Že by vir?
Napsal: 03 čer 2018 21:11
Zdravím,
byl jsem na netu, měl jsem otevřeno víc oken, v googlu jsem dal vyhledat jednu ZŠ bratří Venclíků, vyplivlo to odkazy, já na ten první kliknul, ale ten nijak podezřele nevypadal a lup, skočilo jakýsi oranžový okno, chtělo to přihlášení, furt se to načítalo, psalo to o nějakým kontaktu na Windows či co, to jsem přes to okno neviděl, takže jsem to natvrdo vypnul...ono s tím nic moc jinýho nešlo udělat...Nechal jsem to projet Defenderem, aspoň rychlou kontrolou, ale nic nenašel. Nevím...
Nicméně...po nahození se všechno tváří normálně, ale chtěl bych to radši zkontrolovat, jsem absolutní laik, tak rady prosím "polopaticky", díky
Log:
Logfile of random's system information tool 1.10 (written by random/random)
Run by Miroslav Hubata at 2018-06-03 22:07:58
Microsoft Windows 10 Pro
System drive C: has 124 GB (29%) free of 432 GB
Total RAM: 3829 MB (50% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:08:04, on 3.6.2018
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.17134.0001)
Boot mode: Normal
Running processes:
C:\Users\Miroslav Hubata\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\USB Camera2\VM332_STI.EXE
C:\Program Files (x86)\EgisTec BioExcess\EgisTSR.exe
C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
C:\Program Files (x86)\EgisTec Port Locker\EgisPLTSR.exe
C:\Program Files\trend micro\Miroslav Hubata.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: IEPwdBankBHO - {56CBB761-DA41-4E31-B270-B13B4B0A61D0} - C:\Program Files (x86)\EgisTec BioExcess\EgisIEPwdBank.dll
O4 - HKLM\..\Run: [332BigDog] C:\Program Files (x86)\USB Camera2\VM332_STI.EXE
O4 - HKLM\..\Run: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
O4 - HKLM\..\Run: [VitaKeyTSR] "C:\Program Files (x86)\EgisTec BioExcess\EgisTSR.exe"
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files (x86)\Lenovo\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\3.0"
O4 - HKLM\..\Run: [YouCam Mirror Tray icon] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [PLTSR] "C:\Program Files (x86)\EgisTec Port Locker\EgisPLTSR.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Miroslav Hubata\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\MIF5BA~1\Office12\ONBttnIE.dll (file missing)
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\MIF5BA~1\Office12\ONBttnIE.dll (file missing)
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files (x86)\MIF5BA~1\Office12\REFIEBAR.DLL (file missing)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file)
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: EgisTec Data Security Service - Egis Technology Inc. - C:\Program Files (x86)\EgisTec BioExcess\EgisDSService.exe
O23 - Service: EgisTec Service - Egis Technology Inc. - C:\Program Files (x86)\EgisTec BioExcess\EgisService.exe
O23 - Service: EgisTec Service Help - Egis Technology Inc. - C:\Program Files (x86)\EgisTec Port Locker\Egishlpsvc.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
O23 - Service: Elan Service (ETDService) - ELAN Microelectronics Corp. - C:\Program Files\Elantech\ETDService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: RtLedService Installer (RtLedService) - Realtek Semiconductor Corp. - C:\Program Files\Realtek\RtLED\RtLEDService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: OpenSSH Authentication Agent (ssh-agent) - Unknown owner - C:\WINDOWS\System32\OpenSSH\ssh-agent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Unknown owner - C:\WINDOWS\System32\TPHDEXLG64.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)
--
End of file - 10715 bytes
======Listing Processes======
C:\WINDOWS\system32\lsass.exe
winlogon.exe
c:\windows\system32\svchost.exe -k dcomlaunch -p -s PlugPlay
"fontdrvhost.exe"
"fontdrvhost.exe"
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
c:\windows\system32\svchost.exe -k rpcss -p
c:\windows\system32\svchost.exe -k dcomlaunch -p -s LSM
"dwm.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s NcbService
c:\windows\system32\svchost.exe -k netsvcs -p -s Schedule
c:\windows\system32\svchost.exe -k netsvcs -p -s ProfSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s UserManager
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s SysMain
c:\windows\system32\svchost.exe -k netsvcs -p -s Themes
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s CscService
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s TimeBrokerSvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s lmhosts
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s EventLog
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
c:\windows\system32\svchost.exe -k localservice -p -s EventSystem
c:\windows\system32\svchost.exe -k netsvcs -p -s SENS
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -p -s FontCache
c:\windows\system32\svchost.exe -k netsvcs -p -s lfsvc
c:\windows\system32\svchost.exe -k localservice -p -s nsi
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s Dhcp
c:\windows\system32\svchost.exe -k networkservice -p -s NlaSvc
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalService -p
"C:\Program Files (x86)\EgisTec BioExcess\EgisService.exe"
"C:\Program Files (x86)\EgisTec Port Locker\Egishlpsvc.exe"
c:\windows\system32\svchost.exe -k appmodel -p -s StateRepository
c:\windows\system32\svchost.exe -k localservice -p -s netprofm
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k networkservice -p -s Dnscache
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s WinHttpAutoProxySvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p
c:\windows\system32\svchost.exe -k netsvcs -p -s ShellHWDetection
C:\WINDOWS\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k networkservice -p -s LanmanWorkstation
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s DeviceAssociationService
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\EgisTec BioExcess\EgisDSService.exe"
c:\windows\system32\svchost.exe -k networkservice -p -s CryptSvc
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
"C:\Program Files\Elantech\ETDService.exe"
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s DPS
c:\windows\system32\svchost.exe -k localservice -p -s SstpSvc
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files\Realtek\RtLED\RtLEDService.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s Winmgmt
"C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE"
"C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE"
c:\windows\system32\svchost.exe -k netsvcs -p -s LanmanServer
c:\windows\system32\svchost.exe -k iissvcs
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TrkWks
c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe
c:\windows\system32\svchost.exe -k apphost -s AppHostSvc
System32\TPHDEXLG64.exe
c:\windows\system32\svchost.exe -k netsvcs -p -s WpnService
C:\WINDOWS\system32\mqsvc.exe
c:\windows\system32\svchost.exe -k netsvcs -p -s iphlpsvc
c:\windows\system32\svchost.exe -k netsvcs
c:\windows\system32\svchost.exe -k localservice -p -s WdiServiceHost
c:\windows\system32\svchost.exe -k netsvcs -p -s Browser
c:\windows\system32\svchost.exe -k networkservicenetworkrestricted -p -s PolicyAgent
"c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe" -netmsmqactivator
"C:\Program Files\Realtek\RtLED\RtLED.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Elantech\ETDCtrl.exe"
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
sihost.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TabletInputService
"ctfmon.exe"
C:\WINDOWS\Explorer.EXE
c:\windows\system32\svchost.exe -k netsvcs -p -s Appinfo
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s PcaSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s TokenBroker
C:\WINDOWS\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k localservice -p -s LicenseManager
"C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18041.14611.0_x64__8wekyb3d8bbwe\Video.UI.exe" -ServerName:Microsoft.ZuneVideo.AppX758ya5sqdjd98rx6z7g95nw6jy7bqx9y.mca
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.9330.20915.0_x64__8wekyb3d8bbwe\HxTsr.exe" -ServerName:Hx.IPC.Server
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Windows\System32\TpShocks.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s WdiSystemHost
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Users\Miroslav Hubata\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\USB Camera2\VM332_STI.EXE"
"C:\Program Files (x86)\EgisTec BioExcess\EgisTSR.exe"
"C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
"C:\Program Files (x86)\EgisTec Port Locker\EgisPLTSR.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s RmSvc
c:\windows\system32\svchost.exe -k unistacksvcgroup
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="8620.0.626101544\1820066778" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" "C:\Users\Miroslav Hubata\AppData\LocalLow\Mozilla\Temp-{9e57ff0c-942d-4511-a845-77178bbe560c}" 8620 "\\.\pipe\gecko-crash-server-pipe.8620" 1472 gpu
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="8620.3.293265229\1916404166" -childID 1 -isForBrowser -boolPrefs 299:0| -stringPrefs 285:38;{9e57ff0c-942d-4511-a845-77178bbe560c}| -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 8620 "\\.\pipe\gecko-crash-server-pipe.8620" 1320 tab
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="8620.20.2002104258\167318423" -childID 3 -isForBrowser -boolPrefs 299:0| -stringPrefs 285:38;{9e57ff0c-942d-4511-a845-77178bbe560c}| -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 8620 "\\.\pipe\gecko-crash-server-pipe.8620" 3580 tab
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s SSDPSRV
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s StorSvc
c:\windows\system32\svchost.exe -k netsvcs -p
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s Netman
c:\windows\system32\svchost.exe -k netsvcs -p -s BITS
C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
"C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe" -ServerName:SecHealthUI.AppXep4x2tbtjws1v9qqs0rmb3hxykvkpqtn.mca
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{7E55A26D-EF95-4A45-9F55-21E52ADF9887}
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="8620.34.865325558\2013193437" -childID 5 -isForBrowser -boolPrefs 299:0| -stringPrefs 285:38;{9e57ff0c-942d-4511-a845-77178bbe560c}| -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 8620 "\\.\pipe\gecko-crash-server-pipe.8620" 4232 tab
C:\Windows\System32\smartscreen.exe -Embedding
C:\WINDOWS\system32\AUDIODG.EXE 0x554
"C:\Users\Miroslav Hubata\Desktop\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
=========Mozilla firefox=========
ProfilePath - C:\Users\Miroslav Hubata\AppData\Roaming\Mozilla\Firefox\Profiles\26b90t9b.default
prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.171 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_171.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.171 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_29_0_0_171.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll
C:\Program Files (x86)\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
C:\Program Files (x86)\Mozilla Firefox\plugins\
nppdf32.dll
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{56CBB761-DA41-4E31-B270-B13B4B0A61D0}]
IEPwdBankBHO Class - C:\Program Files (x86)\EgisTec BioExcess\EgisIEPwdBank.dll [2010-05-28 53616]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2018-04-12 638872]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2015-10-07 3242696]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-06-02 10821224]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2015-10-07 3242696]
"TpShocks"=C:\Windows\System32\TpShocks.exe [2010-03-15 231328]
"UpdatePRCShortCut"=C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [2009-05-13 222504]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\utility.exe [2010-04-12 4462496]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2010-03-18 7056800]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2012-11-27 168480]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2012-11-27 393760]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2012-11-27 418336]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Miroslav Hubata\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2018-05-29 1628832]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"332BigDog"=C:\Program Files (x86)\USB Camera2\VM332_STI.EXE [2010-01-19 536576]
"IMSS"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [2009-09-30 111640]
"VitaKeyTSR"=C:\Program Files (x86)\EgisTec BioExcess\EgisTSR.exe [2010-05-28 376176]
"UCam_Menu"=C:\Program Files (x86)\Lenovo\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"YouCam Mirror Tray icon"=C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [2010-03-03 171104]
"PLTSR"=C:\Program Files (x86)\EgisTec Port Locker\EgisPLTSR.exe [2010-09-11 364400]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2012-11-26 390144]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2018-05-23 12:38:09 ----D---- C:\ProgramData\Microsoft OneDrive
2018-05-23 12:08:53 ----ASH---- C:\hiberfil.sys
2018-05-23 12:05:28 ----SD---- C:\Users\Miroslav Hubata\AppData\Roaming\Microsoft
2018-05-23 12:05:28 ----D---- C:\Users\Miroslav Hubata\AppData\Roaming\Media Center Programs
2018-05-23 12:00:52 ----D---- C:\ProgramData\USOShared
2018-05-23 12:00:31 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2018-05-23 12:00:06 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2018-05-23 11:57:07 ----D---- C:\WINDOWS\Prefetch
2018-05-23 11:55:29 ----D---- C:\WINDOWS\system32\SleepStudy
2018-05-23 11:55:24 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2018-05-22 14:25:40 ----D---- C:\Program Files\Common Files\SpeechEngines
2018-05-22 14:23:35 ----AS---- C:\WINDOWS\bootstat.dat
2018-05-22 14:21:32 ----D---- C:\WINDOWS\system32\Microsoft
2018-05-22 14:21:32 ----D---- C:\WINDOWS\ServiceProfiles
2018-05-22 14:14:23 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2018-05-22 14:14:23 ----A---- C:\WINDOWS\system32\wmp.dll
