání zpráv_13d3739; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_1468e56;Služba zasílání zpráv_1468e56; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_1e642f1;Služba zasílání zpráv_1e642f1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_2007d6;Služba zasílání zpráv_2007d6; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_22a27a8;Služba zasílání zpráv_22a27a8; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_290e8b1;Služba zasílání zpráv_290e8b1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_2b352;Služba zasílání zpráv_2b352; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_2b759;Služba zasílání zpráv_2b759; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_2c962;Služba zasílání zpráv_2c962; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_2da0536;Služba zasílání zpráv_2da0536; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_36150;Služba zasílání zpráv_36150; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_36a9e03;Služba zasílání zpráv_36a9e03; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_385b8;Služba zasílání zpráv_385b8; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_38730;Služba zasílání zpráv_38730; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3916c;Služba zasílání zpráv_3916c; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_396b6;Služba zasílání zpráv_396b6; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_39bde;Služba zasílání zpráv_39bde; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_39c14;Služba zasílání zpráv_39c14; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_39c3b;Služba zasílání zpráv_39c3b; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3a192;Služba zasílání zpráv_3a192; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3a1d8;Služba zasílání zpráv_3a1d8; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3a3cd;Služba zasílání zpráv_3a3cd; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3a462;Služba zasílání zpráv_3a462; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3a55e;Služba zasílání zpráv_3a55e; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3a93a;Služba zasílání zpráv_3a93a; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3abcf;Služba zasílání zpráv_3abcf; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3add5;Služba zasílání zpráv_3add5; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3ae11;Služba zasílání zpráv_3ae11; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3ae1a;Služba zasílání zpráv_3ae1a; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3ae4f;Služba zasílání zpráv_3ae4f; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3aefa;Služba zasílání zpráv_3aefa; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3b0a3;Služba zasílání zpráv_3b0a3; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3b166;Služba zasílání zpráv_3b166; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3b2bb;Služba zasílání zpráv_3b2bb; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3b304;Služba zasílání zpráv_3b304; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3b64c;Služba zasílání zpráv_3b64c; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3b7d8;Služba zasílání zpráv_3b7d8; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3b818;Služba zasílání zpráv_3b818; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3b830;Služba zasílání zpráv_3b830; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3b9fc;Služba zasílání zpráv_3b9fc; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3bba2;Služba zasílání zpráv_3bba2; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3bc7c;Služba zasílání zpráv_3bc7c; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3bd50;Služba zasílání zpráv_3bd50; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3c110;Služba zasílání zpráv_3c110; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3c22b;Služba zasílání zpráv_3c22b; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3c375;Služba zasílání zpráv_3c375; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3c4b4;Služba zasílání zpráv_3c4b4; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3c8c1;Služba zasílání zpráv_3c8c1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3ca14;Služba zasílání zpráv_3ca14; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3cc33;Služba zasílání zpráv_3cc33; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3cce1;Služba zasílání zpráv_3cce1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3cce5;Služba zasílání zpráv_3cce5; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3ce1e;Služba zasílání zpráv_3ce1e; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_43eb3a;Služba zasílání zpráv_43eb3a; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4b88fc;Služba zasílání zpráv_4b88fc; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4c2fd;Služba zasílání zpráv_4c2fd; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_4d1f62;Služba zasílání zpráv_4d1f62; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_59b76d;Služba zasílání zpráv_59b76d; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_61ee3;Služba zasílání zpráv_61ee3; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_65820;Služba zasílání zpráv_65820; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_66f1a;Služba zasílání zpráv_66f1a; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_75426d;Služba zasílání zpráv_75426d; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_790d3;Služba zasílání zpráv_790d3; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_9056d1;Služba zasílání zpráv_9056d1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_9752d5;Služba zasílání zpráv_9752d5; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_a80b5c;Služba zasílání zpráv_a80b5c; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_ab917e;Služba zasílání zpráv_ab917e; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_d56fca;Služba zasílání zpráv_d56fca; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_e061a;Služba zasílání zpráv_e061a; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_e24ee;Služba zasílání zpráv_e24ee; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\Windows\System32\svchost.exe [2015-10-30 43944]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_1053664;Data kontaktů_1053664; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_10f1cf1;Data kontaktů_10f1cf1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_116b269;Data kontaktů_116b269; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_139b418;Data kontaktů_139b418; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_13d3739;Data kontaktů_13d3739; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_1468e56;Data kontaktů_1468e56; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_1e642f1;Data kontaktů_1e642f1; C:\Windows\system32\svchost.exe [2015-10-30 43944]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\Windows\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------

[Rudy]

Zdravím!
Otevřte adresář c:\windows\minidump, jeho obsah zabalte do raru a přiložte k vašemu příštímu postu.

[matestu]

Ještě jsem vypozoroval, že se to ve většině případech stane, když notebook vzbudím z režimu spánku.
Složka minidump v raru http://leteckaposta.cz/841804290

[Rudy]

NB se nepřehřívá? Pokud ne, udělejte test RAM: http://forum.viry.cz/viewtopic.php?f=53&t=106788 .

[matestu]

Notebook se nepřehřívá.
Přes ten test ramky jsem bohužel neprošel. Jak jsem psal, vyměnil jsme dvd mechaniku za hdd, takže jsem ten memtest nemohl stáhnout na dvd disk. Stáhl jsem si tedy tu verzi na usb disk a vytvořil z něho bootovací jednotku. Pak jsem se pěkně dlouho snažil dostat do biosu, abych nastavil preferovanou bootovací jednotku na usb. To všechno nakonec mám, ale normálně se mi spustí windows a nic to nedělá. Tak nevím co dělám špatně. :-/

[Rudy]

Otázka zní, zda je USB opravdu bootovatelné. Jinak by to mělo startovat z USB a rovnou spustit Memtest.

[matestu]

A jak to poznám? Zkoušel jsem to na dvou flashkách a reagovali stejně - bez výsledku. Z jedné jsem určitě před časem něco bootoval.

[Rudy]

Já bootovatelné flešky vyrábím pomocí programu PowerIso: http://www.stahuj.centrum.cz/multimedia ... /poweriso/ a vždy fungují. Další možností je, že jste nastavil nesprávnou volbu bootování. Většina současných biosů má tzv. PopupMenu (do něj se dostanete přes někerou >F< klávesu - bývá to uvedeno v úvodním postu) aniž musíte něco v biosu přestavovat.

[matestu]

Tak jsem to několikrát zkoušel přes power iso a pořád nic. Popíši tedy vše, co dělám.
V poweriso dám vytvořit bootovatelnou jednotku, přidám tam soubor odsud http://www.memtest.org/#downiso ten druhý odkaz (iso v .zip), ostatní nastavení nechám na automatickém. Jednotka se bez problémů vytvoří. Restartuju notebook, pomocí F12 se dostanu do zjednodušeného boot menu, kde je na prvním místě usb flash disk přejdu do normální biosu, opět je na prvním místě boot z flash disku potvrdím a spustí se windows a domovská obrazovka.

[Rudy]

Není v to menu ještě jiná položka, která souvisí s USB?

[matestu]

Zkoušel jsem znova všechno několikrát, ale do memtestu jsem se nedostal. Existuje ještě nějaká jiná možnost testu?

[Rudy]

Bohužel neexistuje. Oper. systém při testu musí být off, jinak není test průkazný.