VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Prosím o kontrolu logu.

https://forum.viry.cz:443/viewtopic.php?t=156865

Stránka 1 z 1

Prosím o kontrolu logu.

Napsal: 17 úno 2020 22:24
od Caparzo
Logfile of random's system information tool 1.10 (written by random/random)
Run by Noťas at 2020-02-17 22:23:32
Microsoft Windows 10 Pro N
System drive C: has 32 GB (27%) free of 119 GB
Total RAM: 3980 MB (47% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:23:36, on 17.02.2020
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.18362.0001)
Boot mode: Normal

Running processes:
C:\Users\Noťas\AppData\Local\MEGAsync\MEGAsync.exe
C:\Program Files\trend micro\Noťas.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [HP DeskJet 5000 (NET)] "C:\Program Files\HP\HP DeskJet 5000 series\Bin\ScanToPCActivationApp.exe" -deviceID "TH95E9D2MP:NW" -scfn "HP DeskJet 5000 (NET)" -AutoStart 1
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Startup: MEGAsync.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLMF.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Unknown owner - C:\Windows\System32\drivers\AdminService.exe (file missing)
O23 - Service: bookingDesktopApp Update Service (bookingdesktopapp) (bookingdesktopapp) - bookingDesktopApp. - C:\Program Files (x86)\bookingDesktopApp\Update\bookingDesktopAppUpdate.exe
O23 - Service: bookingDesktopApp Update Service (bookingdesktopappm) (bookingdesktopappm) - bookingDesktopApp. - C:\Program Files (x86)\bookingDesktopApp\Update\bookingDesktopAppUpdate.exe
O23 - Service: Služba Aktualizace Brave (brave) (brave) - BraveSoftware Inc. - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
O23 - Service: Služba Aktualizace Brave (bravem) (bravem) - BraveSoftware Inc. - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100 (CredentialEnrollmentManagerUserSvc) - Unknown owner - C:\Windows\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: CredentialEnrollmentManagerUserSvc_30882 - Unknown owner - C:\Windows\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Elan Service (ETDService) - ELAN Microelectronics Corp. - C:\Program Files\Elantech\ETDService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101 (perceptionsimulation) - Unknown owner - C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\Windows\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\Windows\system32\SgrmBroker.exe (file missing)
O23 - Service: @firewallapi.dll,-50323 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\Windows\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\Windows\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10167 bytes

======Listing Processes======









C:\Windows\system32\lsass.exe
"fontdrvhost.exe"
C:\Windows\system32\svchost.exe -k DcomLaunch -p -s PlugPlay
C:\Windows\system32\svchost.exe -k DcomLaunch -p
C:\Windows\system32\svchost.exe -k RPCSS -p
winlogon.exe
"fontdrvhost.exe"
C:\Windows\system32\svchost.exe -k DcomLaunch -p -s LSM
"dwm.exe"
C:\Windows\system32\svchost.exe -k netsvcs -p -s gpsvc
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService
C:\Windows\system32\svchost.exe -k LocalService -p -s bthserv
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -s BTAGService
C:\Windows\system32\svchost.exe -k LocalService -p -s BthAvctpSvc
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s TimeBrokerSvc
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DisplayEnhancementService
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s hidserv
C:\Windows\system32\svchost.exe -k netsvcs -p -s Schedule
C:\Windows\system32\svchost.exe -k netsvcs -p -s ProfSvc
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s EventLog
C:\Windows\system32\svchost.exe -k LocalService -p
C:\Windows\system32\svchost.exe -k LocalService -p -s nsi
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -s WPDBusEnum
C:\Windows\system32\svchost.exe -k netsvcs -p -s UserManager
C:\Windows\system32\svchost.exe -k appmodel -p -s StateRepository
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp
C:\Windows\system32\svchost.exe -k LocalService -p -s EventSystem
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s SysMain
C:\Windows\System32\svchost.exe -k netsvcs -p -s Themes
C:\Windows\system32\svchost.exe -k appmodel -p -s camsvc
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService

C:\Windows\system32\svchost.exe -k netsvcs -p -s SENS
C:\Windows\system32\igfxCUIService.exe
C:\Windows\System32\svchost.exe -k NetworkService -p -s NlaSvc
dashost.exe {ea173250-a5ce-42aa-b123ccc48e3248c4}
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s AudioEndpointBuilder
C:\Windows\system32\svchost.exe -k LocalService -p -s FontCache
C:\Windows\system32\svchost.exe -k NetworkService -p -s Dnscache
C:\Windows\system32\svchost.exe -k netsvcs -p -s Winmgmt
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\Windows\System32\svchost.exe -k LocalService -p -s netprofm
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\Windows\system32\AUDIODG.EXE 0x3cc
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s SSDPSRV
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s WinHttpAutoProxySvc
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p
C:\Windows\System32\svchost.exe -k netsvcs -p -s ShellHWDetection
dashost.exe {2b7a9775-e5c5-47e7-9fab9a019342bd25}
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p
C:\Windows\System32\svchost.exe -k NetworkService -p -s LanmanWorkstation

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork -p
C:\Windows\system32\svchost.exe -k LocalService -p -s DispBrokerDesktopSvc
C:\Windows\System32\drivers\AdminService.exe
C:\Windows\system32\svchost.exe -k NetworkService -p -s CryptSvc
C:\Windows\System32\svchost.exe -k utcsvc -p
C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork -p -s DPS
"C:\Program Files\Elantech\ETDService.exe"
C:\Windows\System32\svchost.exe -k NetSvcs -p -s iphlpsvc
C:\Windows\system32\svchost.exe -k netsvcs -p -s LanmanServer
C:\Windows\system32\svchost.exe -k LocalService -p -s SstpSvc
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TrkWks
C:\Windows\system32\svchost.exe -k netsvcs -p -s WpnService

C:\Windows\System32\svchost.exe -k LocalService -p -s WdiServiceHost
C:\Windows\System32\svchost.exe -k netsvcs
"C:\Program Files\Elantech\ETDCtrl.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s lmhosts
sihost.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc
C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork -p -s NcdAutoSetup
C:\Windows\system32\svchost.exe -k LocalService -p -s fdPHost
C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s WpnUserService
C:\Windows\system32\svchost.exe -k netsvcs -p -s TokenBroker
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted -p -s PolicyAgent
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s FDResPub
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\bookingDesktopApp\Update\bookingDesktopAppUpdate.exe" /c
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.12430.20264\OfficeClickToRun.exe" /update
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s PcaSvc
C:\Windows\system32\svchost.exe -k netsvcs -p -s Appinfo
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TabletInputService
"ctfmon.exe"
C:\Windows\system32\svchost.exe -k LocalService -p -s CDPSvc
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
igfxEM.exe
C:\Windows\Explorer.EXE
igfxHK.exe
igfxTray.exe

C:\Windows\system32\svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19123.13.0_x64__8wekyb3d8bbwe\YourPhone.exe" -ServerName:App.AppX9yct9q388jvt4h7y0gn06smzkxcsnt8m.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 768 772 780 8192 776
C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
C:\Windows\system32\msiexec.exe /V
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\smartscreen.exe -Embedding
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s WdiSystemHost
"C:\Windows\System32\SecurityHealthSystray.exe"

"C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe"
"C:\Program Files\HP\HP DeskJet 5000 series\Bin\ScanToPCActivationApp.exe" -deviceID "TH95E9D2MP:NW" -scfn "HP DeskJet 5000 (NET)" -AutoStart 1
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
"C:\Users\Noťas\AppData\Local\MEGAsync\MEGAsync.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -os-restarted
"C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE" /restore
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="7884.0.615819334\1579724997" -parentBuildID 20200117190643 -prefsHandle 1428 -prefMapHandle 1424 -prefsLen 1 -prefMapSize 220442 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" - 7884 "\\.\pipe\gecko-crash-server-pipe.7884" 1512 gpu
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="7884.1.1397015994\1311974339" -childID 1 -isForBrowser -prefsHandle 2356 -prefMapHandle 2404 -prefsLen 221 -prefMapSize 220442 -parentBuildID 20200117190643 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" - 7884 "\\.\pipe\gecko-crash-server-pipe.7884" 2360 tab
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="7884.13.606808693\586926494" -childID 2 -isForBrowser -prefsHandle 3508 -prefMapHandle 3504 -prefsLen 6534 -prefMapSize 220442 -parentBuildID 20200117190643 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" - 7884 "\\.\pipe\gecko-crash-server-pipe.7884" 3520 tab
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -contentproc --channel="7884.20.1914057885\1409962383" -childID 3 -isForBrowser -prefsHandle 4388 -prefMapHandle 4384 -prefsLen 7202 -prefMapSize 220442 -parentBuildID 20200117190643 -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" - 7884 "\\.\pipe\gecko-crash-server-pipe.7884" 4400 tab
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe"
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe"