2018-05-22 14:13:57 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2018-05-22 14:13:55 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2018-05-22 14:13:55 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2018-05-22 14:13:55 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2018-05-22 14:13:55 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2018-05-22 14:13:55 ----A---- C:\WINDOWS\SYSWOW64\EdgeManager.dll
2018-05-22 14:13:54 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2018-05-22 14:13:53 ----A---- C:\WINDOWS\SYSWOW64\webplatstorageserver.dll
2018-05-22 14:13:53 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2018-05-22 14:13:52 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2018-05-22 14:13:52 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2018-05-22 14:13:52 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2018-05-22 14:13:52 ----A---- C:\WINDOWS\system32\jscript.dll
2018-05-22 14:13:51 ----A---- C:\WINDOWS\system32\mshtml.dll
2018-05-22 14:13:50 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2018-05-22 14:13:50 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2018-05-22 14:13:50 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2018-05-22 14:13:50 ----A---- C:\WINDOWS\system32\Chakra.dll
2018-05-22 14:13:49 ----A---- C:\WINDOWS\system32\jscript9.dll
2018-05-22 14:13:49 ----A---- C:\WINDOWS\system32\EdgeManager.dll
2018-05-22 14:13:49 ----A---- C:\WINDOWS\system32\edgehtml.dll
2018-05-22 14:13:48 ----A---- C:\WINDOWS\system32\webplatstorageserver.dll
2018-05-22 14:13:48 ----A---- C:\WINDOWS\system32\msfeeds.dll
2018-05-22 14:13:48 ----A---- C:\WINDOWS\system32\ieframe.dll
2018-05-22 14:13:48 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2018-05-22 14:13:45 ----A---- C:\WINDOWS\system32\MixedReality.Broker.dll
2018-05-22 14:13:42 ----A---- C:\WINDOWS\system32\Windows.Cortana.Analog.dll
2018-05-22 14:13:42 ----A---- C:\WINDOWS\system32\Hydrogen.dll
2018-05-22 14:13:42 ----A---- C:\WINDOWS\system32\HologramCompositor.dll
2018-05-22 14:13:40 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2018-05-22 14:13:40 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2018-05-22 14:13:39 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.dll
2018-05-22 14:13:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.Internal.dll
2018-05-22 14:13:37 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2018-05-22 14:13:36 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2018-05-22 14:13:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2018-05-22 14:13:34 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2018-05-22 14:13:34 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2018-05-22 14:13:34 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2018-05-22 14:13:33 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2018-05-22 14:13:33 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2018-05-22 14:13:33 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2018-05-22 14:13:32 ----A---- C:\WINDOWS\SYSWOW64\itss.dll
2018-05-22 14:13:32 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2018-05-22 14:13:32 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2018-05-22 14:13:25 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2018-05-22 14:13:25 ----A---- C:\WINDOWS\SYSWOW64\rdpbase.dll
2018-05-22 14:13:25 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2018-05-22 14:13:25 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2018-05-22 14:13:24 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2018-05-22 14:13:24 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2018-05-22 14:13:24 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2018-05-22 14:13:24 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2018-05-22 14:13:23 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2018-05-22 14:13:23 ----A---- C:\WINDOWS\system32\Spectrum.exe
2018-05-22 14:13:22 ----A---- C:\WINDOWS\system32\wininet.dll
2018-05-22 14:13:22 ----A---- C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2018-05-22 14:13:22 ----A---- C:\WINDOWS\system32\Windows.Mirage.dll
2018-05-22 14:13:22 ----A---- C:\WINDOWS\system32\urlmon.dll
2018-05-22 14:13:21 ----A---- C:\WINDOWS\system32\StorSvc.dll
2018-05-22 14:13:21 ----A---- C:\WINDOWS\system32\iertutil.dll
2018-05-22 14:13:21 ----A---- C:\WINDOWS\system32\gdi32full.dll
2018-05-22 14:13:20 ----A---- C:\WINDOWS\system32\WebRuntimeManager.dll
2018-05-22 14:13:20 ----A---- C:\WINDOWS\system32\itss.dll
2018-05-22 14:13:20 ----A---- C:\WINDOWS\system32\EdgeContent.dll
2018-05-22 14:13:17 ----A---- C:\WINDOWS\system32\winload.exe
2018-05-22 14:13:17 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2018-05-22 14:13:17 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2018-05-22 14:13:17 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2018-05-22 14:13:16 ----A---- C:\WINDOWS\system32\SharedPCCSP.dll
2018-05-22 14:13:16 ----A---- C:\WINDOWS\system32\dwmcore.dll
2018-05-22 14:13:16 ----A---- C:\WINDOWS\system32\comsvcs.dll
2018-05-22 14:13:15 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-05-22 14:13:14 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-05-22 14:13:14 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-05-22 14:13:14 ----A---- C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-05-22 14:13:13 ----A---- C:\WINDOWS\system32\mstscax.dll
2018-05-22 14:13:13 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-05-22 14:13:11 ----A---- C:\WINDOWS\system32\shell32.dll
2018-05-22 14:13:10 ----A---- C:\WINDOWS\system32\vbscript.dll
2018-05-22 14:13:10 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2018-05-22 14:13:10 ----A---- C:\WINDOWS\system32\TSpkg.dll
2018-05-22 14:13:10 ----A---- C:\WINDOWS\system32\rasapi32.dll
2018-05-22 14:13:10 ----A---- C:\WINDOWS\system32\credssp.dll
2018-05-22 14:13:08 ----A---- C:\WINDOWS\system32\msxml3.dll
2018-05-22 14:13:08 ----A---- C:\WINDOWS\system32\msi.dll
2018-05-22 14:13:07 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs3.dll
2018-05-22 14:13:07 ----A---- C:\WINDOWS\system32\win32kfull.sys
2018-05-22 14:13:07 ----A---- C:\WINDOWS\system32\rdpbase.dll
2018-05-22 14:13:06 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win8rtm.dll
2018-05-22 14:13:06 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win81.dll
2018-05-22 14:13:06 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.th.dll
2018-05-22 14:13:06 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs4.dll
2018-05-22 14:13:06 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs2.dll
2018-05-22 14:13:06 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs1.dll
2018-05-22 14:13:06 ----A---- C:\WINDOWS\system32\win32kbase.sys
2018-05-22 14:13:06 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-05-22 14:13:06 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2018-05-22 14:13:05 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-05-22 14:13:05 ----A---- C:\WINDOWS\system32\tquery.dll
2018-05-22 14:13:05 ----A---- C:\WINDOWS\system32\mssprxy.dll
2018-05-22 14:13:05 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2018-05-22 14:13:05 ----A---- C:\WINDOWS\system32\cdp.dll
2018-05-22 14:13:04 ----A---- C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-05-22 14:13:04 ----A---- C:\WINDOWS\system32\SgrmEnclave.dll
2018-05-22 14:13:04 ----A---- C:\WINDOWS\system32\PerceptionSimulationExtensions.dll
2018-05-22 14:13:02 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2018-05-22 14:13:02 ----A---- C:\WINDOWS\system32\AppVScripting.dll
2018-05-22 14:13:02 ----A---- C:\WINDOWS\system32\AppVReporting.dll
2018-05-22 14:13:02 ----A---- C:\WINDOWS\system32\AppVPublishing.dll
2018-05-22 14:13:02 ----A---- C:\WINDOWS\system32\AppVClient.exe
2018-05-22 14:13:01 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe
2018-05-22 14:13:01 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2018-05-22 14:13:01 ----A---- C:\WINDOWS\system32\wuaueng.dll
2018-05-22 14:13:01 ----A---- C:\WINDOWS\system32\WerFault.exe
2018-05-22 14:13:01 ----A---- C:\WINDOWS\system32\wer.dll
2018-05-22 14:13:01 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2018-05-22 14:13:01 ----A---- C:\WINDOWS\system32\dbgeng.dll
2018-05-22 14:13:00 ----A---- C:\WINDOWS\SYSWOW64\tzres.dll
2018-05-22 14:13:00 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2018-05-22 14:13:00 ----A---- C:\WINDOWS\system32\wuapi.dll
2018-05-22 14:13:00 ----A---- C:\WINDOWS\system32\tzres.dll
2018-05-22 14:13:00 ----A---- C:\WINDOWS\system32\securekernel.exe
2018-05-22 14:13:00 ----A---- C:\WINDOWS\system32\rpcss.dll
2018-05-22 14:13:00 ----A---- C:\WINDOWS\system32\lsasrv.dll
2018-05-22 14:13:00 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2018-05-22 14:13:00 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2018-05-22 14:13:00 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2018-05-22 14:13:00 ----A---- C:\WINDOWS\system32\diagtrack.dll
2018-05-22 14:13:00 ----A---- C:\WINDOWS\system32\dcntel.dll
2018-05-22 14:12:59 ----A---- C:\WINDOWS\system32\windows.storage.dll
2018-05-22 14:12:59 ----A---- C:\WINDOWS\system32\wcimage.dll
2018-05-22 14:12:59 ----A---- C:\WINDOWS\system32\oleaut32.dll
2018-05-22 14:12:59 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2018-05-22 14:12:59 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-05-22 14:12:58 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2018-05-22 14:12:58 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2018-05-22 14:12:58 ----A---- C:\WINDOWS\SYSWOW64\TSpkg.dll
2018-05-22 14:12:58 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2018-05-22 14:12:58 ----A---- C:\WINDOWS\SYSWOW64\credssp.dll
2018-05-22 14:12:57 ----A---- C:\WINDOWS\system32\rdpnano.dll
2018-05-22 14:12:57 ----A---- C:\WINDOWS\system32\hvloader.dll
2018-05-22 14:12:57 ----A---- C:\WINDOWS\system32\hvix64.exe
2018-05-22 14:12:57 ----A---- C:\WINDOWS\system32\hvax64.exe
2018-05-22 14:12:56 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2018-05-22 14:12:56 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2018-05-22 14:12:56 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2018-05-22 14:01:31 ----D---- C:\WINDOWS\SYSWOW64\BestPractices
2018-05-22 14:01:31 ----D---- C:\WINDOWS\system32\msmq
2018-05-22 14:01:31 ----D---- C:\WINDOWS\system32\BestPractices
2018-05-22 14:01:31 ----D---- C:\inetpub
2018-05-22 14:00:30 ----A---- C:\WINDOWS\SYSWOW64\NlsLexicons0009.dll
2018-05-22 14:00:29 ----A---- C:\WINDOWS\SYSWOW64\NlsData0009.dll
2018-05-22 14:00:27 ----A---- C:\WINDOWS\system32\prm0009.dll
2018-05-22 14:00:27 ----A---- C:\WINDOWS\system32\NlsLexicons0009.dll
2018-05-22 14:00:27 ----A---- C:\WINDOWS\system32\NlsData0009.dll
2018-05-22 13:59:55 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2018-05-22 13:59:54 ----A---- C:\WINDOWS\SYSWOW64\XpsFilt.dll
2018-05-22 13:59:52 ----A---- C:\WINDOWS\SYSWOW64\XPSSHHDR.dll
2018-05-22 13:59:51 ----A---- C:\WINDOWS\system32\XPSSHHDR.dll
2018-05-22 13:59:50 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2018-05-22 13:59:48 ----A---- C:\WINDOWS\system32\XpsFilt.dll
2018-05-22 13:59:08 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2018-05-22 13:59:02 ----D---- C:\Program Files\Reference Assemblies
2018-05-22 13:59:02 ----D---- C:\Program Files\MSBuild
2018-05-22 13:59:02 ----D---- C:\Program Files (x86)\Reference Assemblies
2018-05-22 13:59:02 ----D---- C:\Program Files (x86)\MSBuild
2018-05-22 13:57:15 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2018-05-22 13:57:13 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2018-05-22 13:57:12 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-05-22 13:57:11 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2018-05-22 13:57:08 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2018-05-22 13:57:05 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2018-05-22 12:05:34 ----DC---- C:\WINDOWS\Panther
2018-05-08 14:06:17 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerInstaller.exe
======List of files/folders modified in the last 1 month======
2018-06-03 22:08:02 ----D---- C:\WINDOWS\Temp
2018-06-03 22:08:01 ----D---- C:\Program Files\trend micro
2018-06-03 21:43:53 ----D---- C:\WINDOWS\System32
2018-06-03 21:43:52 ----D---- C:\WINDOWS\INF
2018-06-03 21:39:33 ----D---- C:\WINDOWS\AppReadiness
2018-06-03 21:39:32 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2018-06-03 21:38:39 ----D---- C:\WINDOWS\Logs
2018-06-03 21:38:39 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2018-06-03 21:06:00 ----D---- C:\WINDOWS\system32\sru
2018-06-03 16:45:13 ----D---- C:\WINDOWS\system32\LogFiles
2018-06-03 16:43:26 ----HD---- C:\Program Files\WindowsApps
2018-06-03 16:37:24 ----RD---- C:\WINDOWS\Microsoft.NET
2018-06-01 20:54:54 ----D---- C:\WINDOWS\system32\config
2018-06-01 20:45:39 ----D---- C:\WINDOWS\WinSxS
2018-06-01 20:39:51 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2018-06-01 20:39:28 ----D---- C:\WINDOWS\CbsTemp
2018-06-01 18:42:45 ----D---- C:\WINDOWS\system32\drivers\wd
2018-05-29 21:09:33 ----D---- C:\WINDOWS\system32\Tasks
2018-05-25 19:45:41 ----RD---- C:\WINDOWS\assembly
2018-05-24 16:11:17 ----D---- C:\WINDOWS\SysWOW64
2018-05-24 16:11:12 ----D---- C:\WINDOWS\system32\catroot2
2018-05-24 16:10:51 ----SHD---- C:\System Volume Information
2018-05-24 16:10:16 ----D---- C:\WINDOWS\system32\restore
2018-05-24 16:06:58 ----D---- C:\WINDOWS\appcompat
2018-05-24 16:03:56 ----D---- C:\WINDOWS\system32\WDI
2018-05-23 12:54:35 ----D---- C:\WINDOWS\system32\Tasks_Migrated
2018-05-23 12:54:34 ----RSD---- C:\WINDOWS\Fonts
2018-05-23 12:54:34 ----D---- C:\WINDOWS\system32\WinBioDatabase
2018-05-23 12:54:34 ----D---- C:\WINDOWS\system32\drivers\etc
2018-05-23 12:54:33 ----D---- C:\WINDOWS\twain_32
2018-05-23 12:54:33 ----D---- C:\WINDOWS\SYSWOW64\migration
2018-05-23 12:54:33 ----D---- C:\WINDOWS\SYSWOW64\Macromed
2018-05-23 12:54:33 ----D---- C:\WINDOWS\SYSWOW64\IME
2018-05-23 12:54:33 ----D---- C:\WINDOWS\SYSWOW64\en-US
2018-05-23 12:54:33 ----D---- C:\WINDOWS\SYSWOW64\drivers
2018-05-23 12:54:29 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2018-05-23 12:54:29 ----D---- C:\WINDOWS\SYSWOW64\Atheros_L1e
2018-05-23 12:54:28 ----D---- C:\WINDOWS\system32\zh-HK
2018-05-23 12:54:28 ----D---- C:\WINDOWS\system32\SPReview
2018-05-23 12:54:27 ----D---- C:\WINDOWS\system32\spool
2018-05-23 12:54:26 ----D---- C:\WINDOWS\system32\OEM
2018-05-23 12:54:26 ----D---- C:\WINDOWS\system32\NDF
2018-05-23 12:54:26 ----D---- C:\WINDOWS\system32\migration
2018-05-23 12:54:26 ----D---- C:\WINDOWS\system32\Macromed
2018-05-23 12:54:26 ----D---- C:\WINDOWS\system32\IME
2018-05-23 12:54:26 ----D---- C:\WINDOWS\system32\EventProviders
2018-05-23 12:54:25 ----D---- C:\WINDOWS\system32\en-US
2018-05-23 12:54:25 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2018-05-23 12:54:25 ----D---- C:\WINDOWS\system32\cs-CZ
2018-05-23 12:54:24 ----D---- C:\WINDOWS\system32\appmgmt
2018-05-23 12:54:23 ----D---- C:\WINDOWS\sk
2018-05-23 12:54:23 ----D---- C:\WINDOWS\ShellNew
2018-05-23 12:54:22 ----D---- C:\WINDOWS\schemas
2018-05-23 12:54:22 ----D---- C:\WINDOWS\PolicyDefinitions
2018-05-23 12:54:21 ----HD---- C:\WINDOWS\Installer
2018-05-23 12:54:21 ----D---- C:\WINDOWS\ModemLogs
2018-05-23 12:54:21 ----D---- C:\WINDOWS\LiveKernelReports
2018-05-23 12:54:10 ----SD---- C:\WINDOWS\Downloaded Program Files
2018-05-23 12:54:10 ----D---- C:\WINDOWS\en
2018-05-23 12:54:10 ----D---- C:\WINDOWS\cs
2018-05-23 12:54:08 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2018-05-23 12:54:08 ----RD---- C:\Program Files (x86)
2018-05-23 12:54:08 ----D---- C:\Program Files (x86)\Microsoft.NET
2018-05-23 12:54:08 ----D---- C:\Program Files (x86)\Common Files
2018-05-23 12:54:07 ----SHD---- C:\Program Files\Windows Sidebar
2018-05-23 12:54:07 ----RD---- C:\Program Files
2018-05-23 12:54:07 ----D---- C:\Program Files\Realtek
2018-05-23 12:54:07 ----D---- C:\Program Files\Common Files\microsoft shared
2018-05-23 12:54:07 ----D---- C:\Program Files\Common Files
2018-05-23 12:54:07 ----AD---- C:\Program Files\UNP
2018-05-23 12:54:05 ----D---- C:\WINDOWS\system32\Recovery
2018-05-23 12:54:00 ----D---- C:\WINDOWS\Setup
2018-05-23 12:38:09 ----HD---- C:\ProgramData
2018-05-23 12:23:57 ----D---- C:\WINDOWS\SoftwareDistribution
2018-05-23 12:23:26 ----D---- C:\WINDOWS\Tasks
2018-05-23 12:23:25 ----D---- C:\Program Files\Windows Defender
2018-05-23 12:22:22 ----D---- C:\Windows
2018-05-23 12:15:32 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2018-05-23 12:15:26 ----D---- C:\WINDOWS\Registration
2018-05-23 12:14:49 ----D---- C:\WINDOWS\SYSWOW64\wbem
2018-05-23 12:14:48 ----D---- C:\WINDOWS\system32\wbem
2018-05-23 12:14:42 ----SD---- C:\ProgramData\Microsoft
2018-05-23 12:14:35 ----RSD---- C:\WINDOWS\media
2018-05-23 12:12:05 ----D---- C:\WINDOWS\system32\DriverStore
2018-05-23 12:07:14 ----D---- C:\WINDOWS\SYSWOW64\inetsrv
2018-05-23 12:06:07 ----D---- C:\WINDOWS\system32\CodeIntegrity
2018-05-23 12:05:28 ----RD---- C:\Users
2018-05-23 12:00:52 ----D---- C:\ProgramData\USOPrivate
2018-05-23 12:00:22 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2018-05-23 11:59:53 ----D---- C:\WINDOWS\system32\drivers
2018-05-23 11:59:53 ----D---- C:\WINDOWS\System
2018-05-23 11:59:53 ----D---- C:\WINDOWS\debug
2018-05-23 11:59:53 ----D---- C:\Program Files (x86)\USB Camera2
2018-05-23 11:59:47 ----D---- C:\Program Files\Elantech
2018-05-23 11:59:37 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2018-05-23 11:57:22 ----SHD---- C:\Recovery
2018-05-22 14:27:57 ----D---- C:\WINDOWS\SYSWOW64\drivers\UMDF
2018-05-22 14:27:32 ----D---- C:\WINDOWS\system32\oobe
2018-05-22 14:26:02 ----D---- C:\WINDOWS\ehome
2018-05-22 14:25:48 ----D---- C:\Program Files (x86)\Windows Mail
2018-05-22 14:25:42 ----D---- C:\Program Files\Windows Mail
2018-05-22 14:25:41 ----D---- C:\Program Files\Microsoft Games
2018-05-22 14:16:40 ----D---- C:\WINDOWS\TextInput
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\zu-ZA
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\yo-NG
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\xh-ZA
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\wo-SN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\vi-VN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\uz-Latn-UZ
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ur-PK
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ug-CN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\tt-RU
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\tn-ZA
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\tk-TM
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ti-ET
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\tg-Cyrl-TJ
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\te-IN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ta-IN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\sw-KE
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-RS
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-BA
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\sq-AL
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\si-LK
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\setup
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\sd-Arab-PK
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\rw-RW
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\quz-PE
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\quc-Latn-GT
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\prs-AF
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\pa-IN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\pa-Arab-PK
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\or-IN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\nso-ZA
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\nn-NO
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ne-NP
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\mt-MT
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ms-MY
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\mr-IN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\mn-MN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ml-IN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\mk-MK
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\mi-NZ
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\lo-LA
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\lb-LU
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ky-KG
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ku-Arab-IQ
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\kok-IN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\kn-IN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\km-KH
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\kk-KZ
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ka-GE
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\is-IS
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ig-NG
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\id-ID
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\chr-CHER-US
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\hy-AM
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ha-Latn-NG
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\gu-IN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\gd-GB
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ga-IE
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\fil-PH
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\fa-IR
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\cy-GB
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ca-ES-valencia
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\bs-Latn-BA
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\bn-IN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\bn-BD
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\be-BY
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\az-Latn-AZ
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\as-IN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\am-ET
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\af-ZA
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\zu-ZA
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\yo-NG
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\xh-ZA
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\wo-SN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\vi-VN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\uz-Latn-UZ
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ur-PK
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ug-CN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\tt-RU
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\tn-ZA
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\tk-TM
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ti-ET
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\tg-Cyrl-TJ
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\te-IN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ta-in
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\sw-KE
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\sr-Cyrl-RS
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\sr-Cyrl-BA
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\sq-AL
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\si-lk
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\setup
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\sd-Arab-PK
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\rw-RW
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\quz-PE
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\quc-Latn-GT
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\prs-AF
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\pa-IN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\pa-Arab-PK
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\or-IN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\nso-ZA
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\nn-NO
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ne-NP
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\mt-MT
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ms-MY
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\mr-IN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\mn-MN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ml-IN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\mk-MK
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\mi-NZ
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\lo-LA
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\lb-LU
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ky-KG
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ku-Arab-IQ
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\kok-IN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\kn-IN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\km-KH
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\kk-KZ
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ka-GE
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\is-IS
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ig-NG
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\id-ID
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\chr-CHER-US
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\hy-AM
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ha-Latn-NG
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\gu-IN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\gd-GB
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ga-IE
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\fil-PH
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\fa-IR
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\cy-GB
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ca-ES-valencia
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\bs-Latn-BA
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\Boot
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\bn-IN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\bn-BD
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\be-BY
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\az-Latn-AZ
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\as-IN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\appraiser
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\am-et
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\af-ZA
2018-05-22 14:16:38 ----D---- C:\WINDOWS\Provisioning
2018-05-22 14:16:36 ----D---- C:\WINDOWS\bcastdvr
2018-05-22 14:16:36 ----D---- C:\WINDOWS\apppatch
2018-05-22 14:16:36 ----D---- C:\Program Files\Windows Photo Viewer
2018-05-22 14:16:36 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2018-05-22 14:16:34 ----D---- C:\WINDOWS\Containers
2018-05-22 14:01:32 ----D---- C:\WINDOWS\system32\inetsrv
2018-05-22 14:01:32 ----D---- C:\WINDOWS\system32\drivers\en-US
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\zh-TW
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\zh-CN
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\uk-UA
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\tr-TR
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\th-TH
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\sv-SE
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-RS
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\sl-SI
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\ru-RU
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\ro-RO
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\pt-PT
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\pt-BR
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\pl-PL
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\nb-NO
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\lv-LV
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\lt-LT
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\ko-KR
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\ja-JP