"C:\Program Files\HP\HP DeskJet 5000 series\Bin\HPNetworkCommunicatorCom.exe" -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\system32\svchost.exe -k netsvcs -p -s UsoSvc
C:\Windows\System32\usocoreworker.exe -Embedding
C:\Windows\system32\svchost.exe -k netsvcs -p -s wuauserv
integrator.exe /I /Extension /Msi PackageGUID="9AC08E99-230B-47e8-9721-4577B7F124EA" PackageRoot="C:\Program Files\Microsoft Office\root"
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe"
c:\Windows\syswow64\MsiExec.exe -Embedding 8ECD81B76C86A5D22668CE1421BBD4EA E Global\MSI0000
c:\Windows\System32\MsiExec.exe -Embedding 2D3738ED7A103FE45339D5EC55706383 E Global\MSI0000
"C:\Users\Noťas\Desktop\RSITx64.exe"
c:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe install "c:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\AddInViews\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll" /queue:3 /NoDependencies
\??\C:\Windows\system32\conhost.exe 0x4

=========Mozilla firefox=========

ProfilePath - C:\Users\Noťas\AppData\Roaming\Mozilla\Firefox\Profiles\76qkxb08.default

prefs.js - "browser.startup.homepage" - "https://www.idnes.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 32.0.0.330 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_330.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@bookingdesktopapp.com/bookingDesktopApp Update;version=3]
"Description"=bookingDesktopApp Update
"Path"=C:\Program Files (x86)\bookingDesktopApp\Update\1.3.99.0\npbookingDesktopAppUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@bookingdesktopapp.com/bookingDesktopApp Update;version=9]
"Description"=bookingDesktopApp Update
"Path"=C:\Program Files (x86)\bookingDesktopApp\Update\1.3.99.0\npbookingDesktopAppUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.brave.com/BraveSoftware Update;version=3]
"Description"=BraveSoftware Update
"Path"=C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.brave.com/BraveSoftware Update;version=9]
"Description"=BraveSoftware Update
"Path"=C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=3.0.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 32.0.0.330 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_330.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2020-01-13 157904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Windows\system32\SecurityHealthSystray.exe [2020-02-11 84992]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2015-10-07 3242696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2019-12-10 371304]
"HP DeskJet 5000 (NET)"=C:\Program Files\HP\HP DeskJet 5000 series\Bin\ScanToPCActivationApp.exe [2019-03-18 4064160]