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\hr-HR
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\he-IL
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\fr-CA
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\fi-FI
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\et-EE
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\es-MX
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\es-ES
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\en-GB
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\el-GR
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\de-DE
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\da-DK
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\bg-BG
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\ar-SA
2018-05-22 14:00:11 ----D---- C:\WINDOWS\system32\zh-TW
2018-05-22 14:00:11 ----D---- C:\WINDOWS\system32\zh-CN
2018-05-22 14:00:11 ----D---- C:\WINDOWS\system32\uk-UA
2018-05-22 14:00:11 ----D---- C:\WINDOWS\system32\tr-TR
2018-05-22 14:00:11 ----D---- C:\WINDOWS\system32\th-TH
2018-05-22 14:00:11 ----D---- C:\WINDOWS\system32\sv-SE
2018-05-22 14:00:11 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2018-05-22 14:00:11 ----D---- C:\WINDOWS\system32\sl-SI
2018-05-22 14:00:11 ----D---- C:\WINDOWS\system32\sk-SK
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\ru-RU
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\ro-RO
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\pt-PT
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\pt-BR
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\pl-PL
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\nl-NL
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\nb-NO
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\lv-LV
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\lt-LT
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\ko-KR
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\ja-jp
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\it-IT
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\hu-HU
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\hr-HR
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\he-IL
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\fr-FR
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\fr-CA
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\fi-FI
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\et-EE
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\es-MX
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\es-ES
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\en-GB
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\el-GR
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\de-DE
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\da-DK
2018-05-22 14:00:08 ----D---- C:\WINDOWS\system32\bg-BG
2018-05-22 14:00:07 ----D---- C:\WINDOWS\system32\ar-SA
2018-05-22 13:59:08 ----D---- C:\WINDOWS\SYSWOW64\MUI
2018-05-22 13:59:08 ----D---- C:\WINDOWS\system32\MUI
2018-05-22 13:54:44 ----D---- C:\WINDOWS\OCR
2018-05-22 11:57:47 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2018-05-22 11:57:43 ----AD---- C:\Program Files (x86)\Mozilla Firefox
2018-05-10 20:52:29 ----D---- C:\WINDOWS\system32\MRT
2018-05-10 20:52:21 ----AC---- C:\WINDOWS\system32\MRT-KB890830.exe
2018-05-10 20:52:09 ----AC---- C:\WINDOWS\system32\MRT.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iaStor;@oem0.inf,%*PNP0600.DeviceDesc%;Intel AHCI Controller; C:\WINDOWS\System32\drivers\iaStor.sys [2010-03-03 540696]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2018-04-12 58272]
R0 LHDmgr;LHDmgr; C:\WINDOWS\System32\DRIVERS\LhdX64.sys [2010-01-15 39008]
R0 MsSecFlt;@%SystemRoot%\System32\Drivers\mssecflt.sys,-1001; C:\WINDOWS\system32\drivers\mssecflt.sys [2018-04-12 304032]
R0 SgrmAgent;@%SystemRoot%\System32\Drivers\SgrmAgent.sys,-1001; C:\WINDOWS\system32\drivers\SgrmAgent.sys [2018-04-12 63896]
R0 Shockprf;Shockprf; C:\WINDOWS\System32\DRIVERS\Apsx64.sys [2009-12-09 135264]
R1 afunix;afunix; C:\WINDOWS\system32\drivers\afunix.sys [2018-04-12 39424]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2018-04-12 60320]
R1 EgisTecFF;EgisTecFF; C:\WINDOWS\system32\DRIVERS\EgisTecFF.sys [2010-12-08 55880]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2018-04-12 55808]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2018-04-12 8192]
R1 MpKsl58caf688;MpKsl58caf688; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{4A40B0EA-B367-4EAD-8B5B-4E418007FAF1}\MpKsl58caf688.sys [2018-06-03 58120]
R1 mwlPSDFilter;mwlPSDFilter; C:\WINDOWS\system32\DRIVERS\mwlPSDFilter.sys [2010-12-08 22576]
R1 mwlPSDNServ;mwlPSDNServ; C:\WINDOWS\system32\DRIVERS\mwlPSDNServ.sys [2010-12-08 20016]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\WINDOWS\system32\DRIVERS\mwlPSDVDisk.sys [2010-12-08 60464]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2018-04-12 414208]
R2 FPSensor;@oem1.inf,%FPSensor.SvcDesc%;EgisTec-Corp Fingerprint Reader Driver (FPSensor.sys); C:\WINDOWS\System32\Drivers\FPSensor.sys [2010-12-08 35888]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2018-04-12 43520]
R2 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2018-04-12 178688]
R3 ACPIVPC;@oem13.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2009-10-19 28176]
R3 BCM43XX;@netbc64.inf,%BCM43XX_Service_DispName%;Broadcom 802.11 – ovladač síťového adaptéru; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys [2018-04-12 7585280]
R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2018-04-12 60320]
R3 ETD;@oem22.inf,%PS2.DeviceDesc%;ELAN Input Device; C:\WINDOWS\system32\DRIVERS\ETD.sys [2015-10-07 525512]
R3 HECIx64;@oem30.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface; C:\WINDOWS\System32\drivers\HECIx64.sys [2009-09-17 56344]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2012-11-27 12311776]
R3 Impcd;Impcd; C:\WINDOWS\System32\drivers\Impcd.sys [2010-02-25 158976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2010-06-02 2392296]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\System32\drivers\L1C63x64.sys [2018-04-12 121344]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys [2018-04-12 38304]
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2018-04-12 321432]
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\WINDOWS\System32\drivers\iaStorAVC.sys [2018-04-12 885144]
S0 ItSas35i;ItSas35i; C:\WINDOWS\System32\drivers\ItSas35i.sys [2018-04-12 145816]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2018-04-12 124312]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2018-04-12 128408]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2018-04-12 75160]
S0 megasas35i;megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys [2018-04-12 82328]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2018-04-12 58776]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2018-04-12 61848]
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2018-04-12 39840]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2018-04-12 128416]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2018-04-12 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2018-04-12 18432]
S3 AppvStrm;@%systemroot%\system32\drivers\AppvStrm.sys,-101; C:\WINDOWS\system32\drivers\AppvStrm.sys [2018-04-12 127384]
S3 AppvVemgr;@%systemroot%\system32\drivers\AppvVemgr.sys,-101; C:\WINDOWS\system32\drivers\AppvVemgr.sys [2018-04-12 162712]
S3 AppvVfs;@%systemroot%\system32\drivers\AppvVfs.sys,-101; C:\WINDOWS\system32\drivers\AppvVfs.sys [2018-04-12 143768]
S3 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\WINDOWS\system32\drivers\bindflt.sys [2018-04-12 92056]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2018-04-12 39936]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2018-04-12 123392]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2018-04-12 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2018-04-12 50592]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2018-04-12 73632]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2018-04-12 27136]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2018-04-12 1836952]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2018-04-12 36864]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2018-04-12 91648]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2018-04-12 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2018-04-12 88576]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2018-04-12 171520]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2018-04-12 174592]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2018-04-12 526232]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2018-04-12 38912]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2018-04-12 32256]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2018-04-12 119808]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2018-04-12 505240]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2018-04-12 56736]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2018-04-12 842648]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2018-04-12 108952]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2018-04-12 175104]
S3 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\WINDOWS\System32\drivers\nvdimm.sys [2018-04-12 104448]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2018-04-12 105984]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2018-04-12 16896]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2018-04-12 945560]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2018-04-12 104448]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2018-04-12 33176]
S3 SpatialGraphFilter;Holographic Spatial Graph Filter; C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys [2018-04-12 57752]
S4 hvcrash;hvcrash; C:\WINDOWS\System32\drivers\hvcrash.sys [2018-04-12 33184]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-02-09 83984]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 CDPUserSvc_43602;CDPUserSvc_43602; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 EgisTec Data Security Service;EgisTec Data Security Service; C:\Program Files (x86)\EgisTec BioExcess\EgisDSService.exe [2010-05-28 314736]
R2 EgisTec Service Help;EgisTec Service Help; C:\Program Files (x86)\EgisTec Port Locker\Egishlpsvc.exe [2010-09-11 327024]
R2 EgisTec Service;EgisTec Service; C:\Program Files (x86)\EgisTec BioExcess\EgisService.exe [2010-05-28 709488]
R2 EPSON_EB_RPCV4_01;EPSON V5 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE [2007-12-17 163840]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE [2007-01-11 126464]
R2 ETDService;Elan Service; C:\Program Files\Elantech\ETDService.exe [2015-10-07 144072]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-09-30 268824]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2018-04-12 26112]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-04-12 136296]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-04-12 136296]
R2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-04-12 136296]
R2 OneSyncSvc_43602;OneSyncSvc_43602; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 RtLedService;RtLedService Installer; C:\Program Files\Realtek\RtLED\RtLEDService.exe [2010-02-05 311296]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2018-04-12 761440]
R2 SgrmBroker;@%SystemRoot%\System32\SgrmBroker.exe,-100; C:\WINDOWS\system32\SgrmBroker.exe [2018-04-12 163336]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-05-08 272384]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 AssignedAccessManagerSvc;@%SystemRoot%\system32\assignedaccessmanagersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BcastDVRUserService_43602;BcastDVRUserService_43602; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BluetoothUserService_43602;BluetoothUserService_43602; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 CaptureService;@%SystemRoot%\system32\CaptureService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 CaptureService_43602;CaptureService_43602; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicePickerUserSvc_43602;DevicePickerUserSvc_43602; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc_43602;DevicesFlowUserSvc_43602; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2018-04-12 90624]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2018-05-22 43648]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MessagingService_43602;MessagingService_43602; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2018-05-22 194512]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PimIndexMaintenanceSvc_43602;PimIndexMaintenanceSvc_43602; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc_43602;PrintWorkflowUserSvc_43602; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 Sense;@%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2018-04-12 4737448]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2018-04-12 1273344]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 SharedRealitySvc;@%SystemRoot%\system32\SharedRealitySvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 spectrum;@%systemroot%\system32\spectrum.exe,-101; C:\WINDOWS\system32\spectrum.exe [2018-05-22 976384]
S4 AppVClient;@%systemroot%\system32\AppVClient.exe,-102; C:\WINDOWS\system32\AppVClient.exe [2018-05-22 826776]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2018-04-12 52832]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
-----------------EOF-----------------
byl jsem na netu, měl jsem otevřeno víc oken, v googlu jsem dal vyhledat jednu ZŠ bratří Venclíků, vyplivlo to odkazy, já na ten první kliknul, ale ten nijak podezřele nevypadal a lup, skočilo jakýsi oranžový okno, chtělo to přihlášení, furt se to načítalo, psalo to o nějakým kontaktu na Windows či co, to jsem přes to okno neviděl, takže jsem to natvrdo vypnul...ono s tím nic moc jinýho nešlo udělat...Nechal jsem to projet Defenderem, aspoň rychlou kontrolou, ale nic nenašel. Nevím...
Nicméně...po nahození se všechno tváří normálně, ale chtěl bych to radši zkontrolovat, jsem absolutní laik, tak rady prosím "polopaticky", díky
Log:
Logfile of random's system information tool 1.10 (written by random/random)
Run by Miroslav Hubata at 2018-06-03 22:07:58
Microsoft Windows 10 Pro
System drive C: has 124 GB (29%) free of 432 GB
Total RAM: 3829 MB (50% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:08:04, on 3.6.2018
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.17134.0001)
Boot mode: Normal
Running processes:
C:\Users\Miroslav Hubata\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\USB Camera2\VM332_STI.EXE
C:\Program Files (x86)\EgisTec BioExcess\EgisTSR.exe
C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
C:\Program Files (x86)\EgisTec Port Locker\EgisPLTSR.exe
C:\Program Files\trend micro\Miroslav Hubata.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: IEPwdBankBHO - {56CBB761-DA41-4E31-B270-B13B4B0A61D0} - C:\Program Files (x86)\EgisTec BioExcess\EgisIEPwdBank.dll
O4 - HKLM\..\Run: [332BigDog] C:\Program Files (x86)\USB Camera2\VM332_STI.EXE
O4 - HKLM\..\Run: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
O4 - HKLM\..\Run: [VitaKeyTSR] "C:\Program Files (x86)\EgisTec BioExcess\EgisTSR.exe"
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files (x86)\Lenovo\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\3.0"
O4 - HKLM\..\Run: [YouCam Mirror Tray icon] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [PLTSR] "C:\Program Files (x86)\EgisTec Port Locker\EgisPLTSR.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Miroslav Hubata\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\MIF5BA~1\Office12\ONBttnIE.dll (file missing)
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\MIF5BA~1\Office12\ONBttnIE.dll (file missing)
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files (x86)\MIF5BA~1\Office12\REFIEBAR.DLL (file missing)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file)
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: EgisTec Data Security Service - Egis Technology Inc. - C:\Program Files (x86)\EgisTec BioExcess\EgisDSService.exe
O23 - Service: EgisTec Service - Egis Technology Inc. - C:\Program Files (x86)\EgisTec BioExcess\EgisService.exe
O23 - Service: EgisTec Service Help - Egis Technology Inc. - C:\Program Files (x86)\EgisTec Port Locker\Egishlpsvc.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
O23 - Service: Elan Service (ETDService) - ELAN Microelectronics Corp. - C:\Program Files\Elantech\ETDService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: RtLedService Installer (RtLedService) - Realtek Semiconductor Corp. - C:\Program Files\Realtek\RtLED\RtLEDService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: OpenSSH Authentication Agent (ssh-agent) - Unknown owner - C:\WINDOWS\System32\OpenSSH\ssh-agent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Unknown owner - C:\WINDOWS\System32\TPHDEXLG64.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)
--
End of file - 10715 bytes
======Listing Processes======
C:\WINDOWS\system32\lsass.exe
winlogon.exe
c:\windows\system32\svchost.exe -k dcomlaunch -p -s PlugPlay
"fontdrvhost.exe"
"fontdrvhost.exe"
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
c:\windows\system32\svchost.exe -k rpcss -p
c:\windows\system32\svchost.exe -k dcomlaunch -p -s LSM
"dwm.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s NcbService
c:\windows\system32\svchost.exe -k netsvcs -p -s Schedule
c:\windows\system32\svchost.exe -k netsvcs -p -s ProfSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s UserManager
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s SysMain
c:\windows\system32\svchost.exe -k netsvcs -p -s Themes
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s CscService
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s TimeBrokerSvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s lmhosts
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s EventLog
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
c:\windows\system32\svchost.exe -k localservice -p -s EventSystem
c:\windows\system32\svchost.exe -k netsvcs -p -s SENS
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -p -s FontCache
c:\windows\system32\svchost.exe -k netsvcs -p -s lfsvc
c:\windows\system32\svchost.exe -k localservice -p -s nsi
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s Dhcp
c:\windows\system32\svchost.exe -k networkservice -p -s NlaSvc
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalService -p
"C:\Program Files (x86)\EgisTec BioExcess\EgisService.exe"
"C:\Program Files (x86)\EgisTec Port Locker\Egishlpsvc.exe"
c:\windows\system32\svchost.exe -k appmodel -p -s StateRepository
c:\windows\system32\svchost.exe -k localservice -p -s netprofm
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k networkservice -p -s Dnscache
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s WinHttpAutoProxySvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p
c:\windows\system32\svchost.exe -k netsvcs -p -s ShellHWDetection
C:\WINDOWS\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k networkservice -p -s LanmanWorkstation
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s DeviceAssociationService
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\EgisTec BioExcess\EgisDSService.exe"
c:\windows\system32\svchost.exe -k networkservice -p -s CryptSvc
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
"C:\Program Files\Elantech\ETDService.exe"
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s DPS
c:\windows\system32\svchost.exe -k localservice -p -s SstpSvc
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files\Realtek\RtLED\RtLEDService.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s Winmgmt
"C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE"
"C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE"
c:\windows\system32\svchost.exe -k netsvcs -p -s LanmanServer
c:\windows\system32\svchost.exe -k iissvcs
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TrkWks
c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe
c:\windows\system32\svchost.exe -k apphost -s AppHostSvc
System32\TPHDEXLG64.exe
c:\windows\system32\svchost.exe -k netsvcs -p -s WpnService
C:\WINDOWS\system32\mqsvc.exe
c:\windows\system32\svchost.exe -k netsvcs -p -s iphlpsvc
c:\windows\system32\svchost.exe -k netsvcs
c:\windows\system32\svchost.exe -k localservice -p -s WdiServiceHost
c:\windows\system32\svchost.exe -k netsvcs -p -s Browser
c:\windows\system32\svchost.exe -k networkservicenetworkrestricted -p -s PolicyAgent
"c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe" -netmsmqactivator
"C:\Program Files\Realtek\RtLED\RtLED.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Elantech\ETDCtrl.exe"
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
sihost.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TabletInputService
"ctfmon.exe"
C:\WINDOWS\Explorer.EXE
c:\windows\system32\svchost.exe -k netsvcs -p -s Appinfo
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s PcaSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s TokenBroker
C:\WINDOWS\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k localservice -p -s LicenseManager
"C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18041.14611.0_x64__8wekyb3d8bbwe\Video.UI.exe" -ServerName:Microsoft.ZuneVideo.AppX758ya5sqdjd98rx6z7g95nw6jy7bqx9y.mca
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.9330.20915.0_x64__8wekyb3d8bbwe\HxTsr.exe" -ServerName:Hx.IPC.Server
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Windows\System32\TpShocks.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s WdiSystemHost
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Users\Miroslav Hubata\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\USB Camera2\VM332_STI.EXE"
"C:\Program Files (x86)\EgisTec BioExcess\EgisTSR.exe"
"C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
"C:\Program Files (x86)\EgisTec Port Locker\EgisPLTSR.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s RmSvc
c:\windows\system32\svchost.exe -k unistacksvcgroup
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="8620.0.626101544\1820066778" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" "C:\Users\Miroslav Hubata\AppData\LocalLow\Mozilla\Temp-{9e57ff0c-942d-4511-a845-77178bbe560c}" 8620 "\\.\pipe\gecko-crash-server-pipe.8620" 1472 gpu
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="8620.3.293265229\1916404166" -childID 1 -isForBrowser -boolPrefs 299:0| -stringPrefs 285:38;{9e57ff0c-942d-4511-a845-77178bbe560c}| -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 8620 "\\.\pipe\gecko-crash-server-pipe.8620" 1320 tab
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="8620.20.2002104258\167318423" -childID 3 -isForBrowser -boolPrefs 299:0| -stringPrefs 285:38;{9e57ff0c-942d-4511-a845-77178bbe560c}| -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 8620 "\\.\pipe\gecko-crash-server-pipe.8620" 3580 tab
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s SSDPSRV
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s StorSvc
c:\windows\system32\svchost.exe -k netsvcs -p
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s Netman
c:\windows\system32\svchost.exe -k netsvcs -p -s BITS
C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
"C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe" -ServerName:SecHealthUI.AppXep4x2tbtjws1v9qqs0rmb3hxykvkpqtn.mca
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
C:\WINDOWS\system32\DllHost.exe /Processid:{7E55A26D-EF95-4A45-9F55-21E52ADF9887}
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="8620.34.865325558\2013193437" -childID 5 -isForBrowser -boolPrefs 299:0| -stringPrefs 285:38;{9e57ff0c-942d-4511-a845-77178bbe560c}| -schedulerPrefs 0001,2 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 8620 "\\.\pipe\gecko-crash-server-pipe.8620" 4232 tab
C:\Windows\System32\smartscreen.exe -Embedding
C:\WINDOWS\system32\AUDIODG.EXE 0x554
"C:\Users\Miroslav Hubata\Desktop\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
=========Mozilla firefox=========
ProfilePath - C:\Users\Miroslav Hubata\AppData\Roaming\Mozilla\Firefox\Profiles\26b90t9b.default
prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.171 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_171.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 29.0.0.171 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_29_0_0_171.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll
C:\Program Files (x86)\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
C:\Program Files (x86)\Mozilla Firefox\plugins\
nppdf32.dll
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{56CBB761-DA41-4E31-B270-B13B4B0A61D0}]
IEPwdBankBHO Class - C:\Program Files (x86)\EgisTec BioExcess\EgisIEPwdBank.dll [2010-05-28 53616]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2018-04-12 638872]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2015-10-07 3242696]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-06-02 10821224]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2015-10-07 3242696]
"TpShocks"=C:\Windows\System32\TpShocks.exe [2010-03-15 231328]
"UpdatePRCShortCut"=C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [2009-05-13 222504]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\utility.exe [2010-04-12 4462496]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2010-03-18 7056800]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2012-11-27 168480]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2012-11-27 393760]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2012-11-27 418336]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Miroslav Hubata\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2018-05-29 1628832]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"332BigDog"=C:\Program Files (x86)\USB Camera2\VM332_STI.EXE [2010-01-19 536576]
"IMSS"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [2009-09-30 111640]
"VitaKeyTSR"=C:\Program Files (x86)\EgisTec BioExcess\EgisTSR.exe [2010-05-28 376176]
"UCam_Menu"=C:\Program Files (x86)\Lenovo\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"YouCam Mirror Tray icon"=C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [2010-03-03 171104]
"PLTSR"=C:\Program Files (x86)\EgisTec Port Locker\EgisPLTSR.exe [2010-09-11 364400]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2012-11-26 390144]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2018-05-23 12:38:09 ----D---- C:\ProgramData\Microsoft OneDrive
2018-05-23 12:08:53 ----ASH---- C:\hiberfil.sys
2018-05-23 12:05:28 ----SD---- C:\Users\Miroslav Hubata\AppData\Roaming\Microsoft
2018-05-23 12:05:28 ----D---- C:\Users\Miroslav Hubata\AppData\Roaming\Media Center Programs
2018-05-23 12:00:52 ----D---- C:\ProgramData\USOShared
2018-05-23 12:00:31 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2018-05-23 12:00:06 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2018-05-23 11:57:07 ----D---- C:\WINDOWS\Prefetch
2018-05-23 11:55:29 ----D---- C:\WINDOWS\system32\SleepStudy
2018-05-23 11:55:24 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2018-05-22 14:25:40 ----D---- C:\Program Files\Common Files\SpeechEngines
2018-05-22 14:23:35 ----AS---- C:\WINDOWS\bootstat.dat
2018-05-22 14:21:32 ----D---- C:\WINDOWS\system32\Microsoft
2018-05-22 14:21:32 ----D---- C:\WINDOWS\ServiceProfiles
2018-05-22 14:14:23 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2018-05-22 14:14:23 ----A---- C:\WINDOWS\system32\wmp.dll