C:\Users\Noťas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MEGAsync.lnk - C:\Users\Noťas\AppData\Local\MEGAsync\MEGAsync.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CBDHSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CBDHSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinQuic]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"aux"=wdmaud.drv
"midi"=wdmaud.drv
"midimapper"=midimap.dll
"mixer"=wdmaud.drv
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wave"=wdmaud.drv
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2020-02-17 22:23:31 ----SHD---- C:\Config.Msi
2020-02-17 22:12:43 ----D---- C:\Program Files\trend micro
2020-02-17 22:12:42 ----D---- C:\rsit
2020-02-17 19:46:15 ----D---- C:\ProgramData\Visan
2020-02-17 19:46:15 ----D---- C:\ProgramData\HP Photo Creations
2020-02-17 19:46:15 ----D---- C:\Program Files (x86)\HP Photo Creations
2020-02-17 19:41:35 ----D---- C:\Program Files (x86)\HP
2020-02-17 19:41:32 ----D---- C:\Program Files\HP
2020-02-17 18:26:09 ----D---- C:\ProgramData\HP
2020-02-17 18:26:00 ----D---- C:\Users\Noťas\AppData\Roaming\HP_Easy_Start
2020-02-12 21:07:10 ----D---- C:\ProgramData\ssh
2020-02-11 21:35:14 ----A---- C:\Windows\system32\wbengine.exe
2020-02-11 21:35:13 ----A---- C:\Windows\SYSWOW64\cdp.dll
2020-02-11 21:35:11 ----A---- C:\Windows\system32\cdp.dll
2020-02-11 21:35:08 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2020-02-11 21:35:08 ----A---- C:\Windows\SYSWOW64\mfsrcsnk.dll
2020-02-11 21:35:08 ----A---- C:\Windows\SYSWOW64\DolbyDecMFT.dll
2020-02-11 21:35:08 ----A---- C:\Windows\system32\DolbyDecMFT.dll
2020-02-11 21:35:07 ----A---- C:\Windows\SYSWOW64\mfsvr.dll
2020-02-11 21:35:07 ----A---- C:\Windows\SYSWOW64\mfcore.dll
2020-02-11 21:35:07 ----A---- C:\Windows\SYSWOW64\mfasfsrcsnk.dll
2020-02-11 21:35:07 ----A---- C:\Windows\SYSWOW64\mf.dll
2020-02-11 21:35:07 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2020-02-11 21:35:07 ----A---- C:\Windows\system32\mfsrcsnk.dll
2020-02-11 21:35:07 ----A---- C:\Windows\system32\mfmpeg2srcsnk.dll
2020-02-11 21:35:06 ----A---- C:\Windows\system32\tssrvlic.dll
2020-02-11 21:35:06 ----A---- C:\Windows\system32\mfsvr.dll
2020-02-11 21:35:06 ----A---- C:\Windows\system32\mfcore.dll
2020-02-11 21:35:06 ----A---- C:\Windows\system32\mfasfsrcsnk.dll
2020-02-11 21:35:06 ----A---- C:\Windows\system32\mf.dll
2020-02-11 21:35:06 ----A---- C:\Windows\system32\lstelemetry.dll
2020-02-11 21:35:06 ----A---- C:\Windows\system32\LSCSHostPolicy.dll
2020-02-11 21:35:06 ----A---- C:\Windows\system32\cscui.dll
2020-02-11 21:35:05 ----A---- C:\Windows\SYSWOW64\Windows.Mirage.Internal.dll
2020-02-11 21:35:05 ----A---- C:\Windows\system32\drivers\AppvVfs.sys
2020-02-11 21:35:05 ----A---- C:\Windows\system32\drivers\AppvVemgr.sys
2020-02-11 21:35:05 ----A---- C:\Windows\system32\drivers\AppVStrm.sys
2020-02-11 21:35:05 ----A---- C:\Windows\system32\AppVClient.exe
2020-02-11 21:35:04 ----A---- C:\Windows\SYSWOW64\Windows.Mirage.dll
2020-02-11 21:35:04 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2020-02-11 21:35:04 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2020-02-11 21:35:04 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2020-02-11 21:35:04 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2020-02-11 21:35:03 ----A---- C:\Windows\SYSWOW64\rdpencom.dll
2020-02-11 21:35:03 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2020-02-11 21:35:03 ----A---- C:\Windows\SYSWOW64\msimsg.dll
2020-02-11 21:35:01 ----A---- C:\Windows\SYSWOW64\msi.dll
2020-02-11 21:35:01 ----A---- C:\Windows\SYSWOW64\iemigplugin.dll
2020-02-11 21:35:00 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2020-02-11 21:35:00 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2020-02-11 21:35:00 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2020-02-11 21:35:00 ----A---- C:\Windows\SYSWOW64\Chakrathunk.dll
2020-02-11 21:35:00 ----A---- C:\Windows\SYSWOW64\Chakradiag.dll
2020-02-11 21:34:59 ----A---- C:\Windows\SYSWOW64\IndexedDbLegacy.dll
2020-02-11 21:34:59 ----A---- C:\Windows\SYSWOW64\ieproxy.dll
2020-02-11 21:34:59 ----A---- C:\Windows\SYSWOW64\Chakra.dll
2020-02-11 21:34:57 ----A---- C:\Windows\SYSWOW64\webplatstorageserver.dll
2020-02-11 21:34:57 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2020-02-11 21:34:57 ----A---- C:\Windows\SYSWOW64\EdgeManager.dll
2020-02-11 21:34:55 ----A---- C:\Windows\SYSWOW64\werui.dll
2020-02-11 21:34:55 ----A---- C:\Windows\SYSWOW64\resutils.dll
2020-02-11 21:34:55 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2020-02-11 21:34:55 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2020-02-11 21:34:55 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2020-02-11 21:34:55 ----A---- C:\Windows\SYSWOW64\jscript.dll
2020-02-11 21:34:55 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2020-02-11 21:34:55 ----A---- C:\Windows\SYSWOW64\fdWSD.dll
2020-02-11 21:34:55 ----A---- C:\Windows\SYSWOW64\edgehtml.dll
2020-02-11 21:34:55 ----A---- C:\Windows\SYSWOW64\DWWIN.EXE
2020-02-11 21:34:55 ----A---- C:\Windows\SYSWOW64\dfrgui.exe
2020-02-11 21:34:54 ----A---- C:\Windows\SYSWOW64\fdSSDP.dll
2020-02-11 21:34:54 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2020-02-11 21:34:54 ----A---- C:\Windows\system32\Windows.Mirage.Internal.dll
2020-02-11 21:34:54 ----A---- C:\Windows\system32\sysmain.dll
2020-02-11 21:34:54 ----A---- C:\Windows\system32\SrTasks.exe
2020-02-11 21:34:54 ----A---- C:\Windows\system32\srrstr.dll
2020-02-11 21:34:54 ----A---- C:\Windows\system32\srcore.dll
2020-02-11 21:34:54 ----A---- C:\Windows\system32\rstrui.exe
2020-02-11 21:34:54 ----A---- C:\Windows\system32\recdisc.exe
2020-02-11 21:34:53 ----A---- C:\Windows\system32\Windows.Mirage.dll
2020-02-11 21:34:53 ----A---- C:\Windows\system32\tsgqec.dll
2020-02-11 21:34:53 ----A---- C:\Windows\system32\termsrv.dll
2020-02-11 21:34:53 ----A---- C:\Windows\system32\rdsdwmdr.dll
2020-02-11 21:34:53 ----A---- C:\Windows\system32\CPFilters.dll
2020-02-11 21:34:52 ----A---- C:\Windows\system32\tapisrv.dll
2020-02-11 21:34:52 ----A---- C:\Windows\system32\rdpudd.dll
2020-02-11 21:34:52 ----A---- C:\Windows\system32\rdpnano.dll
2020-02-11 21:34:52 ----A---- C:\Windows\system32\rdpencom.dll
2020-02-11 21:34:52 ----A---- C:\Windows\system32\rdpcore.dll
2020-02-11 21:34:52 ----A---- C:\Windows\system32\rdpclip.exe
2020-02-11 21:34:52 ----A---- C:\Windows\system32\mstscax.dll
2020-02-11 21:34:52 ----A---- C:\Windows\system32\mfsensorgroup.dll
2020-02-11 21:34:52 ----A---- C:\Windows\system32\FsIso.exe
2020-02-11 21:34:52 ----A---- C:\Windows\system32\FSClient.dll
2020-02-11 21:34:52 ----A---- C:\Windows\system32\FrameServer.dll
2020-02-11 21:34:51 ----A---- C:\Windows\system32\systemreset.exe
2020-02-11 21:34:51 ----A---- C:\Windows\system32\SysResetErr.exe
2020-02-11 21:34:51 ----A---- C:\Windows\system32\srms.dat
2020-02-11 21:34:51 ----A---- C:\Windows\system32\ResetEngOnline.dll
2020-02-11 21:34:51 ----A---- C:\Windows\system32\ResetEngine.exe
2020-02-11 21:34:51 ----A---- C:\Windows\system32\ResetEngine.dll
2020-02-11 21:34:51 ----A---- C:\Windows\system32\reseteng.dll
2020-02-11 21:34:51 ----A---- C:\Windows\system32\rdpcorets.dll
2020-02-11 21:34:51 ----A---- C:\Windows\system32\msimsg.dll
2020-02-11 21:34:51 ----A---- C:\Windows\system32\DscCore.dll
2020-02-11 21:34:51 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2020-02-11 21:34:51 ----A---- C:\Windows\system32\DAFMCP.dll
2020-02-11 21:34:50 ----A---- C:\Windows\system32\msi.dll
2020-02-11 21:34:50 ----A---- C:\Windows\system32\iemigplugin.dll
2020-02-11 21:34:49 ----A---- C:\Windows\system32\jscript9diag.dll
2020-02-11 21:34:49 ----A---- C:\Windows\system32\jscript9.dll
2020-02-11 21:34:49 ----A---- C:\Windows\system32\ieframe.dll