2018-05-22 14:13:57 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2018-05-22 14:13:55 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2018-05-22 14:13:55 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2018-05-22 14:13:55 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2018-05-22 14:13:55 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2018-05-22 14:13:55 ----A---- C:\WINDOWS\SYSWOW64\EdgeManager.dll
2018-05-22 14:13:54 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2018-05-22 14:13:53 ----A---- C:\WINDOWS\SYSWOW64\webplatstorageserver.dll
2018-05-22 14:13:53 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2018-05-22 14:13:52 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2018-05-22 14:13:52 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2018-05-22 14:13:52 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2018-05-22 14:13:52 ----A---- C:\WINDOWS\system32\jscript.dll
2018-05-22 14:13:51 ----A---- C:\WINDOWS\system32\mshtml.dll
2018-05-22 14:13:50 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2018-05-22 14:13:50 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2018-05-22 14:13:50 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2018-05-22 14:13:50 ----A---- C:\WINDOWS\system32\Chakra.dll
2018-05-22 14:13:49 ----A---- C:\WINDOWS\system32\jscript9.dll
2018-05-22 14:13:49 ----A---- C:\WINDOWS\system32\EdgeManager.dll
2018-05-22 14:13:49 ----A---- C:\WINDOWS\system32\edgehtml.dll
2018-05-22 14:13:48 ----A---- C:\WINDOWS\system32\webplatstorageserver.dll
2018-05-22 14:13:48 ----A---- C:\WINDOWS\system32\msfeeds.dll
2018-05-22 14:13:48 ----A---- C:\WINDOWS\system32\ieframe.dll
2018-05-22 14:13:48 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2018-05-22 14:13:45 ----A---- C:\WINDOWS\system32\MixedReality.Broker.dll
2018-05-22 14:13:42 ----A---- C:\WINDOWS\system32\Windows.Cortana.Analog.dll
2018-05-22 14:13:42 ----A---- C:\WINDOWS\system32\Hydrogen.dll
2018-05-22 14:13:42 ----A---- C:\WINDOWS\system32\HologramCompositor.dll
2018-05-22 14:13:40 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2018-05-22 14:13:40 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2018-05-22 14:13:39 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.dll
2018-05-22 14:13:38 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.Internal.dll
2018-05-22 14:13:37 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2018-05-22 14:13:36 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2018-05-22 14:13:34 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2018-05-22 14:13:34 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2018-05-22 14:13:34 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2018-05-22 14:13:34 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2018-05-22 14:13:33 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2018-05-22 14:13:33 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2018-05-22 14:13:33 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2018-05-22 14:13:32 ----A---- C:\WINDOWS\SYSWOW64\itss.dll
2018-05-22 14:13:32 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2018-05-22 14:13:32 ----A---- C:\WINDOWS\SYSWOW64\comsvcs.dll
2018-05-22 14:13:25 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2018-05-22 14:13:25 ----A---- C:\WINDOWS\SYSWOW64\rdpbase.dll
2018-05-22 14:13:25 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2018-05-22 14:13:25 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2018-05-22 14:13:24 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2018-05-22 14:13:24 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2018-05-22 14:13:24 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2018-05-22 14:13:24 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2018-05-22 14:13:23 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2018-05-22 14:13:23 ----A---- C:\WINDOWS\system32\Spectrum.exe
2018-05-22 14:13:22 ----A---- C:\WINDOWS\system32\wininet.dll
2018-05-22 14:13:22 ----A---- C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2018-05-22 14:13:22 ----A---- C:\WINDOWS\system32\Windows.Mirage.dll
2018-05-22 14:13:22 ----A---- C:\WINDOWS\system32\urlmon.dll
2018-05-22 14:13:21 ----A---- C:\WINDOWS\system32\StorSvc.dll
2018-05-22 14:13:21 ----A---- C:\WINDOWS\system32\iertutil.dll
2018-05-22 14:13:21 ----A---- C:\WINDOWS\system32\gdi32full.dll
2018-05-22 14:13:20 ----A---- C:\WINDOWS\system32\WebRuntimeManager.dll
2018-05-22 14:13:20 ----A---- C:\WINDOWS\system32\itss.dll
2018-05-22 14:13:20 ----A---- C:\WINDOWS\system32\EdgeContent.dll
2018-05-22 14:13:17 ----A---- C:\WINDOWS\system32\winload.exe
2018-05-22 14:13:17 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2018-05-22 14:13:17 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2018-05-22 14:13:17 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2018-05-22 14:13:16 ----A---- C:\WINDOWS\system32\SharedPCCSP.dll
2018-05-22 14:13:16 ----A---- C:\WINDOWS\system32\dwmcore.dll
2018-05-22 14:13:16 ----A---- C:\WINDOWS\system32\comsvcs.dll
2018-05-22 14:13:15 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-05-22 14:13:14 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-05-22 14:13:14 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-05-22 14:13:14 ----A---- C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-05-22 14:13:13 ----A---- C:\WINDOWS\system32\mstscax.dll
2018-05-22 14:13:13 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-05-22 14:13:11 ----A---- C:\WINDOWS\system32\shell32.dll
2018-05-22 14:13:10 ----A---- C:\WINDOWS\system32\vbscript.dll
2018-05-22 14:13:10 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2018-05-22 14:13:10 ----A---- C:\WINDOWS\system32\TSpkg.dll
2018-05-22 14:13:10 ----A---- C:\WINDOWS\system32\rasapi32.dll
2018-05-22 14:13:10 ----A---- C:\WINDOWS\system32\credssp.dll
2018-05-22 14:13:08 ----A---- C:\WINDOWS\system32\msxml3.dll
2018-05-22 14:13:08 ----A---- C:\WINDOWS\system32\msi.dll
2018-05-22 14:13:07 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs3.dll
2018-05-22 14:13:07 ----A---- C:\WINDOWS\system32\win32kfull.sys
2018-05-22 14:13:07 ----A---- C:\WINDOWS\system32\rdpbase.dll
2018-05-22 14:13:06 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win8rtm.dll
2018-05-22 14:13:06 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win81.dll
2018-05-22 14:13:06 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.th.dll
2018-05-22 14:13:06 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs4.dll
2018-05-22 14:13:06 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs2.dll
2018-05-22 14:13:06 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs1.dll
2018-05-22 14:13:06 ----A---- C:\WINDOWS\system32\win32kbase.sys
2018-05-22 14:13:06 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-05-22 14:13:06 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2018-05-22 14:13:05 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-05-22 14:13:05 ----A---- C:\WINDOWS\system32\tquery.dll
2018-05-22 14:13:05 ----A---- C:\WINDOWS\system32\mssprxy.dll
2018-05-22 14:13:05 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2018-05-22 14:13:05 ----A---- C:\WINDOWS\system32\cdp.dll
2018-05-22 14:13:04 ----A---- C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-05-22 14:13:04 ----A---- C:\WINDOWS\system32\SgrmEnclave.dll
2018-05-22 14:13:04 ----A---- C:\WINDOWS\system32\PerceptionSimulationExtensions.dll
2018-05-22 14:13:02 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2018-05-22 14:13:02 ----A---- C:\WINDOWS\system32\AppVScripting.dll
2018-05-22 14:13:02 ----A---- C:\WINDOWS\system32\AppVReporting.dll
2018-05-22 14:13:02 ----A---- C:\WINDOWS\system32\AppVPublishing.dll
2018-05-22 14:13:02 ----A---- C:\WINDOWS\system32\AppVClient.exe
2018-05-22 14:13:01 ----A---- C:\WINDOWS\SYSWOW64\WerFault.exe
2018-05-22 14:13:01 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2018-05-22 14:13:01 ----A---- C:\WINDOWS\system32\wuaueng.dll
2018-05-22 14:13:01 ----A---- C:\WINDOWS\system32\WerFault.exe
2018-05-22 14:13:01 ----A---- C:\WINDOWS\system32\wer.dll
2018-05-22 14:13:01 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2018-05-22 14:13:01 ----A---- C:\WINDOWS\system32\dbgeng.dll
2018-05-22 14:13:00 ----A---- C:\WINDOWS\SYSWOW64\tzres.dll
2018-05-22 14:13:00 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2018-05-22 14:13:00 ----A---- C:\WINDOWS\system32\wuapi.dll
2018-05-22 14:13:00 ----A---- C:\WINDOWS\system32\tzres.dll
2018-05-22 14:13:00 ----A---- C:\WINDOWS\system32\securekernel.exe
2018-05-22 14:13:00 ----A---- C:\WINDOWS\system32\rpcss.dll
2018-05-22 14:13:00 ----A---- C:\WINDOWS\system32\lsasrv.dll
2018-05-22 14:13:00 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2018-05-22 14:13:00 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2018-05-22 14:13:00 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2018-05-22 14:13:00 ----A---- C:\WINDOWS\system32\diagtrack.dll
2018-05-22 14:13:00 ----A---- C:\WINDOWS\system32\dcntel.dll
2018-05-22 14:12:59 ----A---- C:\WINDOWS\system32\windows.storage.dll
2018-05-22 14:12:59 ----A---- C:\WINDOWS\system32\wcimage.dll
2018-05-22 14:12:59 ----A---- C:\WINDOWS\system32\oleaut32.dll
2018-05-22 14:12:59 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2018-05-22 14:12:59 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-05-22 14:12:58 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2018-05-22 14:12:58 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2018-05-22 14:12:58 ----A---- C:\WINDOWS\SYSWOW64\TSpkg.dll
2018-05-22 14:12:58 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2018-05-22 14:12:58 ----A---- C:\WINDOWS\SYSWOW64\credssp.dll
2018-05-22 14:12:57 ----A---- C:\WINDOWS\system32\rdpnano.dll
2018-05-22 14:12:57 ----A---- C:\WINDOWS\system32\hvloader.dll
2018-05-22 14:12:57 ----A---- C:\WINDOWS\system32\hvix64.exe
2018-05-22 14:12:57 ----A---- C:\WINDOWS\system32\hvax64.exe
2018-05-22 14:12:56 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2018-05-22 14:12:56 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2018-05-22 14:12:56 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2018-05-22 14:01:31 ----D---- C:\WINDOWS\SYSWOW64\BestPractices
2018-05-22 14:01:31 ----D---- C:\WINDOWS\system32\msmq
2018-05-22 14:01:31 ----D---- C:\WINDOWS\system32\BestPractices
2018-05-22 14:01:31 ----D---- C:\inetpub
2018-05-22 14:00:30 ----A---- C:\WINDOWS\SYSWOW64\NlsLexicons0009.dll
2018-05-22 14:00:29 ----A---- C:\WINDOWS\SYSWOW64\NlsData0009.dll
2018-05-22 14:00:27 ----A---- C:\WINDOWS\system32\prm0009.dll
2018-05-22 14:00:27 ----A---- C:\WINDOWS\system32\NlsLexicons0009.dll
2018-05-22 14:00:27 ----A---- C:\WINDOWS\system32\NlsData0009.dll
2018-05-22 13:59:55 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2018-05-22 13:59:54 ----A---- C:\WINDOWS\SYSWOW64\XpsFilt.dll
2018-05-22 13:59:52 ----A---- C:\WINDOWS\SYSWOW64\XPSSHHDR.dll
2018-05-22 13:59:51 ----A---- C:\WINDOWS\system32\XPSSHHDR.dll
2018-05-22 13:59:50 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2018-05-22 13:59:48 ----A---- C:\WINDOWS\system32\XpsFilt.dll
2018-05-22 13:59:08 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2018-05-22 13:59:02 ----D---- C:\Program Files\Reference Assemblies
2018-05-22 13:59:02 ----D---- C:\Program Files\MSBuild
2018-05-22 13:59:02 ----D---- C:\Program Files (x86)\Reference Assemblies
2018-05-22 13:59:02 ----D---- C:\Program Files (x86)\MSBuild
2018-05-22 13:57:15 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2018-05-22 13:57:13 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2018-05-22 13:57:12 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-05-22 13:57:11 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2018-05-22 13:57:08 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2018-05-22 13:57:05 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2018-05-22 12:05:34 ----DC---- C:\WINDOWS\Panther
2018-05-08 14:06:17 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerInstaller.exe
======List of files/folders modified in the last 1 month======
2018-06-03 22:08:02 ----D---- C:\WINDOWS\Temp
2018-06-03 22:08:01 ----D---- C:\Program Files\trend micro
2018-06-03 21:43:53 ----D---- C:\WINDOWS\System32
2018-06-03 21:43:52 ----D---- C:\WINDOWS\INF
2018-06-03 21:39:33 ----D---- C:\WINDOWS\AppReadiness
2018-06-03 21:39:32 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2018-06-03 21:38:39 ----D---- C:\WINDOWS\Logs
2018-06-03 21:38:39 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2018-06-03 21:06:00 ----D---- C:\WINDOWS\system32\sru
2018-06-03 16:45:13 ----D---- C:\WINDOWS\system32\LogFiles
2018-06-03 16:43:26 ----HD---- C:\Program Files\WindowsApps
2018-06-03 16:37:24 ----RD---- C:\WINDOWS\Microsoft.NET
2018-06-01 20:54:54 ----D---- C:\WINDOWS\system32\config
2018-06-01 20:45:39 ----D---- C:\WINDOWS\WinSxS
2018-06-01 20:39:51 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2018-06-01 20:39:28 ----D---- C:\WINDOWS\CbsTemp
2018-06-01 18:42:45 ----D---- C:\WINDOWS\system32\drivers\wd
2018-05-29 21:09:33 ----D---- C:\WINDOWS\system32\Tasks
2018-05-25 19:45:41 ----RD---- C:\WINDOWS\assembly
2018-05-24 16:11:17 ----D---- C:\WINDOWS\SysWOW64
2018-05-24 16:11:12 ----D---- C:\WINDOWS\system32\catroot2
2018-05-24 16:10:51 ----SHD---- C:\System Volume Information
2018-05-24 16:10:16 ----D---- C:\WINDOWS\system32\restore
2018-05-24 16:06:58 ----D---- C:\WINDOWS\appcompat
2018-05-24 16:03:56 ----D---- C:\WINDOWS\system32\WDI
2018-05-23 12:54:35 ----D---- C:\WINDOWS\system32\Tasks_Migrated
2018-05-23 12:54:34 ----RSD---- C:\WINDOWS\Fonts
2018-05-23 12:54:34 ----D---- C:\WINDOWS\system32\WinBioDatabase
2018-05-23 12:54:34 ----D---- C:\WINDOWS\system32\drivers\etc
2018-05-23 12:54:33 ----D---- C:\WINDOWS\twain_32
2018-05-23 12:54:33 ----D---- C:\WINDOWS\SYSWOW64\migration
2018-05-23 12:54:33 ----D---- C:\WINDOWS\SYSWOW64\Macromed
2018-05-23 12:54:33 ----D---- C:\WINDOWS\SYSWOW64\IME
2018-05-23 12:54:33 ----D---- C:\WINDOWS\SYSWOW64\en-US
2018-05-23 12:54:33 ----D---- C:\WINDOWS\SYSWOW64\drivers
2018-05-23 12:54:29 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2018-05-23 12:54:29 ----D---- C:\WINDOWS\SYSWOW64\Atheros_L1e
2018-05-23 12:54:28 ----D---- C:\WINDOWS\system32\zh-HK
2018-05-23 12:54:28 ----D---- C:\WINDOWS\system32\SPReview
2018-05-23 12:54:27 ----D---- C:\WINDOWS\system32\spool
2018-05-23 12:54:26 ----D---- C:\WINDOWS\system32\OEM
2018-05-23 12:54:26 ----D---- C:\WINDOWS\system32\NDF
2018-05-23 12:54:26 ----D---- C:\WINDOWS\system32\migration
2018-05-23 12:54:26 ----D---- C:\WINDOWS\system32\Macromed
2018-05-23 12:54:26 ----D---- C:\WINDOWS\system32\IME
2018-05-23 12:54:26 ----D---- C:\WINDOWS\system32\EventProviders
2018-05-23 12:54:25 ----D---- C:\WINDOWS\system32\en-US
2018-05-23 12:54:25 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2018-05-23 12:54:25 ----D---- C:\WINDOWS\system32\cs-CZ
2018-05-23 12:54:24 ----D---- C:\WINDOWS\system32\appmgmt
2018-05-23 12:54:23 ----D---- C:\WINDOWS\sk
2018-05-23 12:54:23 ----D---- C:\WINDOWS\ShellNew
2018-05-23 12:54:22 ----D---- C:\WINDOWS\schemas
2018-05-23 12:54:22 ----D---- C:\WINDOWS\PolicyDefinitions
2018-05-23 12:54:21 ----HD---- C:\WINDOWS\Installer
2018-05-23 12:54:21 ----D---- C:\WINDOWS\ModemLogs
2018-05-23 12:54:21 ----D---- C:\WINDOWS\LiveKernelReports
2018-05-23 12:54:10 ----SD---- C:\WINDOWS\Downloaded Program Files
2018-05-23 12:54:10 ----D---- C:\WINDOWS\en
2018-05-23 12:54:10 ----D---- C:\WINDOWS\cs
2018-05-23 12:54:08 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2018-05-23 12:54:08 ----RD---- C:\Program Files (x86)
2018-05-23 12:54:08 ----D---- C:\Program Files (x86)\Microsoft.NET
2018-05-23 12:54:08 ----D---- C:\Program Files (x86)\Common Files
2018-05-23 12:54:07 ----SHD---- C:\Program Files\Windows Sidebar
2018-05-23 12:54:07 ----RD---- C:\Program Files
2018-05-23 12:54:07 ----D---- C:\Program Files\Realtek
2018-05-23 12:54:07 ----D---- C:\Program Files\Common Files\microsoft shared
2018-05-23 12:54:07 ----D---- C:\Program Files\Common Files
2018-05-23 12:54:07 ----AD---- C:\Program Files\UNP
2018-05-23 12:54:05 ----D---- C:\WINDOWS\system32\Recovery
2018-05-23 12:54:00 ----D---- C:\WINDOWS\Setup
2018-05-23 12:38:09 ----HD---- C:\ProgramData
2018-05-23 12:23:57 ----D---- C:\WINDOWS\SoftwareDistribution
2018-05-23 12:23:26 ----D---- C:\WINDOWS\Tasks
2018-05-23 12:23:25 ----D---- C:\Program Files\Windows Defender
2018-05-23 12:22:22 ----D---- C:\Windows
2018-05-23 12:15:32 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2018-05-23 12:15:26 ----D---- C:\WINDOWS\Registration
2018-05-23 12:14:49 ----D---- C:\WINDOWS\SYSWOW64\wbem
2018-05-23 12:14:48 ----D---- C:\WINDOWS\system32\wbem
2018-05-23 12:14:42 ----SD---- C:\ProgramData\Microsoft
2018-05-23 12:14:35 ----RSD---- C:\WINDOWS\media
2018-05-23 12:12:05 ----D---- C:\WINDOWS\system32\DriverStore
2018-05-23 12:07:14 ----D---- C:\WINDOWS\SYSWOW64\inetsrv
2018-05-23 12:06:07 ----D---- C:\WINDOWS\system32\CodeIntegrity
2018-05-23 12:05:28 ----RD---- C:\Users
2018-05-23 12:00:52 ----D---- C:\ProgramData\USOPrivate
2018-05-23 12:00:22 ----A---- C:\WINDOWS\SYSWOW64\PerfStringBackup.INI
2018-05-23 11:59:53 ----D---- C:\WINDOWS\system32\drivers
2018-05-23 11:59:53 ----D---- C:\WINDOWS\System
2018-05-23 11:59:53 ----D---- C:\WINDOWS\debug
2018-05-23 11:59:53 ----D---- C:\Program Files (x86)\USB Camera2
2018-05-23 11:59:47 ----D---- C:\Program Files\Elantech
2018-05-23 11:59:37 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2018-05-23 11:57:22 ----SHD---- C:\Recovery
2018-05-22 14:27:57 ----D---- C:\WINDOWS\SYSWOW64\drivers\UMDF
2018-05-22 14:27:32 ----D---- C:\WINDOWS\system32\oobe
2018-05-22 14:26:02 ----D---- C:\WINDOWS\ehome
2018-05-22 14:25:48 ----D---- C:\Program Files (x86)\Windows Mail
2018-05-22 14:25:42 ----D---- C:\Program Files\Windows Mail
2018-05-22 14:25:41 ----D---- C:\Program Files\Microsoft Games
2018-05-22 14:16:40 ----D---- C:\WINDOWS\TextInput
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\zu-ZA
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\yo-NG
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\xh-ZA
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\wo-SN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\vi-VN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\uz-Latn-UZ
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ur-PK
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ug-CN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\tt-RU
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\tn-ZA
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\tk-TM
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ti-ET
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\tg-Cyrl-TJ
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\te-IN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ta-IN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\sw-KE
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-RS
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-BA
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\sq-AL
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\si-LK
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\setup
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\sd-Arab-PK
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\rw-RW
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\quz-PE
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\quc-Latn-GT
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\prs-AF
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\pa-IN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\pa-Arab-PK
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\or-IN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\nso-ZA
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\nn-NO
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ne-NP
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\mt-MT
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ms-MY
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\mr-IN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\mn-MN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ml-IN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\mk-MK
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\mi-NZ
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\lo-LA
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\lb-LU
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ky-KG
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ku-Arab-IQ
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\kok-IN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\kn-IN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\km-KH
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\kk-KZ
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ka-GE
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\is-IS
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ig-NG
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\id-ID
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\chr-CHER-US
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\hy-AM
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ha-Latn-NG
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\gu-IN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\gd-GB
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ga-IE
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\fil-PH
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\fa-IR
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\cy-GB
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\ca-ES-valencia
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\bs-Latn-BA
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\bn-IN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\bn-BD
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\be-BY
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\az-Latn-AZ
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\as-IN
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\am-ET
2018-05-22 14:16:40 ----D---- C:\WINDOWS\SYSWOW64\af-ZA
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\zu-ZA
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\yo-NG
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\xh-ZA
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\wo-SN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\vi-VN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\uz-Latn-UZ
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ur-PK
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ug-CN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\tt-RU
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\tn-ZA
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\tk-TM
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ti-ET
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\tg-Cyrl-TJ
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\te-IN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ta-in
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\sw-KE
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\sr-Cyrl-RS
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\sr-Cyrl-BA
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\sq-AL
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\si-lk
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\setup
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\sd-Arab-PK
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\rw-RW
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\quz-PE
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\quc-Latn-GT
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\prs-AF
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\pa-IN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\pa-Arab-PK
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\or-IN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\nso-ZA
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\nn-NO
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ne-NP
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\mt-MT
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ms-MY
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\mr-IN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\mn-MN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ml-IN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\mk-MK
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\mi-NZ
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\lo-LA
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\lb-LU
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ky-KG
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ku-Arab-IQ
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\kok-IN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\kn-IN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\km-KH
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\kk-KZ
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ka-GE
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\is-IS
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ig-NG
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\id-ID
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\chr-CHER-US
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\hy-AM
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ha-Latn-NG
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\gu-IN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\gd-GB
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ga-IE
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\fil-PH
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\fa-IR
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\cy-GB
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\ca-ES-valencia
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\bs-Latn-BA
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\Boot
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\bn-IN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\bn-BD
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\be-BY
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\az-Latn-AZ
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\as-IN
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\appraiser
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\am-et
2018-05-22 14:16:39 ----D---- C:\WINDOWS\system32\af-ZA
2018-05-22 14:16:38 ----D---- C:\WINDOWS\Provisioning
2018-05-22 14:16:36 ----D---- C:\WINDOWS\bcastdvr
2018-05-22 14:16:36 ----D---- C:\WINDOWS\apppatch
2018-05-22 14:16:36 ----D---- C:\Program Files\Windows Photo Viewer
2018-05-22 14:16:36 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2018-05-22 14:16:34 ----D---- C:\WINDOWS\Containers
2018-05-22 14:01:32 ----D---- C:\WINDOWS\system32\inetsrv
2018-05-22 14:01:32 ----D---- C:\WINDOWS\system32\drivers\en-US
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\zh-TW
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\zh-CN
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\uk-UA
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\tr-TR
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\th-TH
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\sv-SE
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-RS
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\sl-SI
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\ru-RU
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\ro-RO
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\pt-PT
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\pt-BR
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\pl-PL
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\nb-NO