2020-02-11 21:34:49 ----A---- C:\Windows\system32\Chakrathunk.dll
2020-02-11 21:34:49 ----A---- C:\Windows\system32\Chakradiag.dll
2020-02-11 21:34:48 ----A---- C:\Windows\system32\IndexedDbLegacy.dll
2020-02-11 21:34:48 ----A---- C:\Windows\system32\ieproxy.dll
2020-02-11 21:34:48 ----A---- C:\Windows\system32\Chakra.dll
2020-02-11 21:34:45 ----A---- C:\Windows\system32\webplatstorageserver.dll
2020-02-11 21:34:45 ----A---- C:\Windows\system32\mshtml.dll
2020-02-11 21:34:45 ----A---- C:\Windows\system32\EdgeManager.dll
2020-02-11 21:34:42 ----A---- C:\Windows\system32\msfeedssync.exe
2020-02-11 21:34:42 ----A---- C:\Windows\system32\msfeedsbs.dll
2020-02-11 21:34:42 ----A---- C:\Windows\system32\msfeeds.dll
2020-02-11 21:34:42 ----A---- C:\Windows\system32\iedkcs32.dll
2020-02-11 21:34:42 ----A---- C:\Windows\system32\ie4uinit.exe
2020-02-11 21:34:42 ----A---- C:\Windows\system32\edgehtml.dll
2020-02-11 21:34:41 ----A---- C:\Windows\system32\werui.dll
2020-02-11 21:34:41 ----A---- C:\Windows\system32\wercplsupport.dll
2020-02-11 21:34:41 ----A---- C:\Windows\system32\werconcpl.dll
2020-02-11 21:34:41 ----A---- C:\Windows\system32\jscript.dll
2020-02-11 21:34:41 ----A---- C:\Windows\system32\fdWSD.dll
2020-02-11 21:34:41 ----A---- C:\Windows\system32\DWWIN.EXE
2020-02-11 21:34:41 ----A---- C:\Windows\system32\DispBroker.Desktop.dll
2020-02-11 21:34:41 ----A---- C:\Windows\system32\dfrgui.exe
2020-02-11 21:34:41 ----A---- C:\Windows\system32\defragsvc.dll
2020-02-11 21:34:41 ----A---- C:\Windows\system32\Defrag.exe
2020-02-11 21:34:41 ----A---- C:\Windows\system32\ClipUp.exe
2020-02-11 21:34:38 ----A---- C:\Windows\system32\sdshext.dll
2020-02-11 21:34:38 ----A---- C:\Windows\system32\sdrsvc.dll
2020-02-11 21:34:38 ----A---- C:\Windows\system32\sdengin2.dll
2020-02-11 21:34:38 ----A---- C:\Windows\system32\sdclt.exe
2020-02-11 21:34:38 ----A---- C:\Windows\system32\resutils.dll
2020-02-11 21:34:38 ----A---- C:\Windows\system32\clusapi.dll
2020-02-11 21:34:35 ----A---- C:\Windows\system32\tcbloader.dll
2020-02-11 21:34:35 ----A---- C:\Windows\system32\skci.dll
2020-02-11 21:34:34 ----A---- C:\Windows\system32\tcblaunch.exe
2020-02-11 21:34:34 ----A---- C:\Windows\system32\SgrmEnclave_secure.dll
2020-02-11 21:34:34 ----A---- C:\Windows\system32\securekernel.exe
2020-02-11 21:34:34 ----A---- C:\Windows\system32\kdhvcom.dll
2020-02-11 21:34:34 ----A---- C:\Windows\system32\hvloader.dll
2020-02-11 21:34:34 ----A---- C:\Windows\system32\hvix64.exe
2020-02-11 21:34:34 ----A---- C:\Windows\system32\hvax64.exe
2020-02-11 21:34:34 ----A---- C:\Windows\system32\fdSSDP.dll
2020-02-11 21:34:34 ----A---- C:\Windows\system32\drivers\hvservice.sys
2020-02-11 21:34:33 ----A---- C:\Windows\SYSWOW64\Windows.UI.FileExplorer.dll
2020-02-11 21:34:33 ----A---- C:\Windows\SYSWOW64\shell32.dll
2020-02-11 21:34:33 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2020-02-11 21:34:33 ----A---- C:\Windows\SYSWOW64\rdpviewerax.dll
2020-02-11 21:34:33 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2020-02-11 21:34:33 ----A---- C:\Windows\SYSWOW64\puiapi.dll
2020-02-11 21:34:33 ----A---- C:\Windows\SYSWOW64\printui.exe
2020-02-11 21:34:33 ----A---- C:\Windows\SYSWOW64\findnetprinters.dll
2020-02-11 21:34:33 ----A---- C:\Windows\SYSWOW64\edgeIso.dll
2020-02-11 21:34:33 ----A---- C:\Windows\SYSWOW64\DafPrintProvider.dll
2020-02-11 21:34:33 ----A---- C:\Windows\SYSWOW64\compstui.dll
2020-02-11 21:34:33 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2020-02-11 21:34:32 ----A---- C:\Windows\SYSWOW64\wininet.dll
2020-02-11 21:34:32 ----A---- C:\Windows\SYSWOW64\Windows.UI.Immersive.dll
2020-02-11 21:34:32 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2020-02-11 21:34:32 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2020-02-11 21:34:32 ----A---- C:\Windows\SYSWOW64\msIso.dll
2020-02-11 21:34:32 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2020-02-11 21:34:32 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2020-02-11 21:34:31 ----A---- C:\Windows\SYSWOW64\WinTypes.dll
2020-02-11 21:34:31 ----A---- C:\Windows\SYSWOW64\wincorlib.dll
2020-02-11 21:34:31 ----A---- C:\Windows\SYSWOW64\wermgr.exe
2020-02-11 21:34:31 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2020-02-11 21:34:31 ----A---- C:\Windows\SYSWOW64\WerFault.exe
2020-02-11 21:34:31 ----A---- C:\Windows\SYSWOW64\weretw.dll
2020-02-11 21:34:31 ----A---- C:\Windows\SYSWOW64\werdiagcontroller.dll
2020-02-11 21:34:31 ----A---- C:\Windows\SYSWOW64\wer.dll
2020-02-11 21:34:31 ----A---- C:\Windows\SYSWOW64\Websocket.dll
2020-02-11 21:34:31 ----A---- C:\Windows\SYSWOW64\webio.dll
2020-02-11 21:34:31 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2020-02-11 21:34:31 ----A---- C:\Windows\SYSWOW64\keyiso.dll
2020-02-11 21:34:31 ----A---- C:\Windows\SYSWOW64\combase.dll
2020-02-11 21:34:30 ----A---- C:\Windows\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2020-02-11 21:34:30 ----A---- C:\Windows\SYSWOW64\Windows.Media.MediaControl.dll
2020-02-11 21:34:30 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2020-02-11 21:34:30 ----A---- C:\Windows\SYSWOW64\usoapi.dll
2020-02-11 21:34:29 ----A---- C:\Windows\SYSWOW64\win32u.dll
2020-02-11 21:34:29 ----A---- C:\Windows\SYSWOW64\win32kfull.sys
2020-02-11 21:34:29 ----A---- C:\Windows\SYSWOW64\win32k.sys
2020-02-11 21:34:29 ----A---- C:\Windows\SYSWOW64\user32.dll
2020-02-11 21:34:29 ----A---- C:\Windows\SYSWOW64\rdpserverbase.dll
2020-02-11 21:34:29 ----A---- C:\Windows\SYSWOW64\rdpbase.dll
2020-02-11 21:34:29 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2020-02-11 21:34:28 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2020-02-11 21:34:28 ----A---- C:\Windows\SYSWOW64\BCP47mrm.dll
2020-02-11 21:34:28 ----A---- C:\Windows\SYSWOW64\BCP47Langs.dll
2020-02-11 21:34:27 ----A---- C:\Windows\SYSWOW64\Winlangdb.dll
2020-02-11 21:34:27 ----A---- C:\Windows\SYSWOW64\windows.storage.dll
2020-02-11 21:34:27 ----A---- C:\Windows\SYSWOW64\UserLanguageProfileCallback.dll
2020-02-11 21:34:27 ----A---- C:\Windows\SYSWOW64\tquery.dll
2020-02-11 21:34:27 ----A---- C:\Windows\SYSWOW64\rdpsharercom.dll
2020-02-11 21:34:27 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2020-02-11 21:34:27 ----A---- C:\Windows\SYSWOW64\mssprxy.dll
2020-02-11 21:34:27 ----A---- C:\Windows\SYSWOW64\globinputhost.dll
2020-02-11 21:34:26 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2020-02-11 21:34:26 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2020-02-11 21:34:26 ----A---- C:\Windows\SYSWOW64\Search.ProtocolHandler.MAPI2.dll
2020-02-11 21:34:26 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2020-02-11 21:34:26 ----A---- C:\Windows\SYSWOW64\mssph.dll
2020-02-11 21:34:21 ----A---- C:\Windows\SYSWOW64\Windows.System.Launcher.dll
2020-02-11 21:34:21 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2020-02-11 21:34:21 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2020-02-11 21:34:21 ----A---- C:\Windows\SYSWOW64\mssitlb.dll
2020-02-11 21:34:21 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2020-02-11 21:34:21 ----A---- C:\Windows\SYSWOW64\ActivationManager.dll
2020-02-11 21:34:20 ----A---- C:\Windows\SYSWOW64\twinui.dll
2020-02-11 21:34:20 ----A---- C:\Windows\SYSWOW64\twinapi.dll
2020-02-11 21:34:20 ----A---- C:\Windows\SYSWOW64\regapi.dll
2020-02-11 21:34:20 ----A---- C:\Windows\SYSWOW64\msutb.dll
2020-02-11 21:34:20 ----A---- C:\Windows\SYSWOW64\explorer.exe
2020-02-11 21:34:19 ----A---- C:\Windows\SYSWOW64\SpatialAudioLicenseSrv.exe
2020-02-11 21:34:19 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2020-02-11 21:34:19 ----A---- C:\Windows\SYSWOW64\remoteaudioendpoint.dll
2020-02-11 21:34:19 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2020-02-11 21:34:19 ----A---- C:\Windows\SYSWOW64\mciwave.dll
2020-02-11 21:34:19 ----A---- C:\Windows\SYSWOW64\mciseq.dll
2020-02-11 21:34:19 ----A---- C:\Windows\SYSWOW64\mcicda.dll
2020-02-11 21:34:19 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2020-02-11 21:34:19 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2020-02-11 21:34:19 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2020-02-11 21:34:19 ----A---- C:\Windows\system32\Windows.UI.FileExplorer.dll
2020-02-11 21:34:18 ----A---- C:\Windows\system32\rtutils.dll
2020-02-11 21:34:18 ----A---- C:\Windows\system32\rdpviewerax.dll
2020-02-11 21:34:18 ----A---- C:\Windows\system32\rasmans.dll
2020-02-11 21:34:18 ----A---- C:\Windows\system32\puiobj.dll
2020-02-11 21:34:18 ----A---- C:\Windows\system32\puiapi.dll
2020-02-11 21:34:18 ----A---- C:\Windows\system32\printui.exe
2020-02-11 21:34:18 ----A---- C:\Windows\system32\MBR2GPT.EXE
2020-02-11 21:34:18 ----A---- C:\Windows\system32\ipnathlp.dll
2020-02-11 21:34:18 ----A---- C:\Windows\system32\icsunattend.exe
2020-02-11 21:34:18 ----A---- C:\Windows\system32\findnetprinters.dll
2020-02-11 21:34:18 ----A---- C:\Windows\system32\DafPrintProvider.dll
2020-02-11 21:34:18 ----A---- C:\Windows\system32\comctl32.dll
2020-02-11 21:34:17 ----A---- C:\Windows\system32\xpsservices.dll
2020-02-11 21:34:17 ----A---- C:\Windows\system32\XpsPrint.dll
2020-02-11 21:34:17 ----A---- C:\Windows\system32\SystemSettings.Handlers.dll
2020-02-11 21:34:17 ----A---- C:\Windows\system32\nlmsprep.dll
2020-02-11 21:34:17 ----A---- C:\Windows\system32\compstui.dll
2020-02-11 21:34:16 ----A---- C:\Windows\system32\npmproxy.dll
2020-02-11 21:34:16 ----A---- C:\Windows\system32\nlmproxy.dll
2020-02-11 21:34:16 ----A---- C:\Windows\system32\netprofmsvc.dll
2020-02-11 21:34:16 ----A---- C:\Windows\system32\netprofm.dll
2020-02-11 21:34:15 ----A---- C:\Windows\system32\wininet.dll
2020-02-11 21:34:15 ----A---- C:\Windows\system32\urlmon.dll
2020-02-11 21:34:15 ----A---- C:\Windows\system32\msIso.dll
2020-02-11 21:34:15 ----A---- C:\Windows\system32\iertutil.dll
2020-02-11 21:34:15 ----A---- C:\Windows\system32\edgeIso.dll
2020-02-11 21:34:14 ----A---- C:\Windows\system32\Windows.UI.Immersive.dll
2020-02-11 21:34:14 ----A---- C:\Windows\system32\WebRuntimeManager.dll
2020-02-11 21:34:14 ----A---- C:\Windows\system32\SecurityHealthService.exe
2020-02-11 21:34:14 ----A---- C:\Windows\system32\SecurityHealthProxyStub.dll
2020-02-11 21:34:14 ----A---- C:\Windows\system32\SecurityHealthHost.exe
2020-02-11 21:34:14 ----A---- C:\Windows\system32\SecurityHealthAgent.dll
2020-02-11 21:34:13 ----A---- C:\Windows\SYSWOW64\NetSetupEngine.dll
2020-02-11 21:34:13 ----A---- C:\Windows\SYSWOW64\NetSetupApi.dll
2020-02-11 21:34:13 ----A---- C:\Windows\SYSWOW64\NetDriverInstall.dll
2020-02-11 21:34:13 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2020-02-11 21:34:13 ----A---- C:\Windows\system32\wow64cpu.dll
2020-02-11 21:34:13 ----A---- C:\Windows\system32\wow64.dll
2020-02-11 21:34:13 ----A---- C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2020-02-11 21:34:13 ----A---- C:\Windows\system32\drivers\clfs.sys
2020-02-11 21:34:12 ----A---- C:\Windows\system32\NetSetupEngine.dll
2020-02-11 21:34:12 ----A---- C:\Windows\system32\NetSetupApi.dll
2020-02-11 21:34:12 ----A---- C:\Windows\system32\netlogon.dll
2020-02-11 21:34:12 ----A---- C:\Windows\system32\NetDriverInstall.dll
2020-02-11 21:34:12 ----A---- C:\Windows\system32\KernelBase.dll
2020-02-11 21:34:12 ----A---- C:\Windows\system32\drivers\tcpip.sys
2020-02-11 21:34:12 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2020-02-11 21:34:12 ----A---- C:\Windows\system32\drivers\afd.sys
2020-02-11 21:34:11 ----A---- C:\Windows\system32\rpcrt4.dll
2020-02-11 21:34:11 ----A---- C:\Windows\system32\drivers\ndis.sys
2020-02-11 21:34:10 ----A---- C:\Windows\system32\ntoskrnl.exe
2020-02-11 21:34:10 ----A---- C:\Windows\system32\ntdll.dll
2020-02-11 21:34:10 ----A---- C:\Windows\system32\hal.dll
2020-02-11 21:34:04 ----A---- C:\Windows\system32\wersvc.dll
2020-02-11 21:34:04 ----A---- C:\Windows\system32\wermgr.exe
2020-02-11 21:34:04 ----A---- C:\Windows\system32\WerFaultSecure.exe
2020-02-11 21:34:04 ----A---- C:\Windows\system32\WerFault.exe
2020-02-11 21:34:04 ----A---- C:\Windows\system32\weretw.dll
2020-02-11 21:34:04 ----A---- C:\Windows\system32\werdiagcontroller.dll
2020-02-11 21:34:04 ----A---- C:\Windows\system32\wer.dll
2020-02-11 21:34:04 ----A---- C:\Windows\system32\runexehelper.exe
2020-02-11 21:34:04 ----A---- C:\Windows\system32\Faultrep.dll
2020-02-11 21:34:04 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2020-02-11 21:34:03 ----A---- C:\Windows\system32\Websocket.dll
2020-02-11 21:34:03 ----A---- C:\Windows\system32\webio.dll
2020-02-11 21:34:03 ----A---- C:\Windows\system32\utcutil.dll
2020-02-11 21:34:03 ----A---- C:\Windows\system32\offlinelsa.dll
2020-02-11 21:34:03 ----A---- C:\Windows\system32\lsasrv.dll
2020-02-11 21:34:03 ----A---- C:\Windows\system32\logoncli.dll
2020-02-11 21:34:03 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2020-02-11 21:34:03 ----A---- C:\Windows\system32\drivers\http.sys
2020-02-11 21:34:03 ----A---- C:\Windows\system32\diagtrack.dll
2020-02-11 21:34:02 ----A---- C:\Windows\system32\WinTypes.dll
2020-02-11 21:34:02 ----A---- C:\Windows\system32\wincorlib.dll
2020-02-11 21:34:02 ----A---- C:\Windows\system32\profsvc.dll
2020-02-11 21:34:02 ----A---- C:\Windows\system32\keyiso.dll
2020-02-11 21:34:02 ----A---- C:\Windows\system32\combase.dll
2020-02-11 21:34:02 ----A---- C:\Windows\system32\ci.dll
2020-02-11 21:34:01 ----A---- C:\Windows\system32\wsqmcons.exe
2020-02-11 21:34:01 ----A---- C:\Windows\system32\twinui.dll
2020-02-11 21:34:01 ----A---- C:\Windows\system32\twinapi.dll
2020-02-11 21:34:01 ----A---- C:\Windows\system32\sppobjs.dll
2020-02-11 21:34:01 ----A---- C:\Windows\system32\regapi.dll
2020-02-11 21:34:01 ----A---- C:\Windows\system32\msutb.dll
2020-02-11 21:34:00 ----A---- C:\Windows\system32\sppsvc.exe
2020-02-11 21:34:00 ----A---- C:\Windows\system32\SppExtComObj.Exe
2020-02-11 21:34:00 ----A---- C:\Windows\system32\sppcext.dll
2020-02-11 21:34:00 ----A---- C:\Windows\system32\pidgenx.dll
2020-02-11 21:33:59 ----A---- C:\Windows\system32\shell32.dll
2020-02-11 21:33:59 ----A---- C:\Windows\system32\dwmcore.dll
2020-02-11 21:33:58 ----A---- C:\Windows\system32\wimserv.exe
2020-02-11 21:33:58 ----A---- C:\Windows\system32\wimgapi.dll
2020-02-11 21:33:58 ----A---- C:\Windows\system32\uDWM.dll
2020-02-11 21:33:58 ----A---- C:\Windows\system32\drivers\wimmount.sys
2020-02-11 21:33:57 ----A---- C:\Windows\system32\winresume.exe
2020-02-11 21:33:57 ----A---- C:\Windows\system32\winload.exe
2020-02-11 21:33:56 ----A---- C:\Windows\system32\Windows.Media.MediaControl.dll
2020-02-11 21:33:56 ----A---- C:\Windows\system32\Win32CompatibilityAppraiserCSP.dll
2020-02-11 21:33:56 ----A---- C:\Windows\system32\win32appinventorycsp.dll
2020-02-11 21:33:56 ----A---- C:\Windows\system32\SettingsHandlers_Notifications.dll
2020-02-11 21:33:56 ----A---- C:\Windows\system32\invagent.dll
2020-02-11 21:33:56 ----A---- C:\Windows\system32\appraiser.dll
2020-02-11 21:33:56 ----A---- C:\Windows\system32\aeinv.dll
2020-02-11 21:33:56 ----A---- C:\Windows\system32\acmigration.dll
2020-02-11 21:33:54 ----A---- C:\Windows\system32\SecurityHealthSystray.exe
2020-02-11 21:33:54 ----A---- C:\Windows\system32\NotificationController.dll
2020-02-11 21:33:54 ----A---- C:\Windows\system32\DevicePairingExperienceMEM.dll
2020-02-11 21:33:53 ----A---- C:\Windows\system32\SecurityHealthSSO.dll
2020-02-11 21:33:52 ----A---- C:\Windows\system32\twinui.pcshell.dll
2020-02-11 21:33:52 ----A---- C:\Windows\system32\MusNotifyIcon.exe
2020-02-11 21:33:52 ----A---- C:\Windows\system32\musdialoghandlers.dll
2020-02-11 21:33:51 ----A---- C:\Windows\system32\usosvc.dll