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\lv-LV
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\lt-LT
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\ko-KR
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\ja-JP
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\hr-HR
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\he-IL
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\fr-CA
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\fi-FI
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\et-EE
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\es-MX
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\es-ES
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\en-GB
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\el-GR
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\de-DE
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\da-DK
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\bg-BG
2018-05-22 14:00:11 ----D---- C:\WINDOWS\SYSWOW64\ar-SA
2018-05-22 14:00:11 ----D---- C:\WINDOWS\system32\zh-TW
2018-05-22 14:00:11 ----D---- C:\WINDOWS\system32\zh-CN
2018-05-22 14:00:11 ----D---- C:\WINDOWS\system32\uk-UA
2018-05-22 14:00:11 ----D---- C:\WINDOWS\system32\tr-TR
2018-05-22 14:00:11 ----D---- C:\WINDOWS\system32\th-TH
2018-05-22 14:00:11 ----D---- C:\WINDOWS\system32\sv-SE
2018-05-22 14:00:11 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2018-05-22 14:00:11 ----D---- C:\WINDOWS\system32\sl-SI
2018-05-22 14:00:11 ----D---- C:\WINDOWS\system32\sk-SK
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\ru-RU
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\ro-RO
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\pt-PT
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\pt-BR
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\pl-PL
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\nl-NL
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\nb-NO
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\lv-LV
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\lt-LT
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\ko-KR
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\ja-jp
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\it-IT
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\hu-HU
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\hr-HR
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\he-IL
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\fr-FR
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\fr-CA
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\fi-FI
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\et-EE
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\es-MX
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\es-ES
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\en-GB
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\el-GR
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\de-DE
2018-05-22 14:00:10 ----D---- C:\WINDOWS\system32\da-DK
2018-05-22 14:00:08 ----D---- C:\WINDOWS\system32\bg-BG
2018-05-22 14:00:07 ----D---- C:\WINDOWS\system32\ar-SA
2018-05-22 13:59:08 ----D---- C:\WINDOWS\SYSWOW64\MUI
2018-05-22 13:59:08 ----D---- C:\WINDOWS\system32\MUI
2018-05-22 13:54:44 ----D---- C:\WINDOWS\OCR
2018-05-22 11:57:47 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2018-05-22 11:57:43 ----AD---- C:\Program Files (x86)\Mozilla Firefox
2018-05-10 20:52:29 ----D---- C:\WINDOWS\system32\MRT
2018-05-10 20:52:21 ----AC---- C:\WINDOWS\system32\MRT-KB890830.exe
2018-05-10 20:52:09 ----AC---- C:\WINDOWS\system32\MRT.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iaStor;@oem0.inf,%*PNP0600.DeviceDesc%;Intel AHCI Controller; C:\WINDOWS\System32\drivers\iaStor.sys [2010-03-03 540696]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2018-04-12 58272]
R0 LHDmgr;LHDmgr; C:\WINDOWS\System32\DRIVERS\LhdX64.sys [2010-01-15 39008]
R0 MsSecFlt;@%SystemRoot%\System32\Drivers\mssecflt.sys,-1001; C:\WINDOWS\system32\drivers\mssecflt.sys [2018-04-12 304032]
R0 SgrmAgent;@%SystemRoot%\System32\Drivers\SgrmAgent.sys,-1001; C:\WINDOWS\system32\drivers\SgrmAgent.sys [2018-04-12 63896]
R0 Shockprf;Shockprf; C:\WINDOWS\System32\DRIVERS\Apsx64.sys [2009-12-09 135264]
R1 afunix;afunix; C:\WINDOWS\system32\drivers\afunix.sys [2018-04-12 39424]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2018-04-12 60320]
R1 EgisTecFF;EgisTecFF; C:\WINDOWS\system32\DRIVERS\EgisTecFF.sys [2010-12-08 55880]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2018-04-12 55808]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2018-04-12 8192]
R1 MpKsl58caf688;MpKsl58caf688; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{4A40B0EA-B367-4EAD-8B5B-4E418007FAF1}\MpKsl58caf688.sys [2018-06-03 58120]
R1 mwlPSDFilter;mwlPSDFilter; C:\WINDOWS\system32\DRIVERS\mwlPSDFilter.sys [2010-12-08 22576]
R1 mwlPSDNServ;mwlPSDNServ; C:\WINDOWS\system32\DRIVERS\mwlPSDNServ.sys [2010-12-08 20016]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\WINDOWS\system32\DRIVERS\mwlPSDVDisk.sys [2010-12-08 60464]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2018-04-12 414208]
R2 FPSensor;@oem1.inf,%FPSensor.SvcDesc%;EgisTec-Corp Fingerprint Reader Driver (FPSensor.sys); C:\WINDOWS\System32\Drivers\FPSensor.sys [2010-12-08 35888]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2018-04-12 43520]
R2 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2018-04-12 178688]
R3 ACPIVPC;@oem13.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2009-10-19 28176]
R3 BCM43XX;@netbc64.inf,%BCM43XX_Service_DispName%;Broadcom 802.11 – ovladač síťového adaptéru; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys [2018-04-12 7585280]
R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2018-04-12 60320]
R3 ETD;@oem22.inf,%PS2.DeviceDesc%;ELAN Input Device; C:\WINDOWS\system32\DRIVERS\ETD.sys [2015-10-07 525512]
R3 HECIx64;@oem30.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface; C:\WINDOWS\System32\drivers\HECIx64.sys [2009-09-17 56344]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2012-11-27 12311776]
R3 Impcd;Impcd; C:\WINDOWS\System32\drivers\Impcd.sys [2010-02-25 158976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2010-06-02 2392296]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\System32\drivers\L1C63x64.sys [2018-04-12 121344]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys [2018-04-12 38304]
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2018-04-12 321432]
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\WINDOWS\System32\drivers\iaStorAVC.sys [2018-04-12 885144]
S0 ItSas35i;ItSas35i; C:\WINDOWS\System32\drivers\ItSas35i.sys [2018-04-12 145816]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2018-04-12 124312]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2018-04-12 128408]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2018-04-12 75160]
S0 megasas35i;megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys [2018-04-12 82328]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2018-04-12 58776]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2018-04-12 61848]
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2018-04-12 39840]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2018-04-12 128416]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2018-04-12 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2018-04-12 18432]
S3 AppvStrm;@%systemroot%\system32\drivers\AppvStrm.sys,-101; C:\WINDOWS\system32\drivers\AppvStrm.sys [2018-04-12 127384]
S3 AppvVemgr;@%systemroot%\system32\drivers\AppvVemgr.sys,-101; C:\WINDOWS\system32\drivers\AppvVemgr.sys [2018-04-12 162712]
S3 AppvVfs;@%systemroot%\system32\drivers\AppvVfs.sys,-101; C:\WINDOWS\system32\drivers\AppvVfs.sys [2018-04-12 143768]
S3 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\WINDOWS\system32\drivers\bindflt.sys [2018-04-12 92056]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2018-04-12 39936]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2018-04-12 123392]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2018-04-12 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2018-04-12 50592]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2018-04-12 73632]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2018-04-12 27136]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2018-04-12 1836952]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2018-04-12 36864]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2018-04-12 91648]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2018-04-12 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2018-04-12 88576]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2018-04-12 171520]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2018-04-12 174592]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2018-04-12 526232]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2018-04-12 38912]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2018-04-12 32256]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2018-04-12 119808]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2018-04-12 505240]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2018-04-12 56736]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2018-04-12 842648]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2018-04-12 108952]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2018-04-12 175104]
S3 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\WINDOWS\System32\drivers\nvdimm.sys [2018-04-12 104448]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2018-04-12 105984]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2018-04-12 16896]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2018-04-12 945560]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2018-04-12 104448]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2018-04-12 33176]
S3 SpatialGraphFilter;Holographic Spatial Graph Filter; C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys [2018-04-12 57752]
S4 hvcrash;hvcrash; C:\WINDOWS\System32\drivers\hvcrash.sys [2018-04-12 33184]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2018-02-09 83984]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 CDPUserSvc_43602;CDPUserSvc_43602; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 EgisTec Data Security Service;EgisTec Data Security Service; C:\Program Files (x86)\EgisTec BioExcess\EgisDSService.exe [2010-05-28 314736]
R2 EgisTec Service Help;EgisTec Service Help; C:\Program Files (x86)\EgisTec Port Locker\Egishlpsvc.exe [2010-09-11 327024]
R2 EgisTec Service;EgisTec Service; C:\Program Files (x86)\EgisTec BioExcess\EgisService.exe [2010-05-28 709488]
R2 EPSON_EB_RPCV4_01;EPSON V5 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE [2007-12-17 163840]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE [2007-01-11 126464]
R2 ETDService;Elan Service; C:\Program Files\Elantech\ETDService.exe [2015-10-07 144072]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-09-30 268824]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2018-04-12 26112]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-04-12 136296]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-04-12 136296]
R2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-04-12 136296]
R2 OneSyncSvc_43602;OneSyncSvc_43602; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 RtLedService;RtLedService Installer; C:\Program Files\Realtek\RtLED\RtLEDService.exe [2010-02-05 311296]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2018-04-12 761440]
R2 SgrmBroker;@%SystemRoot%\System32\SgrmBroker.exe,-100; C:\WINDOWS\system32\SgrmBroker.exe [2018-04-12 163336]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-05-08 272384]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 AssignedAccessManagerSvc;@%SystemRoot%\system32\assignedaccessmanagersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BcastDVRUserService_43602;BcastDVRUserService_43602; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BluetoothUserService_43602;BluetoothUserService_43602; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 CaptureService;@%SystemRoot%\system32\CaptureService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 CaptureService_43602;CaptureService_43602; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicePickerUserSvc_43602;DevicePickerUserSvc_43602; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc_43602;DevicesFlowUserSvc_43602; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2018-04-12 90624]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2018-05-22 43648]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MessagingService_43602;MessagingService_43602; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2018-05-22 194512]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PimIndexMaintenanceSvc_43602;PimIndexMaintenanceSvc_43602; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc_43602;PrintWorkflowUserSvc_43602; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 Sense;@%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2018-04-12 4737448]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2018-04-12 1273344]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 SharedRealitySvc;@%SystemRoot%\system32\SharedRealitySvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 spectrum;@%systemroot%\system32\spectrum.exe,-101; C:\WINDOWS\system32\spectrum.exe [2018-05-22 976384]
S4 AppVClient;@%systemroot%\system32\AppVClient.exe,-102; C:\WINDOWS\system32\AppVClient.exe [2018-05-22 826776]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2018-04-12 52832]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
-----------------EOF-----------------