2020-02-11 21:33:51 ----A---- C:\Windows\system32\usocoreworker.exe
2020-02-11 21:33:51 ----A---- C:\Windows\system32\UsoClient.exe
2020-02-11 21:33:51 ----A---- C:\Windows\system32\usoapi.dll
2020-02-11 21:33:51 ----A---- C:\Windows\system32\MusUpdateHandlers.dll
2020-02-11 21:33:51 ----A---- C:\Windows\system32\MusNotificationUx.exe
2020-02-11 21:33:51 ----A---- C:\Windows\system32\MusNotification.exe
2020-02-11 21:33:50 ----A---- C:\Windows\system32\win32u.dll
2020-02-11 21:33:50 ----A---- C:\Windows\system32\win32kfull.sys
2020-02-11 21:33:50 ----A---- C:\Windows\system32\win32k.sys
2020-02-11 21:33:50 ----A---- C:\Windows\system32\SettingsHandlers_SpeechPrivacy.dll
2020-02-11 21:33:50 ----A---- C:\Windows\system32\drivers\bindflt.sys
2020-02-11 21:33:50 ----A---- C:\Windows\system32\bindflt.dll
2020-02-11 21:33:49 ----A---- C:\Windows\system32\user32.dll
2020-02-11 21:33:49 ----A---- C:\Windows\system32\StructuredQuery.dll
2020-02-11 21:33:49 ----A---- C:\Windows\system32\rdpserverbase.dll
2020-02-11 21:33:49 ----A---- C:\Windows\system32\rdpbase.dll
2020-02-11 21:33:49 ----A---- C:\Windows\system32\kerberos.dll
2020-02-11 21:33:49 ----A---- C:\Windows\system32\BCP47mrm.dll
2020-02-11 21:33:49 ----A---- C:\Windows\system32\BCP47Langs.dll
2020-02-11 21:33:48 ----A---- C:\Windows\system32\Winlangdb.dll
2020-02-11 21:33:48 ----A---- C:\Windows\system32\windows.storage.dll
2020-02-11 21:33:48 ----A---- C:\Windows\system32\UserLanguageProfileCallback.dll
2020-02-11 21:33:48 ----A---- C:\Windows\system32\globinputhost.dll
2020-02-11 21:33:47 ----A---- C:\Windows\system32\Windows.UI.Core.TextInput.dll
2020-02-11 21:33:47 ----A---- C:\Windows\system32\WaaSMedicSvc.dll
2020-02-11 21:33:47 ----A---- C:\Windows\system32\WaaSMedicPS.dll
2020-02-11 21:33:47 ----A---- C:\Windows\system32\WaaSMedicCapsule.dll
2020-02-11 21:33:47 ----A---- C:\Windows\system32\WaaSMedicAgent.exe
2020-02-11 21:33:47 ----A---- C:\Windows\system32\TextInputFramework.dll
2020-02-11 21:33:47 ----A---- C:\Windows\system32\rdpsharercom.dll
2020-02-11 21:33:47 ----A---- C:\Windows\system32\ISM.dll
2020-02-11 21:33:47 ----A---- C:\Windows\system32\InputLocaleManager.dll
2020-02-11 21:33:46 ----A---- C:\Windows\system32\WordBreakers.dll
2020-02-11 21:33:46 ----A---- C:\Windows\system32\TextInputMethodFormatter.dll
2020-02-11 21:33:46 ----A---- C:\Windows\system32\InputService.dll
2020-02-11 21:33:46 ----A---- C:\Windows\system32\EditBufferTestHook.dll
2020-02-11 21:33:40 ----A---- C:\Windows\system32\tquery.dll
2020-02-11 21:33:40 ----A---- C:\Windows\system32\Search.ProtocolHandler.MAPI2.dll
2020-02-11 21:33:40 ----A---- C:\Windows\system32\mssvp.dll
2020-02-11 21:33:40 ----A---- C:\Windows\system32\mssrch.dll
2020-02-11 21:33:40 ----A---- C:\Windows\system32\mssprxy.dll
2020-02-11 21:33:39 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2020-02-11 21:33:39 ----A---- C:\Windows\system32\SearchIndexer.exe
2020-02-11 21:33:39 ----A---- C:\Windows\system32\SearchFilterHost.exe
2020-02-11 21:33:39 ----A---- C:\Windows\system32\mssph.dll
2020-02-11 21:33:39 ----A---- C:\Windows\system32\mssitlb.dll
2020-02-11 21:33:39 ----A---- C:\Windows\system32\msscntrs.dll
2020-02-11 21:33:39 ----A---- C:\Windows\system32\EdgeContent.dll
2020-02-11 21:33:38 ----A---- C:\Windows\system32\dosvc.dll
2020-02-11 21:33:26 ----A---- C:\Windows\system32\wuuhosdeployment.dll
2020-02-11 21:33:26 ----A---- C:\Windows\system32\wups2.dll
2020-02-11 21:33:26 ----A---- C:\Windows\system32\wuaueng.dll
2020-02-11 21:33:26 ----A---- C:\Windows\system32\wuauclt.exe
2020-02-11 21:33:26 ----A---- C:\Windows\system32\UpdateDeploymentProvider.dll
2020-02-11 21:33:26 ----A---- C:\Windows\system32\bisrv.dll
2020-02-11 21:33:25 ----A---- C:\Windows\system32\win32kbase.sys
2020-02-11 21:33:25 ----A---- C:\Windows\system32\SettingsHandlers_CapabilityAccess.dll
2020-02-11 21:33:25 ----A---- C:\Windows\system32\drivers\dxgmms2.sys
2020-02-11 21:33:25 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2020-02-11 21:33:25 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2020-02-11 21:33:25 ----A---- C:\Windows\system32\ClipSVC.dll
2020-02-11 21:33:25 ----A---- C:\Windows\system32\cdd.dll
2020-02-11 21:33:24 ----A---- C:\Windows\system32\Windows.System.Launcher.dll
2020-02-11 21:33:24 ----A---- C:\Windows\system32\SettingsHandlers_BackgroundApps.dll
2020-02-11 21:33:24 ----A---- C:\Windows\system32\SettingsHandlers_AppExecutionAlias.dll
2020-02-11 21:33:24 ----A---- C:\Windows\system32\dstokenclean.exe
2020-02-11 21:33:24 ----A---- C:\Windows\system32\dssvc.dll
2020-02-11 21:33:24 ----A---- C:\Windows\system32\CustomInstallExec.exe
2020-02-11 21:33:24 ----A---- C:\Windows\system32\cloudAP.dll
2020-02-11 21:33:24 ----A---- C:\Windows\system32\cdpsvc.dll
2020-02-11 21:33:24 ----A---- C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2020-02-11 21:33:24 ----A---- C:\Windows\system32\AppXApplicabilityBlob.dll
2020-02-11 21:33:24 ----A---- C:\Windows\system32\ApplyTrustOffline.exe
2020-02-11 21:33:24 ----A---- C:\Windows\system32\ActivationManager.dll
2020-02-11 21:33:23 ----A---- C:\Windows\system32\AppXDeploymentServer.dll
2020-02-11 21:33:23 ----A---- C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2020-02-11 21:33:20 ----A---- C:\Windows\system32\Windows.UI.Xaml.dll
2020-02-11 21:33:20 ----A---- C:\Windows\system32\ReAgent.dll
2020-02-11 21:33:19 ----A---- C:\Windows\system32\Windows.UI.AppDefaults.dll
2020-02-11 21:33:19 ----A---- C:\Windows\system32\StartTileData.dll
2020-02-11 21:33:18 ----A---- C:\Windows\system32\wifitask.exe
2020-02-11 21:33:18 ----A---- C:\Windows\system32\wifinetworkmanager.dll
2020-02-11 21:33:18 ----A---- C:\Windows\system32\SettingsHandlers_StorageSense.dll
2020-02-11 21:33:18 ----A---- C:\Windows\system32\drivers\winnat.sys
2020-02-11 21:33:18 ----A---- C:\Windows\system32\drivers\storport.sys
2020-02-11 21:33:18 ----A---- C:\Windows\system32\DeviceDirectoryClient.dll
2020-02-11 21:33:18 ----A---- C:\Windows\explorer.exe
2020-02-11 21:33:17 ----A---- C:\Windows\system32\SpatialAudioLicenseSrv.exe
2020-02-11 21:33:17 ----A---- C:\Windows\system32\audiosrv.dll
2020-02-11 21:33:17 ----A---- C:\Windows\system32\audioresourceregistrar.dll
2020-02-11 21:33:17 ----A---- C:\Windows\system32\AUDIOKSE.dll
2020-02-11 21:33:17 ----A---- C:\Windows\system32\AudioEndpointBuilder.dll
2020-02-11 21:33:17 ----A---- C:\Windows\system32\audiodg.exe
2020-02-11 21:33:16 ----A---- C:\Windows\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-02-11 21:33:16 ----A---- C:\Windows\system32\remoteaudioendpoint.dll
2020-02-11 21:33:16 ----A---- C:\Windows\system32\mciwave.dll
2020-02-11 21:33:16 ----A---- C:\Windows\system32\mciseq.dll
2020-02-11 21:33:16 ----A---- C:\Windows\system32\mcicda.dll
2020-02-11 21:33:16 ----A---- C:\Windows\system32\AudioSes.dll
2020-02-11 21:33:16 ----A---- C:\Windows\system32\AudioEng.dll
2020-02-11 21:33:16 ----A---- C:\Windows\system32\ApplicationControlCSP.dll
2020-02-11 21:33:16 ----A---- C:\Windows\system32\agentactivationruntimewindows.dll
2020-02-11 21:33:16 ----A---- C:\Windows\system32\agentactivationruntime.dll
2020-02-11 21:33:16 ----A---- C:\Windows\system32\AarSvc.dll
2020-02-11 21:33:15 ----A---- C:\Windows\system32\tellib.dll
2020-02-11 21:33:05 ----A---- C:\Windows\system32\drivers\sdbus.sys
2020-02-11 21:33:05 ----A---- C:\Windows\system32\drivers\dumpsd.sys
2020-02-11 21:33:04 ----A---- C:\Windows\system32\drivers\volmgr.sys
2020-02-11 21:33:04 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2020-02-11 21:33:04 ----A---- C:\Windows\system32\drivers\pci.sys
2020-02-11 20:55:20 ----A---- C:\Windows\system32\poqexec.exe
2020-02-11 20:55:17 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2020-01-22 09:01:30 ----D---- C:\Program Files (x86)\Mozilla Firefox

======List of files/folders modified in the last 1 month======

2020-02-17 22:23:37 ----RD---- C:\Windows\Microsoft.NET
2020-02-17 22:23:36 ----SHD---- C:\Windows\Installer
2020-02-17 22:23:36 ----D---- C:\Windows\Temp
2020-02-17 22:23:32 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2020-02-17 22:23:32 ----D---- C:\Program Files\Common Files\microsoft shared
2020-02-17 22:23:29 ----D---- C:\Windows\Prefetch
2020-02-17 22:22:37 ----D---- C:\Program Files\Microsoft Office
2020-02-17 22:22:03 ----D---- C:\Windows\System32
2020-02-17 22:22:03 ----A---- C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2020-02-17 22:21:52 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2020-02-17 22:21:37 ----D---- C:\Windows\system32\sru
2020-02-17 22:21:36 ----D---- C:\Windows\system32\catroot2
2020-02-17 22:12:43 ----RD---- C:\Program Files
2020-02-17 22:12:28 ----D---- C:\Windows\AppReadiness
2020-02-17 21:03:15 ----D---- C:\Windows\system32\SleepStudy
2020-02-17 20:36:44 ----HD---- C:\Program Files\WindowsApps
2020-02-17 20:13:16 ----D---- C:\Windows\system32\Tasks
2020-02-17 19:53:06 ----D---- C:\Windows\SysWOW64
2020-02-17 19:53:06 ----D---- C:\Windows\system32\drivers
2020-02-17 19:53:06 ----D---- C:\Windows\INF
2020-02-17 19:46:15 ----RD---- C:\Program Files (x86)
2020-02-17 19:46:15 ----HD---- C:\ProgramData
2020-02-17 19:42:45 ----D---- C:\Windows\debug
2020-02-17 19:42:24 ----D---- C:\Windows\system32\DriverStore
2020-02-17 19:42:24 ----D---- C:\Windows\system32\CatRoot
2020-02-17 19:41:37 ----RSD---- C:\Windows\Fonts
2020-02-17 19:41:35 ----D---- C:\Windows\twain_32
2020-02-17 06:41:33 ----D---- C:\Users\Noťas\AppData\Roaming\vlc
2020-02-12 21:39:58 ----D---- C:\Windows\system32\config
2020-02-12 21:13:38 ----A---- C:\Windows\system32\PerfStringBackup.INI
2020-02-12 21:11:23 ----D---- C:\Windows\WinSxS
2020-02-12 21:11:23 ----D---- C:\Windows\system32\SecureBootUpdates
2020-02-12 21:11:23 ----D---- C:\Windows\CbsTemp
2020-02-12 21:11:08 ----D---- C:\Windows\system32\WDI
2020-02-12 21:09:06 ----D---- C:\Windows
2020-02-12 21:07:13 ----D---- C:\Windows\SYSWOW64\oobe
2020-02-12 21:07:13 ----D---- C:\Windows\SYSWOW64\migration
2020-02-12 21:07:13 ----D---- C:\Windows\SYSWOW64\Dism
2020-02-12 21:07:13 ----D---- C:\Windows\SYSWOW64\cs-CZ
2020-02-12 21:07:12 ----D---- C:\Windows\SystemResources
2020-02-12 21:07:12 ----D---- C:\Windows\system32\WinBioPlugIns
2020-02-12 21:07:12 ----D---- C:\Windows\system32\wbem
2020-02-12 21:07:12 ----D---- C:\Windows\system32\SystemResetPlatform
2020-02-12 21:07:12 ----D---- C:\Windows\system32\oobe
2020-02-12 21:07:12 ----D---- C:\Windows\system32\migration
2020-02-12 21:07:12 ----D---- C:\Windows\system32\ja-jp
2020-02-12 21:07:12 ----D---- C:\Windows\system32\fr-FR
2020-02-12 21:07:12 ----D---- C:\Windows\system32\fr-CA
2020-02-12 21:07:12 ----D---- C:\Windows\system32\en-US
2020-02-12 21:07:12 ----D---- C:\Windows\system32\drivers\UMDF
2020-02-12 21:07:12 ----D---- C:\Windows\system32\Dism
2020-02-12 21:07:12 ----D---- C:\Windows\system32\de-DE
2020-02-12 21:07:12 ----D---- C:\Windows\system32\cs-CZ
2020-02-12 21:07:12 ----D---- C:\Windows\system32\Boot
2020-02-12 21:07:11 ----RD---- C:\Windows\PrintDialog
2020-02-12 21:07:11 ----RD---- C:\Windows\ImmersiveControlPanel
2020-02-12 21:07:11 ----D---- C:\Windows\ShellExperiences
2020-02-12 21:07:11 ----D---- C:\Windows\servicing
2020-02-12 21:07:11 ----D---- C:\Windows\bcastdvr
2020-02-12 21:07:11 ----D---- C:\Windows\apppatch
2020-02-12 21:07:11 ----D---- C:\Program Files\Internet Explorer
2020-02-12 21:07:11 ----D---- C:\Program Files (x86)\Internet Explorer
2020-02-12 21:06:31 ----D---- C:\Windows\minidump
2020-02-12 20:51:52 ----D---- C:\Users\Noťas\AppData\Roaming\DAEMON Tools Lite
2020-02-11 21:47:29 ----D---- C:\Windows\system32\MRT
2020-02-11 21:42:56 ----AC---- C:\Windows\system32\MRT.exe
2020-02-11 20:07:58 ----D---- C:\Windows\system32\Macromed
2020-02-11 20:07:53 ----D---- C:\Windows\SYSWOW64\Macromed
2020-02-04 15:42:25 ----D---- C:\Windows\system32\drivers\wd
2020-02-03 21:56:32 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\Windows\system32\drivers\iorate.sys [2019-03-19 56632]
R0 MsSecFlt;@%SystemRoot%\System32\Drivers\mssecflt.sys,-1001; C:\Windows\system32\drivers\mssecflt.sys [2019-11-13 252944]
R0 SgrmAgent;@%SystemRoot%\System32\Drivers\SgrmAgent.sys,-1001; C:\Windows\system32\drivers\SgrmAgent.sys [2019-03-19 89096]
R1 afunix;afunix; C:\Windows\system32\drivers\afunix.sys [2019-03-19 40960]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\Windows\system32\drivers\bam.sys [2019-03-19 70456]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\Windows\system32\drivers\filecrypt.sys [2019-03-19 59392]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\Windows\System32\drivers\gpuenergydrv.sys [2019-03-19 8704]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\Windows\system32\drivers\cldflt.sys [2019-12-11 457216]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\Windows\system32\drivers\mmcss.sys [2019-03-19 53760]
R3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\System32\drivers\athw8x.sys [2019-03-19 4233728]
R3 bScsiSDa;bScsiSDa; C:\Windows\System32\drivers\bScsiSDa.sys [2015-09-25 99560]
R3 BtFilter;BtFilter; C:\Windows\System32\drivers\btfilter.sys [2018-06-26 69440]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\Windows\System32\drivers\BthEnum.sys [2019-11-13 114688]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\Windows\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [2019-03-19 97280]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\System32\drivers\bthpan.sys [2019-03-19 133120]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\drivers\BTHUSB.sys [2019-11-13 98304]
R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\Windows\System32\drivers\CAD.sys [2019-03-19 64312]
R3 dtlitescsibus;@oem9.inf,%DisplayName%;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\System32\drivers\dtlitescsibus.sys [2019-12-10 42256]
R3 dtliteusbbus;@oem10.inf,%DisplayName%;DAEMON Tools Lite Virtual USB Bus; C:\Windows\System32\drivers\dtliteusbbus.sys [2019-12-10 59360]
R3 ETD;@oem5.inf,%PS2.DeviceDesc%;ELAN Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2015-10-07 525512]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2015-09-30 6278392]
R3 k57nd60a;@netk57a.inf,%SvcDispName%;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\System32\drivers\k57nd60a.sys [2019-03-19 446464]
R3 MEIx64;@oem2.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\System32\drivers\TeeDriverW8x64.sys [2017-10-17 206496]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\System32\drivers\rfcomm.sys [2019-03-19 211456]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\Windows\System32\drivers\bttflt.sys [2019-03-19 42808]
S0 cht4iscsi;cht4iscsi; C:\Windows\System32\drivers\cht4sx64.sys [2019-03-19 319528]
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\Windows\System32\drivers\iaStorAVC.sys [2019-03-19 885048]
S0 ItSas35i;ItSas35i; C:\Windows\System32\drivers\ItSas35i.sys [2019-03-19 148520]
S0 LSI_SAS2i;LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [2019-03-19 124448]
S0 LSI_SAS3i;LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [2019-03-19 128528]
S0 megasas2i;megasas2i; C:\Windows\System32\drivers\MegaSas2i.sys [2019-03-19 75280]
S0 megasas35i;megasas35i; C:\Windows\System32\drivers\megasas35i.sys [2019-03-19 94736]
S0 percsas2i;percsas2i; C:\Windows\System32\drivers\percsas2i.sys [2019-03-19 58896]
S0 percsas3i;percsas3i; C:\Windows\System32\drivers\percsas3i.sys [2019-03-19 68624]
S0 Ramdisk;Windows RAM Disk Driver; C:\Windows\system32\DRIVERS\ramdisk.sys [2019-03-19 41784]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\Windows\System32\drivers\scmbus.sys [2019-03-19 151352]
S0 SmartSAMD;SmartSAMD; C:\Windows\System32\drivers\SmartSAMD.sys [2019-03-19 220176]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\Windows\System32\drivers\AcpiDev.sys [2019-03-19 20992]
S3 Acx01000;@%SystemRoot%\system32\drivers\Acx01000.sys,-1000; C:\Windows\system32\drivers\Acx01000.sys [2019-03-19 337920]
S3 amdgpio2;@amdgpio2.inf,%GPIO.SvcDesc%;AMD GPIO Client Driver; C:\Windows\System32\drivers\amdgpio2.sys [2019-03-19 18432]
S3 amdi2c;@amdi2c.inf,%amdi2c.SVCDESC%;AMD I2C Controller Service; C:\Windows\System32\drivers\amdi2c.sys [2019-03-19 37888]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\Windows\system32\drivers\applockerfltr.sys [2019-11-13 18432]
S3 AppvStrm;@%systemroot%\system32\drivers\AppvStrm.sys,-101; C:\Windows\system32\drivers\AppvStrm.sys [2020-02-11 138040]
S3 AppvVemgr;@%systemroot%\system32\drivers\AppvVemgr.sys,-101; C:\Windows\system32\drivers\AppvVemgr.sys [2020-02-11 174392]
S3 AppvVfs;@%systemroot%\system32\drivers\AppvVfs.sys,-101; C:\Windows\system32\drivers\AppvVfs.sys [2020-02-11 153912]
S3 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\Windows\system32\drivers\bindflt.sys [2020-02-11 117264]
S3 BthA2dp;@microsoft_bluetooth_a2dp.inf,%BthA2dp.ServiceDescription%;Microsoft Bluetooth A2dp driver; C:\Windows\System32\drivers\BthA2dp.sys [2019-11-13 231936]
S3 BthMini;@bth.inf,%BTHMINI.SvcDesc%;Bluetooth Radio Driver; C:\Windows\System32\drivers\BTHMINI.sys [2019-11-13 36864]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\Windows\System32\drivers\BTHport.sys [2019-11-13 1428992]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\Windows\System32\drivers\buttonconverter.sys [2019-03-19 43008]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\Windows\System32\DriverStore\FileRepository\genericusbfn.inf_amd64_b9c53b80e63af230\genericusbfn.sys [2019-11-13 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\Windows\System32\drivers\hidinterrupt.sys [2019-03-19 53560]
S3 hidspi;@hidspi_km.inf,%hidspi.SVCDESC%;Microsoft SPI HID Miniport Driver; C:\Windows\System32\drivers\hidspi.sys [2019-11-13 64000]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\Windows\system32\drivers\hvservice.sys [2020-02-11 84496]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\Windows\System32\Drivers\mshwnclx.sys [2019-03-19 28672]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\Windows\System32\drivers\cht4vx64.sys [2019-03-19 1866768]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\Windows\System32\drivers\iagpio.sys [2019-03-19 36352]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\Windows\System32\drivers\iai2c.sys [2019-03-19 91136]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2.sys [2019-03-19 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2019-03-19 93184]
S3 iaLPSS2i_GPIO2_CNL;@iaLPSS2i_GPIO2_CNL.inf,%iaLPSS2i_GPIO2_CNL.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2_CNL.sys [2019-03-19 112128]
S3 iaLPSS2i_GPIO2_GLK;@iaLPSS2i_GPIO2_GLK.inf,%iaLPSS2i_GPIO2_GLK.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2_GLK.sys [2019-03-19 96256]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C.sys [2019-03-19 171520]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2019-03-19 175104]
S3 iaLPSS2i_I2C_CNL;@iaLPSS2i_I2C_CNL.inf,%iaLPSS2i_I2C_CNL.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C_CNL.sys [2019-03-19 180736]
S3 iaLPSS2i_I2C_GLK;@iaLPSS2i_I2C_GLK.inf,%iaLPSS2i_I2C_GLK.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C_GLK.sys [2019-03-19 177664]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\Windows\System32\drivers\ibbus.sys [2019-03-19 566800]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\Windows\System32\drivers\IndirectKmd.sys [2019-03-19 46592]
S3 IntcDAud;@oem6.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\System32\drivers\IntcDAud.sys [2017-11-30 491048]
S3 intelpmax;@intelpmax.inf,%SvcDesc%;Intel Power Limit Driver; C:\Windows\System32\drivers\intelpmax.sys [2019-03-19 28672]
S3 IPT;IPT; C:\Windows\System32\drivers\ipt.sys [2019-03-19 54584]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\Windows\System32\drivers\mausbhost.sys [2019-03-19 535864]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\Windows\System32\drivers\mausbip.sys [2019-03-19 62264]
S3 MbbCx;MBB Network Adapter Class Extension; C:\Windows\system32\drivers\MbbCx.sys [2019-11-13 359424]
S3 Microsoft_Bluetooth_AvrcpTransport;@microsoft_bluetooth_avrcptransport.inf,%Microsoft_Bluetooth_AvrcpTransport.ServiceDescription%;Microsoft Bluetooth Avrcp Transport Driver; C:\Windows\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys [2019-03-19 64512]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\Windows\System32\drivers\mlx4_bus.sys [2019-03-19 1150480]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\Windows\System32\drivers\ndfltr.sys [2019-03-19 153616]
S3 NDKPing;NDKPing Driver; C:\Windows\system32\drivers\NDKPing.sys [2019-03-19 63488]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\Windows\system32\drivers\NetAdapterCx.sys [2019-03-19 187904]
S3 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\Windows\System32\drivers\nvdimm.sys [2019-03-19 158520]
S3 PktMon;Packet Monitor Driver; C:\Windows\system32\drivers\PktMon.sys [2019-03-19 96056]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\Windows\System32\drivers\pmem.sys [2019-03-19 127800]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\Windows\System32\drivers\pnpmem.sys [2019-03-19 17408]
S3 portcfg;portcfg; C:\Windows\System32\drivers\portcfg.sys [2019-03-19 25600]
S3 ReFSv1;ReFSv1; C:\Windows\system32\drivers\ReFSv1.sys [2019-12-11 986936]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\Windows\System32\drivers\rhproxy.sys [2019-03-19 113152]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\Windows\System32\drivers\SDFRd.sys [2019-03-19 33592]
S3 smbdirect;smbdirect; C:\Windows\System32\DRIVERS\smbdirect.sys [2019-03-19 171008]
S4 hvcrash;hvcrash; C:\Windows\System32\drivers\hvcrash.sys [2019-03-19 32568]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AtherosSvc;AtherosSvc; C:\Windows\System32\drivers\AdminService.exe [2018-06-26 416072]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R2 CDPUserSvc_30882;Uživatelská služba platformy připojených zařízení_30882; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R2 ClickToRunSvc;Služba Microsoft Office Klikni a spusť; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2020-02-09 11096432]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\Windows\System32\svchost.exe [2019-03-19 53744]
R2 DispBrokerDesktopSvc;@%SystemRoot%\system32\dispbroker.desktop.dll,-101; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\Windows\System32\svchost.exe [2019-03-19 53744]
R2 ETDService;Elan Service; C:\Program Files\Elantech\ETDService.exe [2015-10-07 144072]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [2015-09-30 370064]
R3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R3 cbdhsvc_30882;Uživatelská služba schránky_30882; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [2019-12-10 4452456]
R3 DisplayEnhancementService;@%SystemRoot%\System32\Microsoft.Graphics.Display.DisplayEnhancementService.dll,-1000; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2019-03-01 43704]
R3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R3 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\Windows\system32\SecurityHealthService.exe [2020-02-11 928120]
R3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S2 bookingdesktopapp;bookingDesktopApp Update Service (bookingdesktopapp); C:\Program Files (x86)\bookingDesktopApp\Update\bookingDesktopAppUpdate.exe [2019-12-10 102400]
S2 brave;Služba Aktualizace Brave (brave); C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [2019-11-17 157320]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S2 OneSyncSvc_30882;Hostitel synchronizace_30882; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S2 SgrmBroker;@%SystemRoot%\System32\SgrmBroker.exe,-100; C:\Windows\system32\SgrmBroker.exe [2019-03-19 263904]
S3 AarSvc;@%SystemRoot%\system32\AarSvc.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 AarSvc_30882;Agent Activation Runtime_30882; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2020-02-11 335416]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 AssignedAccessManagerSvc;@%SystemRoot%\system32\assignedaccessmanagersvc.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 autotimesvc;@%SystemRoot%\System32\autotimesvc.dll,-6; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 BcastDVRUserService_30882;Uživatelská služba pro GameDVR a vysílání her_30882; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 BluetoothUserService_30882;Služba pro podporu uživatelů Bluetooth_30882; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 bookingdesktopappm;bookingDesktopApp Update Service (bookingdesktopappm); C:\Program Files (x86)\bookingDesktopApp\Update\bookingDesktopAppUpdate.exe [2019-12-10 102400]
S3 bravem;Služba Aktualizace Brave (bravem); C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [2019-11-17 157320]
S3 CaptureService;@%SystemRoot%\system32\CaptureService.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 CaptureService_30882;CaptureService_30882; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 cbdhsvc;@%SystemRoot%\system32\cbdhsvc.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S3 ConsentUxUserSvc;@%SystemRoot%\system32\ConsentUxClient.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 ConsentUxUserSvc_30882;ConsentUX_30882; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2015-09-30 301976]
S3 CredentialEnrollmentManagerUserSvc;@%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100; C:\Windows\system32\CredentialEnrollmentManager.exe [2019-03-19 380120]
S3 CredentialEnrollmentManagerUserSvc_30882;CredentialEnrollmentManagerUserSvc_30882; C:\Windows\system32\CredentialEnrollmentManager.exe [2019-03-19 380120]
S3 DeviceAssociationBrokerSvc;@%SystemRoot%\system32\deviceaccess.dll,-107; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 DeviceAssociationBrokerSvc_30882;DeviceAssociationBroker_30882; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 DevicePickerUserSvc_30882;DevicePicker_30882; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 DevicesFlowUserSvc_30882;Tok zařízení_30882; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2019-11-13 97792]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 MessagingService_30882;Služba zasílání zpráv_30882; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2020-01-22 244936]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S3 ose64;Office 64 Source Engine; c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2002-02-01 263896]
S3 perceptionsimulation;@%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101; C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe [2019-03-19 103424]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 PimIndexMaintenanceSvc_30882;Data kontaktů_30882; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 PrintWorkflowUserSvc_30882;PrintWorkflow_30882; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S3 Sense;@%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2019-11-13 5796168]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\Windows\System32\SensorDataService.exe [2019-03-19 1264128]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 SharedRealitySvc;@%SystemRoot%\system32\SharedRealitySvc.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S4 AppVClient;@%systemroot%\system32\AppVClient.exe,-102; C:\Windows\system32\AppVClient.exe [2020-02-11 828216]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\Windows\System32\svchost.exe [2019-03-19 53744]

-----------------EOF-----------------

Re: Prosím o kontrolu logu.

Napsal: 18 úno 2020 08:27
od Diallix
Dobry den.

:arrow: Stiahnite si na plochu nastroj AdwCleaner, link. na stiahnutie tu: https://toolslib.net/downloads/finish/1/
Pred spustenim nastroja povypinajte vsetke beziace okna programov, to su vsetke beziace programy pod desktopom.
Kliknite pravym tlacidlom mysi na program -> spustit ako Administrator.
Pokracujte kliknutim na tlacidlo Prehladaj teraz (Scan now) a pockajte, kym sa system doskenuje.
Po skene nechajte oznacene vsetky chlieviky, pripadne najdene hrozieby a pokracujte v dolnom pravom rohu tlacidlom Vycistit Teraz (Clean and Repair).
Po restartovani PC sa spusti nastroj AdwCleaner, kliknite na Zobrazit soubor protokolu.
Spusti sa log, jeho obsah skopirujte sem.
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz