﻿Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 31-08-2016
Ran by Admin (administrator) on ZALMANR1 (10-09-2016 16:34:03)
Running from C:\Users\Admin\Desktop
Loaded Profiles: Admin (Available Profiles: Admin & Baruška)
Platform: Windows 10 Pro Version 1607 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender Safepay\obksvc.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender Safepay\updatesrv.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.5156\Agent.exe
(Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.7963\Battle.net.exe
() C:\Program Files (x86)\Battle.net\Battle.net.7963\Battle.net Helper.exe
() C:\Program Files (x86)\Battle.net\Battle.net.7963\Battle.net Helper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Microsoft® Windows® Operating System) C:\Windows\System32\Taskmgr.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Telegram Messenger LLP) C:\Users\Admin\Downloads\Telegram Desktop\Telegram.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1610936 2016-07-10] (COMODO)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [6625672 2016-09-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [67864 2016-08-25] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [830064 2016-09-06] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Malwarebytes Anti-Exploit] => C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe [2631120 2016-07-28] (Malwarebytes Corporation)
HKLM-x32\...\Run: [MalTray] => C:\Program Files (x86)\Glarysoft\Malware Hunter\mhtray.exe [818640 2016-09-05] (Glarysoft Ltd)
HKU\S-1-5-21-2560372422-2021965399-549226919-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\Ribbons.scr [151040 2016-07-16] (Microsoft Corporation)
HKU\S-1-5-18\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [830064 2016-09-06] (Avira Operations GmbH & Co. KG)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{e18254f8-2f7e-4945-92a6-00f1a621f2b3}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{e18254f8-2f7e-4945-92a6-00f1a621f2b3}: [DhcpNameServer] 10.0.0.138

Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-2560372422-2021965399-549226919-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2016-05-23] (IObit)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2016-08-17] (Microsoft Corporation)
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2016-06-14] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-06-14] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2016-06-14] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-06-14] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9n7s7pz3.default
FF Homepage: about:home
FF Session Restore: -> is enabled.
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-08-08] ()
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-08-08] ()
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-06] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-07-28] (Adobe Systems Inc.)
FF Extension: (WOT) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9n7s7pz3.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2016-08-07]
FF Extension: (Lazarus: Form Recovery) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9n7s7pz3.default\extensions\lazarus@interclue.com.xpi [2016-08-07]
FF Extension: (Firefox Hotfix) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9n7s7pz3.default\Extensions\firefox-hotfix@mozilla.org.xpi [2016-09-09]
FF Extension: (MEGA) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9n7s7pz3.default\Extensions\firefox@mega.co.nz.xpi [2016-09-09]
FF Extension: (uBlock Origin) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9n7s7pz3.default\Extensions\uBlock0@raymondhill.net.xpi [2016-09-09]
FF HKLM-x32\...\Firefox\Extensions: [{a171a864-424e-4d77-be5a-1ee220deccd3}] - C:\Program Files\Bitdefender\Bitdefender Safepay\spbxff
FF Extension: (Bitdefender Safepay) - C:\Program Files\Bitdefender\Bitdefender Safepay\spbxff [2014-11-11] [not signed]

Chrome: 
=======
CHR DefaultSearchURL: Default -> hxxps://safesearch.avira.com/#web/result?source=omnibar&q={searchTerms}
CHR DefaultSearchKeyword: Default -> Avira
CHR DefaultSuggestURL: Default -> hxxps://safesearch.avira.com/suggestions?q={searchTerms}&li=ff&hl=en
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Adblock Plus) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-08-27]
CHR Extension: (Tampermonkey) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2016-08-31]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-08-27]
CHR Extension: (Chrome Media Router) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-29]
CHR HKLM\...\Chrome\Extension: [hhgfkbnifcfibjflcgibdmabmcgmjdco] - C:\Program Files\Bitdefender\Bitdefender Safepay\spbxcr.crx [2016-08-07]
CHR HKLM-x32\...\Chrome\Extension: [hhgfkbnifcfibjflcgibdmabmcgmjdco] - C:\Program Files\Bitdefender\Bitdefender Safepay\spbxcr.crx [2016-08-07]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [989696 2016-09-06] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [470600 2016-09-06] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [470600 2016-09-06] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1454720 2016-09-06] (Avira Operations GmbH & Co. KG)
S4 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2016-08-06] ()
S4 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2016-08-06] () [File not signed]
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [320672 2016-08-25] (Avira Operations GmbH & Co. KG)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [5817256 2016-07-10] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2271928 2016-07-10] (COMODO)
S3 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [3046688 2016-07-29] (IObit)
R2 MbaeSvc; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe [750032 2016-07-28] (Malwarebytes Corporation)
R2 OBKSvc; C:\Program Files\Bitdefender\Bitdefender Safepay\OBKSvc.exe [1242568 2014-11-11] (Bitdefender)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-07-17] (Microsoft Corporation)
R2 UPDATESRV_SAFEPAY; C:\Program Files\Bitdefender\Bitdefender Safepay\updatesrv.exe [66784 2014-10-28] (Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 a016bus; C:\Windows\System32\drivers\a016bus.sys [109096 2015-07-05] (MCCI Corporation)
S3 a016mgmt; C:\Windows\System32\drivers\a016mgmt.sys [130600 2015-07-05] (MCCI Corporation)
S3 a016obex; C:\Windows\System32\drivers\a016obex.sys [125480 2015-07-05] (MCCI Corporation)
S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [40720 2015-07-28] (Advanced Micro Devices, Inc.)
S3 Andbus; C:\Windows\System32\drivers\lgandbus64.sys [19456 2015-04-20] (LG Electronics Inc.)
S3 AndDiag; C:\Windows\System32\drivers\lganddiag64.sys [27648 2015-04-20] (LG Electronics Inc.)
S3 AndGps; C:\Windows\System32\drivers\lgandgps64.sys [27136 2015-04-20] (LG Electronics Inc.)
S3 AndnetBus; C:\Windows\System32\drivers\lgandnetbus64.sys [20992 2015-04-20] (LG Electronics Inc.)
S3 AndNetDiag; C:\Windows\System32\drivers\lgandnetdiag64.sys [30720 2015-04-20] (LG Electronics Inc.)
S3 AndNetDiag2; C:\Windows\System32\drivers\lgandnetdiag264.sys [30720 2015-04-20] (LG Electronics Inc.)
S3 AndNetGps; C:\Windows\System32\drivers\lgandnetgps64.sys [29184 2015-04-20] (LG Electronics Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2016-08-06] ()
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [118848 2016-07-28] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [144664 2016-07-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [154392 2016-07-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [35488 2016-07-18] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [78208 2016-07-18] (Avira Operations GmbH & Co. KG)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [32224 2016-07-10] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [851864 2016-07-10] (COMODO)
R1 cmdhlp; C:\Windows\system32\DRIVERS\cmdhlp.sys [45600 2016-07-10] (COMODO)
R1 ESProtectionDriver; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys [75360 2016-08-04] ()
R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [73928 2016-08-17] ()
S3 ggsomc; C:\Windows\System32\drivers\ggsomc.sys [30424 2015-07-05] (Sony Mobile Communications)
R1 GUSBootStartup; C:\WINDOWS\System32\drivers\GUSBootStartup.sys [20160 2016-08-17] (Glarysoft Ltd)
R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [146720 2012-09-05] (BitDefender LLC)
R1 HWiNFO32; C:\WINDOWS\SysWoW64\drivers\HWiNFO64A.SYS [27552 2016-08-08] (REALiX(tm))
R1 inspect; C:\Windows\system32\DRIVERS\inspect.sys [138568 2016-07-10] (COMODO)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [50320 2015-01-29] (Panda Security, S.L.)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [936192 2016-07-12] (Realtek                                            )
S3 s0016bus; C:\Windows\System32\drivers\s0016bus.sys [115240 2015-07-05] (MCCI Corporation)
S3 s0016mgmt; C:\Windows\System32\drivers\s0016mgmt.sys [137256 2015-07-05] (MCCI Corporation)
S3 s0016obex; C:\Windows\System32\drivers\s0016obex.sys [136744 2015-07-05] (MCCI Corporation)
S3 s0016unic; C:\Windows\System32\drivers\s0016unic.sys [151592 2015-07-05] (MCCI Corporation)
S3 s0017bus; C:\Windows\System32\drivers\s0017bus.sys [113704 2015-07-05] (MCCI Corporation)
S3 s0017mgmt; C:\Windows\System32\drivers\s0017mgmt.sys [133160 2015-07-05] (MCCI Corporation)
S3 s0017obex; C:\Windows\System32\drivers\s0017obex.sys [128552 2015-07-05] (MCCI Corporation)
S3 s0017unic; C:\Windows\System32\drivers\s0017unic.sys [145960 2015-07-05] (MCCI Corporation)
S3 s1018bus; C:\Windows\System32\drivers\s1018bus.sys [113704 2015-07-05] (MCCI Corporation)
S3 s1018mgmt; C:\Windows\System32\drivers\s1018mgmt.sys [133160 2015-07-05] (MCCI Corporation)
S3 s1018obex; C:\Windows\System32\drivers\s1018obex.sys [128552 2015-07-05] (MCCI Corporation)
S3 s1018unic; C:\Windows\System32\drivers\s1018unic.sys [146472 2015-07-05] (MCCI Corporation)
S3 s1029bus; C:\Windows\System32\drivers\s1029bus.sys [116264 2015-07-05] (MCCI Corporation)
S3 s1029mgmt; C:\Windows\System32\drivers\s1029mgmt.sys [139304 2015-07-05] (MCCI Corporation)
S3 s1029obex; C:\Windows\System32\drivers\s1029obex.sys [135208 2015-07-05] (MCCI Corporation)
S3 s1029unic; C:\Windows\System32\drivers\s1029unic.sys [151592 2015-07-05] (MCCI Corporation)
S3 s1039bus; C:\Windows\System32\drivers\s1039bus.sys [127600 2015-07-05] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\System32\drivers\s1039mgmt.sys [141424 2015-07-05] (MCCI Corporation)
S3 s1039obex; C:\Windows\System32\drivers\s1039obex.sys [137328 2015-07-05] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\drivers\s1039unic.sys [158320 2010-03-15] (MCCI Corporation)
S3 s916bus; C:\Windows\System32\drivers\s916bus.sys [108072 2015-07-05] (MCCI Corporation)
S3 s916mgmt; C:\Windows\System32\drivers\s916mgmt.sys [130088 2015-07-05] (MCCI Corporation)
S3 s916obex; C:\Windows\System32\drivers\s916obex.sys [124968 2015-07-05] (MCCI Corporation)
S3 se3ebus; C:\Windows\System32\drivers\se3ebus.sys [107784 2015-07-05] (MCCI Corporation)
S3 se3emgmt; C:\Windows\System32\drivers\se3emgmt.sys [126216 2015-07-05] (MCCI Corporation)
S3 se3eobex; C:\Windows\System32\drivers\se3eobex.sys [123144 2015-07-05] (MCCI Corporation)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21360 2016-03-22] (IObit)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S3 usbbus; C:\Windows\System32\drivers\lgx64bus.sys [17920 2015-04-20] (LG Electronics Inc.)
S3 UsbDiag; C:\Windows\System32\drivers\lgx64diag.sys [28160 2015-04-20] (LG Electronics Inc.)
S3 UsbGps; C:\Windows\System32\drivers\lgx64gps.sys [27136 2015-04-20] (LG Electronics Inc.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
R1 ZAM; C:\WINDOWS\System32\drivers\zam64.sys [203680 2016-09-07] (Zemana Ltd.)
R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [203680 2016-09-07] (Zemana Ltd.)
S3 efavdrv; \??\C:\WINDOWS\system32\drivers\efavdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-09-10 16:34 - 2016-09-10 16:34 - 00019394 _____ C:\Users\Admin\Desktop\FRST.txt
2016-09-10 14:03 - 2016-09-10 16:34 - 00082047 _____ C:\WINDOWS\ZAM.krnl.trace
2016-09-10 14:03 - 2016-09-10 16:34 - 00056166 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
2016-09-09 01:31 - 2016-09-09 01:31 - 00001235 _____ C:\Users\Admin\Desktop\JRT.txt
2016-09-07 21:31 - 2016-09-07 21:31 - 00000219 _____ C:\Users\Admin\Desktop\Left 4 Dead 2.url
2016-09-07 21:00 - 2016-09-10 16:14 - 00001476 _____ C:\Users\Admin\Desktop\Auslogics Disk Defrag Professional.lnk
2016-09-07 21:00 - 2016-09-07 21:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2016-09-07 20:59 - 2016-09-07 21:00 - 08599968 _____ (Auslogics Labs Pty Ltd ) C:\Users\Admin\Downloads\disk-defrag-pro-setup.exe
2016-09-07 20:42 - 2016-09-07 21:54 - 00000000 ____D C:\Program Files\7-Zip
2016-09-07 20:41 - 2016-09-07 20:41 - 01378550 _____ (Igor Pavlov) C:\Users\Admin\Downloads\7z1602-x64.exe
2016-09-07 20:10 - 2016-09-07 20:11 - 05018560 _____ (Zemana Ltd.) C:\Users\Admin\Desktop\Zemana.AntiMalware.Portable.exe
2016-09-07 20:07 - 2016-09-07 20:09 - 00094394 _____ C:\TDSSKiller.3.1.0.11_07.09.2016_20.07.34_log.txt
2016-09-07 20:07 - 2016-09-07 20:07 - 00203680 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\zamguard64.sys
2016-09-07 20:07 - 2016-09-07 20:07 - 00203680 _____ (Zemana Ltd.) C:\WINDOWS\system32\Drivers\zam64.sys
2016-09-07 19:20 - 2016-09-07 19:20 - 00000000 ____D C:\Users\Public\Documents\GTA3 User Files
2016-09-07 19:18 - 2016-09-07 19:18 - 00000000 ____D C:\Users\Admin\Documents\GTA3 User Files
2016-09-06 23:54 - 2016-09-07 17:39 - 00000000 ____D C:\Users\Admin\Documents\GTA Vice City User Files
2016-09-06 18:29 - 2016-09-06 18:29 - 00125216 _____ C:\WINDOWS\system32\vulkaninfo.exe
2016-09-06 18:29 - 2016-09-06 18:29 - 00110880 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2016-09-06 18:29 - 2016-09-06 18:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Radeon Settings
2016-09-06 18:29 - 2016-06-23 20:22 - 00264992 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2016-09-06 18:29 - 2016-06-23 20:21 - 00257824 _____ C:\WINDOWS\system32\vulkan-1.dll
2016-09-06 18:27 - 2016-09-06 18:27 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2016-09-06 18:26 - 2016-09-06 18:27 - 38258312 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl.dll
2016-09-06 18:26 - 2016-09-06 18:27 - 27481232 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl12cl64.dll
2016-09-06 18:26 - 2016-09-06 18:27 - 08653760 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll
2016-09-06 18:26 - 2016-09-06 18:27 - 08620176 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmantle64.dll
2016-09-06 18:26 - 2016-09-06 18:27 - 07045344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll
2016-09-06 18:26 - 2016-09-06 18:27 - 06947984 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmantle32.dll
2016-09-06 18:26 - 2016-09-06 18:27 - 02139792 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2016-09-06 18:26 - 2016-09-06 18:27 - 01829520 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2016-09-06 18:26 - 2016-09-06 18:27 - 00475632 _____ C:\WINDOWS\system32\amdmiracast.dll
2016-09-06 18:26 - 2016-09-06 18:27 - 00260752 _____ C:\WINDOWS\system32\hsa-thunk64.dll
2016-09-06 18:26 - 2016-09-06 18:27 - 00241296 _____ C:\WINDOWS\system32\amdgfxinfo64.dll
2016-09-06 18:26 - 2016-09-06 18:27 - 00214160 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2016-09-06 18:26 - 2016-09-06 18:27 - 00122512 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll
2016-09-06 18:26 - 2016-09-06 18:27 - 00105616 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2016-09-06 18:26 - 2016-09-06 18:27 - 00101520 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll
2016-09-06 18:26 - 2016-09-06 18:27 - 00096400 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 32550032 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 26719376 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys
2016-09-06 18:26 - 2016-09-06 18:26 - 26633872 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 21633168 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl12cl.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 15721104 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 14312080 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 10970120 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 10285464 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 09311368 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdva.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 09110856 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 08864688 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 08828560 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdvlk64.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 07234888 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdag.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 07085712 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdvlk32.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 02370704 _____ C:\WINDOWS\system32\amdoclvp9lib64.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 02281104 _____ C:\WINDOWS\SysWOW64\amdoclvp9lib32.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 01548512 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 01321104 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 01273584 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00987280 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00987280 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00875152 _____ (AMD) C:\WINDOWS\system32\coinst_16.30.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00743568 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00619152 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00451720 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00314392 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\amdacpksd.sys
2016-09-06 18:26 - 2016-09-06 18:26 - 00279696 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00267920 _____ C:\WINDOWS\system32\GameManager64.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00233104 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00226448 _____ C:\WINDOWS\SysWOW64\hsa-thunk.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00194704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00193680 _____ C:\WINDOWS\system32\amdhdl64.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00181064 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxp64.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00173712 _____ C:\WINDOWS\SysWOW64\amdhdl32.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00168592 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00161432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00156248 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00152096 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00151696 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00149984 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiuxpag.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00135920 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00135408 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00134448 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiu9pag.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00129168 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00127120 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00120384 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00120376 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00115856 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00110736 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00103056 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00102672 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00102672 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00100496 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00100496 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00075920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl64.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00071816 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00065168 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00061576 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00060040 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00059536 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmcl32.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00058512 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00052880 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00047760 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmmcl.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00013456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll
2016-09-06 18:26 - 2016-09-06 18:26 - 00013456 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll
2016-09-06 18:26 - 2016-09-06 18:23 - 00513680 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2016-09-06 18:26 - 2016-09-06 18:23 - 00510096 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys
2016-09-06 18:26 - 2016-09-06 18:23 - 00394896 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe
2016-09-06 18:26 - 2016-09-06 18:23 - 00342152 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODE.exe
2016-09-06 18:26 - 2016-09-06 18:23 - 00284296 _____ C:\WINDOWS\system32\dgtrayicon.exe
2016-09-06 18:26 - 2016-09-06 18:23 - 00279184 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe
2016-09-06 18:26 - 2016-09-06 18:23 - 00262288 _____ C:\WINDOWS\system32\clinfo.exe
2016-09-06 18:26 - 2016-09-06 18:23 - 00223368 _____ C:\WINDOWS\system32\atieah64.exe
2016-09-06 18:26 - 2016-09-06 18:23 - 00201360 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2016-09-06 18:26 - 2016-09-06 18:23 - 00060560 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODCLI.exe
2016-09-06 18:26 - 2016-08-31 20:40 - 03471376 _____ C:\WINDOWS\SysWOW64\atiumdva.cap
2016-09-06 18:26 - 2016-08-31 20:40 - 03437632 _____ C:\WINDOWS\system32\atiumd6a.cap
2016-09-06 18:26 - 2016-08-31 20:40 - 00732336 _____ C:\WINDOWS\SysWOW64\atiapfxx.blb
2016-09-06 18:26 - 2016-08-31 20:40 - 00732336 _____ C:\WINDOWS\system32\atiapfxx.blb
2016-09-06 18:26 - 2016-08-31 20:39 - 48811152 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl64.dll
2016-09-06 16:21 - 2016-09-10 16:34 - 00000000 ____D C:\FRST
2016-09-06 16:21 - 2016-09-06 16:21 - 02397696 _____ (Farbar) C:\Users\Admin\Desktop\FRST64.exe
2016-09-06 00:50 - 2016-09-06 00:53 - 00000000 ____D C:\AMD
2016-09-05 20:45 - 2016-09-05 20:45 - 00000000 ___HD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup-Disabled
2016-09-05 20:14 - 2016-09-05 20:14 - 00003048 _____ C:\WINDOWS\System32\Tasks\GMHSkipUAC
2016-09-03 23:30 - 2016-09-03 23:00 - 00000934 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20160903-233007.backup
2016-09-03 23:14 - 2016-09-03 23:00 - 00000934 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20160903-231406.backup
2016-09-03 23:09 - 2016-09-03 23:00 - 00000934 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20160903-230908.backup
2016-09-03 12:06 - 2016-09-03 12:06 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-09-03 12:06 - 2016-09-03 12:06 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-09-03 11:40 - 2016-09-03 11:40 - 23682560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 22571008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 22218808 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 20965240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 19423232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 19418624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 09128448 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 08124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 07814488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-09-03 11:40 - 2016-09-03 11:40 - 07624192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 06044672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 05722312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 04612096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 04130944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 03893376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 03617792 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-09-03 11:40 - 2016-09-03 11:40 - 03299328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2016-09-03 11:40 - 2016-09-03 11:40 - 03245056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 03105792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2016-09-03 11:40 - 2016-09-03 11:40 - 02999296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2016-09-03 11:40 - 2016-09-03 11:40 - 02913104 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 02846208 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 02711040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 02680832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 02537824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2016-09-03 11:40 - 2016-09-03 11:40 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 02315264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 02289664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 02264064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 02257248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-09-03 11:40 - 2016-09-03 11:40 - 02190688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-09-03 11:40 - 2016-09-03 11:40 - 02166232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 02143232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01906176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01883784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01875456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01690112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01643008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01570680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01453992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01430200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01377008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2016-09-03 11:40 - 2016-09-03 11:40 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01349120 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-09-03 11:40 - 2016-09-03 11:40 - 01316352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01282048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01279328 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01264912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01220608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01163696 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-09-03 11:40 - 2016-09-03 11:40 - 01106944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01099608 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2016-09-03 11:40 - 2016-09-03 11:40 - 01081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01077760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Editing.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01071728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01046976 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-09-03 11:40 - 2016-09-03 11:40 - 01014784 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 01006080 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00987992 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2016-09-03 11:40 - 2016-09-03 11:40 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00942424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2016-09-03 11:40 - 2016-09-03 11:40 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00885832 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-09-03 11:40 - 2016-09-03 11:40 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-09-03 11:40 - 2016-09-03 11:40 - 00852824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00846552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00807776 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2016-09-03 11:40 - 2016-09-03 11:40 - 00806912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00804864 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00782176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-09-03 11:40 - 2016-09-03 11:40 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2016-09-03 11:40 - 2016-09-03 11:40 - 00743424 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00726016 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00681312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2016-09-03 11:40 - 2016-09-03 11:40 - 00658776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-09-03 11:40 - 2016-09-03 11:40 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.InkControls.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-09-03 11:40 - 2016-09-03 11:40 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2016-09-03 11:40 - 2016-09-03 11:40 - 00590952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.UXRes.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00554496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2016-09-03 11:40 - 2016-09-03 11:40 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.InkControls.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00453120 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-09-03 11:40 - 2016-09-03 11:40 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfksproxy.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2016-09-03 11:40 - 2016-09-03 11:40 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00244816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_G18030.DLL
2016-09-03 11:40 - 2016-09-03 11:40 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_G18030.DLL
2016-09-03 11:40 - 2016-09-03 11:40 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2016-09-03 11:40 - 2016-09-03 11:40 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-09-03 11:40 - 2016-09-03 11:40 - 00204288 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DscCoreConfProv.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipboardServer.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-09-03 11:40 - 2016-09-03 11:40 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfksproxy.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-09-03 11:40 - 2016-09-03 11:40 - 00178528 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ClipboardServer.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00141824 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DscCoreConfProv.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00121368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00108384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2016-09-03 11:40 - 2016-09-03 11:40 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastLaunch.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00073568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2016-09-03 11:40 - 2016-09-03 11:40 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2016-09-03 11:40 - 2016-09-03 11:40 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
2016-09-03 11:40 - 2016-09-03 11:40 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\encapi.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-09-03 11:40 - 2016-09-03 11:40 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerSvc.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\delegatorprovider.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi_passthru.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\smphost.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\encapi.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smphost.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\delegatorprovider.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi_passthru.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2016-09-03 11:40 - 2016-09-03 11:40 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\C_IS2022.DLL
2016-09-03 11:40 - 2016-09-03 11:40 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\c_GSM7.DLL
2016-09-03 11:40 - 2016-09-03 11:40 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\C_IS2022.DLL
2016-09-03 11:40 - 2016-09-03 11:40 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\c_GSM7.DLL
2016-09-03 11:40 - 2016-08-20 07:21 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2016-09-03 11:40 - 2016-08-20 07:16 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2016-09-03 11:40 - 2016-08-19 03:33 - 00162850 _____ C:\WINDOWS\system32\C_932.NLS
2016-09-03 11:31 - 2016-09-03 11:31 - 00409952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2016-09-03 11:30 - 2016-09-03 11:30 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2016-09-03 11:30 - 2016-09-03 11:30 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2016-09-03 11:30 - 2016-09-03 11:30 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2016-09-03 11:30 - 2016-09-03 11:30 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2016-09-03 11:30 - 2016-09-03 11:30 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2016-09-03 11:30 - 2016-09-03 11:30 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2016-09-03 11:30 - 2016-09-03 11:30 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2016-09-03 11:30 - 2016-09-03 11:30 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2016-09-03 11:30 - 2016-09-03 11:30 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-09-03 11:30 - 2016-09-03 11:30 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2016-09-03 11:30 - 2016-09-03 11:30 - 00114192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2016-09-03 11:30 - 2016-09-03 11:30 - 00079544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2016-09-03 11:30 - 2016-09-03 11:30 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2016-09-03 11:30 - 2016-09-03 11:30 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-09-03 11:30 - 2016-09-03 11:30 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-09-03 11:30 - 2016-09-03 11:30 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-09-03 11:30 - 2016-09-03 11:30 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-08-30 23:56 - 2016-08-30 23:56 - 00000222 _____ C:\Users\Admin\Desktop\Heroes & Generals.url
2016-08-30 02:35 - 2016-08-30 02:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Overwatch Test
2016-08-30 02:06 - 2016-08-30 02:06 - 00000000 ____D C:\Users\Admin\Downloads\Bitdefender Safepay
2016-08-30 01:40 - 2016-09-10 00:56 - 00000000 ____D C:\Program Files (x86)\Overwatch Test
2016-08-30 00:59 - 2016-08-30 00:59 - 00000000 ____D C:\Users\Admin\AppData\Local\bdch
2016-08-30 00:59 - 2016-08-30 00:59 - 00000000 ____D C:\ProgramData\bdch
2016-08-25 15:22 - 2016-08-25 15:22 - 00001143 _____ C:\Users\Admin\Desktop\WTTG – zástupce.lnk
2016-08-25 15:12 - 2016-08-25 15:12 - 00001128 _____ C:\Users\Admin\Desktop\FarCry4 – zástupce.lnk
2016-08-25 15:08 - 2016-08-25 15:08 - 00001035 _____ C:\Users\Admin\Desktop\lol.launcher – zástupce.lnk
2016-08-25 15:07 - 2016-08-25 15:07 - 00000805 _____ C:\Users\Admin\Desktop\gta_sa – zástupce.lnk
2016-08-25 15:05 - 2016-08-25 15:05 - 00001359 _____ C:\Users\Admin\Desktop\SamHD – zástupce.lnk
2016-08-25 15:05 - 2016-08-25 15:05 - 00000766 _____ C:\Users\Admin\Desktop\Sam2 – zástupce.lnk
2016-08-25 14:45 - 2016-09-10 16:14 - 00001211 _____ C:\Users\Public\Desktop\Avira Launcher.lnk
2016-08-25 08:00 - 2016-08-25 08:00 - 00000000 ____D C:\Users\Admin\Documents\TagsRevisited
2016-08-25 07:58 - 2016-09-10 16:14 - 00000907 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-08-25 07:58 - 2016-08-25 07:58 - 00002856 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2016-08-25 07:58 - 2016-08-25 07:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-08-25 07:58 - 2016-08-25 07:58 - 00000000 ____D C:\Program Files\CCleaner
2016-08-25 06:47 - 2016-08-25 06:47 - 00000000 ____D C:\Program Files (x86)\Auslogics
2016-08-25 06:12 - 2016-08-25 06:12 - 20264280 _____ (4A Games) C:\Users\Admin\Desktop\metro.exe
2016-08-25 05:45 - 2016-08-25 05:45 - 00025600 ____R (Gibson Research Corp.) C:\Users\Admin\Downloads\LeakTest.exe
2016-08-25 04:17 - 2016-08-25 04:17 - 33061376 _____ (Crytek GmbH) C:\Users\Admin\Desktop\Crysis3.exe
2016-08-25 04:05 - 2016-08-25 04:06 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Comodo
2016-08-25 00:55 - 2016-09-10 16:14 - 00001886 _____ C:\Users\Public\Desktop\COMODO Firewall.lnk
2016-08-25 00:55 - 2016-08-25 00:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO
2016-08-25 00:54 - 2016-08-25 00:54 - 00000000 ____D C:\WINDOWS\System32\Tasks\COMODO
2016-08-25 00:54 - 2016-08-25 00:54 - 00000000 ____D C:\Program Files\COMODO
2016-08-25 00:53 - 2016-08-25 04:05 - 00000000 ____D C:\ProgramData\Comodo
2016-08-25 00:53 - 2016-08-25 00:53 - 00000000 ____D C:\ProgramData\Shared Space
2016-08-24 17:08 - 2016-08-06 06:33 - 00354264 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-08-24 17:08 - 2016-08-06 06:31 - 00077664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2016-08-24 17:08 - 2016-08-06 06:31 - 00041824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2016-08-24 17:08 - 2016-08-06 06:29 - 00199008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2016-08-24 17:08 - 2016-08-06 06:29 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2016-08-24 17:08 - 2016-08-06 06:26 - 01176664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2016-08-24 17:08 - 2016-08-06 06:23 - 00168800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-08-24 17:08 - 2016-08-06 06:18 - 02745224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-08-24 17:08 - 2016-08-06 06:18 - 00584032 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2016-08-24 17:08 - 2016-08-06 06:18 - 00396168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2016-08-24 17:08 - 2016-08-06 06:17 - 00790760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2016-08-24 17:08 - 2016-08-06 06:17 - 00619368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-08-24 17:08 - 2016-08-06 06:17 - 00450400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2016-08-24 17:08 - 2016-08-06 06:17 - 00224096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2016-08-24 17:08 - 2016-08-06 06:16 - 00435040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2016-08-24 17:08 - 2016-08-06 06:15 - 00408600 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2016-08-24 17:08 - 2016-08-06 06:13 - 01847048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-08-24 17:08 - 2016-08-06 06:13 - 01694200 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2016-08-24 17:08 - 2016-08-06 06:13 - 01066096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-08-24 17:08 - 2016-08-06 06:13 - 00595488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2016-08-24 17:08 - 2016-08-06 06:13 - 00381760 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-08-24 17:08 - 2016-08-06 06:13 - 00044472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2016-08-24 17:08 - 2016-08-06 06:09 - 00151224 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-08-24 17:08 - 2016-08-06 06:08 - 02251432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-08-24 17:08 - 2016-08-06 06:08 - 00509784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2016-08-24 17:08 - 2016-08-06 06:08 - 00313560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2016-08-24 17:08 - 2016-08-06 06:04 - 00361096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2016-08-24 17:08 - 2016-08-06 06:03 - 01557296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2016-08-24 17:08 - 2016-08-06 06:03 - 01343928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-08-24 17:08 - 2016-08-06 06:03 - 00955008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-08-24 17:08 - 2016-08-06 06:03 - 00529928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2016-08-24 17:08 - 2016-08-06 06:03 - 00036168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2016-08-24 17:08 - 2016-08-06 05:48 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-08-24 17:08 - 2016-08-06 05:48 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2016-08-24 17:08 - 2016-08-06 05:48 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2016-08-24 17:08 - 2016-08-06 05:48 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2016-08-24 17:08 - 2016-08-06 05:48 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
2016-08-24 17:08 - 2016-08-06 05:47 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2016-08-24 17:08 - 2016-08-06 05:47 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2016-08-24 17:08 - 2016-08-06 05:47 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2016-08-24 17:08 - 2016-08-06 05:46 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dasHost.exe
2016-08-24 17:08 - 2016-08-06 05:46 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModelOOBE.exe
2016-08-24 17:08 - 2016-08-06 05:46 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2016-08-24 17:08 - 2016-08-06 05:46 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2016-08-24 17:08 - 2016-08-06 05:45 - 00327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2016-08-24 17:08 - 2016-08-06 05:45 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
2016-08-24 17:08 - 2016-08-06 05:45 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2016-08-24 17:08 - 2016-08-06 05:45 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2016-08-24 17:08 - 2016-08-06 05:45 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2016-08-24 17:08 - 2016-08-06 05:45 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiougc.exe
2016-08-24 17:08 - 2016-08-06 05:45 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2016-08-24 17:08 - 2016-08-06 05:45 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiougc.exe
2016-08-24 17:08 - 2016-08-06 05:44 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2016-08-24 17:08 - 2016-08-06 05:44 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceassociation.dll
2016-08-24 17:08 - 2016-08-06 05:44 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceassociation.dll
2016-08-24 17:08 - 2016-08-06 05:43 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll
2016-08-24 17:08 - 2016-08-06 05:43 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-08-24 17:08 - 2016-08-06 05:43 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2016-08-24 17:08 - 2016-08-06 05:43 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2016-08-24 17:08 - 2016-08-06 05:42 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-08-24 17:08 - 2016-08-06 05:41 - 13867520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-08-24 17:08 - 2016-08-06 05:41 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2016-08-24 17:08 - 2016-08-06 05:41 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2016-08-24 17:08 - 2016-08-06 05:41 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2016-08-24 17:08 - 2016-08-06 05:41 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2016-08-24 17:08 - 2016-08-06 05:41 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
2016-08-24 17:08 - 2016-08-06 05:41 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2016-08-24 17:08 - 2016-08-06 05:41 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncPolicy.dll
2016-08-24 17:08 - 2016-08-06 05:40 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2016-08-24 17:08 - 2016-08-06 05:40 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-08-24 17:08 - 2016-08-06 05:40 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafpos.dll
2016-08-24 17:08 - 2016-08-06 05:40 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll
2016-08-24 17:08 - 2016-08-06 05:39 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2016-08-24 17:08 - 2016-08-06 05:39 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-08-24 17:08 - 2016-08-06 05:39 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2016-08-24 17:08 - 2016-08-06 05:39 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll
2016-08-24 17:08 - 2016-08-06 05:38 - 17187328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-08-24 17:08 - 2016-08-06 05:38 - 00526848 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-08-24 17:08 - 2016-08-06 05:37 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-08-24 17:08 - 2016-08-06 05:36 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll
2016-08-24 17:08 - 2016-08-06 05:33 - 01082368 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-08-24 17:08 - 2016-08-06 05:33 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-08-24 17:08 - 2016-08-06 05:31 - 12174336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-08-24 17:08 - 2016-08-06 05:31 - 01052672 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2016-08-24 17:08 - 2016-08-06 05:31 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2016-08-24 17:08 - 2016-08-06 05:31 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll
2016-08-24 17:08 - 2016-08-06 05:30 - 13080576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-08-24 17:08 - 2016-08-06 05:30 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2016-08-24 17:08 - 2016-08-06 05:29 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2016-08-24 17:08 - 2016-08-06 05:29 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2016-08-24 17:08 - 2016-08-06 05:29 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2016-08-24 17:08 - 2016-08-06 05:28 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2016-08-24 17:08 - 2016-08-06 05:28 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2016-08-24 17:08 - 2016-08-06 05:28 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
2016-08-24 17:08 - 2016-08-06 05:26 - 02422784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAJApi.dll
2016-08-24 17:08 - 2016-08-06 05:26 - 00758784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-08-24 17:08 - 2016-08-06 05:26 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-08-24 17:08 - 2016-08-06 05:25 - 03116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAJApi.dll
2016-08-24 17:08 - 2016-08-06 05:25 - 01595904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-08-24 17:08 - 2016-08-06 05:24 - 02095616 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-08-24 17:08 - 2016-08-06 05:24 - 02026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-08-24 17:08 - 2016-08-06 05:23 - 02370048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2016-08-24 17:08 - 2016-08-06 05:23 - 01780736 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-08-24 17:08 - 2016-08-06 05:23 - 01508864 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-08-24 17:08 - 2016-08-06 05:23 - 01491456 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-08-24 17:08 - 2016-08-06 05:23 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2016-08-24 17:08 - 2016-08-06 05:23 - 01062400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-08-24 17:08 - 2016-08-06 05:23 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-08-24 17:08 - 2016-08-06 05:23 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll
2016-08-24 17:08 - 2016-08-06 05:21 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2016-08-24 17:08 - 2016-08-06 05:19 - 01812480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2016-08-24 17:08 - 2016-08-06 05:19 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2016-08-24 17:08 - 2016-08-05 11:14 - 01066328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2016-08-24 17:08 - 2016-08-05 11:12 - 05622600 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2016-08-24 17:08 - 2016-08-05 11:10 - 00939872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll
2016-08-24 17:08 - 2016-08-05 11:05 - 00665768 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe
2016-08-24 17:08 - 2016-08-05 10:29 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
2016-08-24 17:08 - 2016-08-05 10:28 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2016-08-24 17:08 - 2016-08-05 10:22 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2016-08-24 17:08 - 2016-08-05 10:20 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2016-08-24 17:08 - 2016-08-05 10:20 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2016-08-24 17:08 - 2016-08-05 10:08 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll
2016-08-24 17:07 - 2016-08-06 06:08 - 01469120 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-08-24 17:07 - 2016-08-06 06:08 - 00587968 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-08-24 17:07 - 2016-08-06 06:08 - 00050880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-08-24 17:07 - 2016-08-06 06:02 - 00321280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-08-24 17:07 - 2016-08-06 05:48 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwmp.dll
2016-08-24 17:07 - 2016-08-06 05:48 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll
2016-08-24 17:07 - 2016-08-06 05:48 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx
2016-08-24 17:07 - 2016-08-06 05:48 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll
2016-08-24 17:07 - 2016-08-06 05:47 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx
2016-08-24 17:07 - 2016-08-06 05:47 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxmasf.dll
2016-08-24 17:07 - 2016-08-06 05:46 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL
2016-08-24 17:07 - 2016-08-06 05:46 - 09260032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.DLL
2016-08-24 17:07 - 2016-08-06 05:40 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncPolicy.dll
2016-08-24 17:07 - 2016-08-06 05:31 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-08-24 17:07 - 2016-08-06 05:30 - 12345344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-08-24 17:07 - 2016-08-06 05:29 - 13433856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-08-24 17:07 - 2016-08-05 10:23 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
2016-08-24 17:07 - 2016-08-05 10:18 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll
2016-08-23 20:26 - 2016-08-23 20:26 - 00040936 __RSH C:\ProgramData\ntuser.pol
2016-08-23 17:32 - 2016-09-10 16:14 - 00001148 _____ C:\Users\Public\Desktop\SpywareBlaster.lnk
2016-08-23 17:32 - 2016-09-04 21:38 - 00000000 ____D C:\ProgramData\TEMP
2016-08-23 17:32 - 2016-09-04 21:38 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster
2016-08-23 17:32 - 2016-08-23 17:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster
2016-08-23 17:32 - 2012-05-02 12:17 - 01070152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMCTL.OCX
2016-08-23 17:32 - 2009-03-24 13:52 - 00129872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSSTDFMT.DLL
2016-08-23 17:30 - 2016-08-23 17:30 - 00001313 _____ C:\Users\Admin\Desktop\SpybotPortable – zástupce.lnk
2016-08-23 13:23 - 2016-09-09 21:48 - 00000000 ____D C:\ProgramData\Malwarebytes Anti-Exploit
2016-08-23 13:23 - 2016-08-23 13:23 - 00000000 ____D C:\Users\Admin\AppData\Local\ElevatedDiagnostics
2016-08-23 13:23 - 2016-08-23 13:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Exploit
2016-08-23 13:23 - 2016-08-23 13:23 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Exploit
2016-08-23 13:16 - 2009-06-18 12:54 - 00006144 ____N (Sophos Plc) C:\WINDOWS\system32\F76D.tmp
2016-08-23 13:07 - 2016-08-23 13:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos
2016-08-23 13:07 - 2016-08-23 13:07 - 00000000 ____D C:\Program Files (x86)\Sophos
2016-08-23 13:07 - 2009-06-18 12:54 - 00006144 ____N (Sophos Plc) C:\WINDOWS\system32\2DAB.tmp
2016-08-23 13:06 - 2016-08-23 13:06 - 00000000 ____D C:\Program Files (x86)\ESET
2016-08-23 13:03 - 2016-08-23 17:27 - 05200384 _____ (AVAST Software) C:\Users\Admin\Desktop\aswmbr.exe
2016-08-23 13:00 - 2016-08-23 13:06 - 02870984 _____ (ESET) C:\Users\Admin\Desktop\esetsmartinstaller_csy.exe
2016-08-23 13:00 - 2016-08-23 13:00 - 00000000 ____D C:\ProgramData\ESET
2016-08-23 12:58 - 2016-08-23 17:29 - 00380928 _____ C:\Users\Admin\Desktop\gmer.exe
2016-08-23 12:58 - 2016-08-23 13:00 - 02991832 _____ (ESET) C:\Users\Admin\Desktop\ERARemover_x64.exe
2016-08-23 12:58 - 2016-08-23 12:58 - 00371282 _____ C:\Users\Admin\Downloads\gmer.zip
2016-08-23 12:56 - 2016-08-23 12:56 - 11427128 _____ (Bitdefender LLC) C:\Users\Admin\Desktop\BootkitRemoval_x64.exe
2016-08-23 12:54 - 2016-08-23 12:55 - 01610560 _____ (Malwarebytes) C:\Users\Admin\Desktop\JRT.exe
2016-08-23 12:50 - 2016-08-23 12:50 - 00000000 ____D C:\Users\Public\Documents\Heimdal Security
2016-08-23 12:48 - 2016-08-25 06:05 - 00000000 ____D C:\ProgramData\Heimdal Security
2016-08-23 12:47 - 2016-08-23 12:50 - 00000000 ____D C:\ProgramData\CSIS
2016-08-23 12:43 - 2016-08-23 12:43 - 00001105 _____ C:\Users\Admin\Desktop\mbar – zástupce.lnk
2016-08-23 11:10 - 2016-09-10 16:14 - 00001171 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-08-23 11:10 - 2016-08-23 11:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-08-23 11:10 - 2016-08-23 11:10 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-08-23 11:10 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-08-23 11:10 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-08-23 08:43 - 2016-08-23 08:44 - 00000000 ____D C:\Users\Admin\Documents\BFH
2016-08-23 08:34 - 2016-08-23 09:59 - 00001590 _____ C:\Users\Admin\Desktop\McAfeeStingerPortable – zástupce.lnk
2016-08-22 11:25 - 2016-08-26 00:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\by.xatab
2016-08-22 09:08 - 2016-08-22 09:08 - 00000000 ____D C:\Users\Admin\AppData\LocalLow\Reflect Studios
2016-08-22 08:24 - 2016-08-23 12:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield Hardline
2016-08-22 02:31 - 2016-08-22 02:31 - 00000000 ____D C:\Quarantine
2016-08-22 02:11 - 2016-08-22 02:12 - 00000000 ____D C:\Users\Admin\Downloads\McAfeeStingerPortable
2016-08-21 04:20 - 2016-08-24 20:57 - 17005142 _____ C:\Users\Admin\Desktop\Náhradní sladidla.pptx
2016-08-21 03:03 - 2016-08-21 03:03 - 00001071 _____ C:\Users\Admin\Desktop\Dr. House 1.-8. serie CZ – zástupce.lnk
2016-08-21 02:49 - 2016-09-07 21:07 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-08-21 02:49 - 2016-09-07 20:36 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-08-21 02:49 - 2016-08-23 11:10 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-08-21 02:34 - 2016-09-07 21:06 - 00000000 ____D C:\Users\Admin\Downloads\mbar
2016-08-21 02:34 - 2016-09-07 20:35 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-08-20 20:07 - 2016-08-20 20:07 - 00000000 ____D C:\Users\Admin\AppData\Local\PAYDAY
2016-08-20 19:39 - 2016-08-21 03:32 - 00345848 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys
2016-08-20 19:39 - 2016-08-20 19:39 - 00000000 ____D C:\Users\Admin\AppData\Local\UnrealEngine
2016-08-20 19:39 - 2016-08-20 19:39 - 00000000 ____D C:\Users\Admin\AppData\Local\DeadByDaylight
2016-08-20 19:09 - 2016-08-20 19:09 - 00000000 ____D C:\Users\Admin\Downloads\SpybotPortable
2016-08-20 19:09 - 2016-08-20 19:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safer Networking
2016-08-20 19:09 - 2016-08-20 19:09 - 00000000 ____D C:\Program Files (x86)\Safer Networking
2016-08-20 18:53 - 2016-08-20 19:06 - 00000000 ____D C:\Users\Admin\AppData\Roaming\TrueCrypt
2016-08-19 23:23 - 2016-08-19 23:23 - 00003086 _____ C:\WINDOWS\System32\Tasks\SmartDefrag_Update
2016-08-18 14:52 - 2016-08-18 14:52 - 00000000 ____D C:\Users\Admin\AppData\Roaming\QuickScan
2016-08-17 19:52 - 2016-08-17 19:52 - 03784256 _____ C:\Users\Admin\Desktop\adwcleaner_6.000.exe
2016-08-17 19:46 - 2016-09-10 16:14 - 00001935 _____ C:\Users\Admin\Desktop\herdProtectScan – zástupce.lnk
2016-08-17 07:49 - 2016-09-10 16:14 - 00001285 _____ C:\Users\Public\Desktop\Malware Hunter.lnk
2016-08-17 07:49 - 2016-09-05 20:45 - 00000000 ____D C:\Users\Admin\AppData\Roaming\GlarySoft
2016-08-17 07:49 - 2016-09-05 20:15 - 00001297 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malware Hunter.lnk
2016-08-17 07:49 - 2016-08-18 02:06 - 00000000 ____D C:\ProgramData\Ultra Adware Killer
2016-08-17 07:49 - 2016-08-17 07:49 - 00020160 _____ (Glarysoft Ltd) C:\WINDOWS\system32\Drivers\GUSBootStartup.sys
2016-08-17 07:49 - 2016-08-17 07:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glarysoft
2016-08-17 07:49 - 2016-08-17 07:49 - 00000000 ____D C:\ProgramData\Glarysoft
2016-08-17 07:49 - 2016-08-17 07:49 - 00000000 ____D C:\Program Files (x86)\Glarysoft
2016-08-17 07:15 - 2016-08-17 07:15 - 00073928 _____ C:\WINDOWS\system32\Drivers\fsbts.sys
2016-08-17 07:14 - 2016-08-17 07:15 - 00000000 ____D C:\ProgramData\F-Secure
2016-08-17 07:14 - 2016-08-17 07:14 - 00000000 ____D C:\Users\Admin\AppData\Local\F-Secure
2016-08-17 07:14 - 2016-08-17 07:14 - 00000000 ____D C:\Users\Admin\AppData\Local\FSDART
2016-08-17 07:13 - 2016-08-17 07:14 - 00524248 _____ (F-Secure Corporation) C:\Users\Admin\Desktop\F-SecureOnlineScanner.exe
2016-08-17 06:42 - 2016-08-17 06:42 - 00000000 ____D C:\Program Files\Reason
2016-08-17 06:41 - 2016-08-17 07:56 - 140567744 _____ C:\Users\Admin\Desktop\Dr. Web.exe
2016-08-17 01:29 - 2016-09-10 16:14 - 00000955 _____ C:\Users\Admin\Desktop\Puran Defrag.lnk
2016-08-17 01:29 - 2016-09-07 19:19 - 00000000 ____D C:\Program Files\Puran Defrag
2016-08-17 01:29 - 2016-08-17 01:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Puran Defrag
2016-08-17 01:29 - 2014-01-23 19:56 - 00287616 _____ (Puran Software) C:\WINDOWS\system32\PuranDC.exe
2016-08-17 01:29 - 2013-08-15 16:39 - 01367424 _____ (Puran Software) C:\WINDOWS\system32\PuranFD.exe
2016-08-17 01:29 - 2013-08-15 16:39 - 00292736 _____ (Puran Software) C:\WINDOWS\system32\PuranDefragS.exe
2016-08-17 01:29 - 2013-08-15 16:39 - 00256896 _____ (Puran Software) C:\WINDOWS\system32\PuranDefrag.dll
2016-08-17 01:29 - 2013-08-15 16:39 - 00132480 _____ (Puran Software) C:\WINDOWS\system32\PuranDefragBT.exe
2016-08-16 08:51 - 2016-08-16 08:51 - 00000000 ____D C:\Users\Admin\Documents\StartEd
2016-08-16 08:32 - 2016-08-17 07:49 - 01029344 _____ (Carifred) C:\Users\Admin\Desktop\UltraAdwareKiller(1).exe
2016-08-16 07:29 - 2016-08-16 07:29 - 00000000 ____D C:\Program Files\HitmanPro
2016-08-16 07:28 - 2016-08-16 07:42 - 00000000 ____D C:\ProgramData\HitmanPro
2016-08-15 20:10 - 2016-08-15 20:11 - 00000000 ____D C:\Users\Admin\Documents\SpybotPortable
2016-08-15 20:01 - 2016-08-23 10:00 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2016-08-15 20:00 - 2016-08-23 10:00 - 00000000 ____D C:\Program Files\Rockstar Games
2016-08-15 19:58 - 2016-08-15 19:58 - 00000000 ____D C:\Users\Admin\AppData\Local\Rockstar Games
2016-08-12 15:23 - 2016-08-12 15:23 - 00000000 ____D C:\Users\Admin\AppData\Local\Apps\2.0
2016-08-12 04:17 - 2016-08-27 05:54 - 00000000 ____D C:\Users\Admin\Documents\4A Games
2016-08-12 04:13 - 2016-08-12 04:13 - 00000000 ____D C:\Users\Admin\AppData\Local\4A Games
2016-08-12 03:40 - 2016-08-12 03:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crysis 3
2016-08-12 01:06 - 2016-08-12 01:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hry
2016-08-12 00:26 - 2016-08-12 00:26 - 00000000 ____D C:\ProgramData\Electronic Arts
2016-08-11 17:45 - 2016-08-11 17:45 - 10285472 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\SET660B.tmp

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-09-10 16:32 - 2016-05-13 21:03 - 00000000 ____D C:\Users\Admin\Downloads\Telegram Desktop
2016-09-10 16:30 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-09-10 16:26 - 2016-08-06 19:31 - 00000000 ____D C:\Users\Admin\AppData\Local\Battle.net
2016-09-10 16:22 - 2016-08-06 19:19 - 00000000 ____D C:\Program Files (x86)\Steam
2016-09-10 16:18 - 2016-08-09 01:53 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Skype
2016-09-10 16:14 - 2016-08-09 03:08 - 00001355 _____ C:\Users\Public\Desktop\Panda Cloud Cleaner.lnk
2016-09-10 16:14 - 2016-08-08 17:58 - 00001229 _____ C:\Users\Admin\Desktop\Smart Defrag 5.lnk
2016-09-10 16:14 - 2016-08-08 14:18 - 00001816 _____ C:\Users\Admin\Desktop\Eraser.lnk
2016-09-10 16:14 - 2016-08-07 16:03 - 00001743 _____ C:\Users\Public\Desktop\Recuva.lnk
2016-09-10 16:14 - 2016-08-07 16:02 - 00002124 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2016-09-10 16:14 - 2016-08-07 15:17 - 00001072 _____ C:\Users\Admin\Desktop\Hard Disk Sentinel.lnk
2016-09-10 16:14 - 2016-08-07 13:45 - 00001163 _____ C:\Users\Public\Desktop\Overwatch.lnk
2016-09-10 16:14 - 2016-08-07 13:12 - 00002180 _____ C:\Users\Public\Desktop\Bitdefender Safepay.lnk
2016-09-10 16:14 - 2016-08-07 02:49 - 00000960 _____ C:\Users\Admin\Desktop\TrueCrypt.lnk
2016-09-10 16:14 - 2016-08-07 02:24 - 00001427 _____ C:\Users\Public\Desktop\IObit Uninstaller.lnk
2016-09-10 16:14 - 2016-08-07 01:32 - 00001102 _____ C:\Users\Admin\Desktop\HD Tune Pro.lnk
2016-09-10 16:14 - 2016-08-06 20:07 - 00001155 _____ C:\Users\Public\Desktop\Prime Benchmark.lnk
2016-09-10 16:14 - 2016-08-06 19:58 - 00001032 _____ C:\Users\Public\Desktop\PWGen.lnk
2016-09-10 16:14 - 2016-08-06 19:31 - 00001216 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-09-10 16:14 - 2016-08-06 19:30 - 00002332 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-09-10 16:14 - 2016-08-06 19:19 - 00001139 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-09-10 16:14 - 2016-08-06 19:19 - 00001032 _____ C:\Users\Public\Desktop\Steam.lnk
2016-09-10 16:14 - 2015-05-26 22:20 - 00001216 _____ C:\Users\Admin\Desktop\Start Tor Browser.lnk
2016-09-10 16:13 - 2016-08-09 01:53 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-09-10 16:13 - 2016-08-09 01:52 - 00000000 ____D C:\ProgramData\Skype
2016-09-10 16:10 - 2016-07-30 03:06 - 00000000 ____D C:\Users\Admin\AppData\Local\Packages
2016-09-10 15:59 - 2016-08-06 23:15 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-09-10 14:36 - 2016-08-06 23:22 - 00000000 ____D C:\Users\Admin
2016-09-10 14:36 - 2016-08-06 19:31 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-09-10 14:08 - 2016-07-30 03:07 - 03462348 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-09-10 14:08 - 2016-07-17 00:25 - 01546362 _____ C:\WINDOWS\system32\perfh005.dat
2016-09-10 14:08 - 2016-07-17 00:25 - 00442772 _____ C:\WINDOWS\system32\perfc005.dat
2016-09-10 14:03 - 2016-08-06 23:30 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-09-10 03:28 - 2016-08-07 00:29 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin
2016-09-10 03:28 - 2016-07-16 08:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2016-09-10 03:04 - 2016-08-06 19:40 - 00000000 ____D C:\Users\Admin\AppData\Roaming\KeePass
2016-09-09 23:18 - 2016-08-07 02:55 - 00000000 ____D C:\Program Files (x86)\Overwatch
2016-09-09 23:02 - 2016-08-06 19:19 - 00000000 ____D C:\Users\Admin\AppData\Roaming\vlc
2016-09-09 01:12 - 2016-08-07 02:24 - 00000000 ____D C:\Users\Admin\AppData\Roaming\IObit
2016-09-09 01:12 - 2016-08-07 02:24 - 00000000 ____D C:\ProgramData\IObit
2016-09-09 01:12 - 2016-08-07 02:24 - 00000000 ____D C:\Program Files (x86)\IObit
2016-09-07 20:00 - 2016-08-08 15:22 - 00002223 _____ C:\Users\Public\Desktop\Driver Booster 3.lnk
2016-09-07 14:11 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
2016-09-06 20:15 - 2016-07-30 09:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-09-06 18:29 - 2016-06-23 20:21 - 00110880 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-1-0-17-0.exe
2016-09-06 18:29 - 2016-06-23 20:20 - 00125216 _____ C:\WINDOWS\system32\vulkaninfo-1-1-0-17-0.exe
2016-09-06 18:27 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\INF
2016-09-06 18:26 - 2016-08-06 23:17 - 00000000 ____D C:\Program Files\AMD
2016-09-06 18:26 - 2016-07-30 03:26 - 00000000 ____D C:\Users\Admin\AppData\Local\AMD
2016-09-06 16:39 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\rescache
2016-09-05 22:42 - 2015-11-17 16:44 - 00000000 ____D C:\Users\Admin\Desktop\Škola
2016-09-04 01:51 - 2015-08-02 02:45 - 11969296 _____ C:\Users\Admin\Desktop\Nový textový dokument.txt
2016-09-03 21:05 - 2016-04-27 09:00 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-09-03 21:04 - 2016-08-06 23:15 - 00262688 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-09-03 21:02 - 2016-07-17 00:30 - 00000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2016-09-03 21:02 - 2016-07-16 13:47 - 00000000 ___SD C:\WINDOWS\system32\dsc
2016-09-03 21:02 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-09-03 21:02 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SystemApps
2016-09-03 21:02 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-09-03 21:02 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2016-09-03 21:02 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2016-09-03 21:02 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\et-EE
2016-09-03 21:02 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\es-MX
2016-09-03 21:02 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\en-GB
2016-09-03 21:02 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2016-09-03 21:02 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\Provisioning
2016-09-03 21:02 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2016-09-03 12:06 - 2016-07-16 13:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-08-30 00:59 - 2016-07-18 14:27 - 01359006 _____ C:\Users\Admin\Desktop\DTBS.kdbx
2016-08-27 05:54 - 2015-07-15 05:22 - 00000000 ____D C:\Users\Admin\Documents\RegRun2
2016-08-27 05:51 - 2016-08-07 16:03 - 00000000 ____D C:\Program Files\Recuva
2016-08-26 13:00 - 2016-08-06 23:22 - 00000000 ____D C:\Users\Baruška
2016-08-26 12:59 - 2016-07-17 00:30 - 00000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents
2016-08-25 14:45 - 2016-07-30 03:24 - 00000000 ____D C:\ProgramData\Package Cache
2016-08-25 07:11 - 2016-08-06 19:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-08-25 07:11 - 2016-08-06 19:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-08-25 06:47 - 2016-08-09 03:10 - 00000000 ____D C:\ProgramData\Auslogics
2016-08-25 06:06 - 2016-08-08 18:03 - 00000000 ____D C:\ProgramData\r2 Studios
2016-08-25 06:06 - 2016-08-08 18:03 - 00000000 ____D C:\Program Files\r2 Studios
2016-08-25 05:55 - 2016-07-17 20:50 - 00632904 _____ (O&O Software GmbH) C:\Users\Admin\Desktop\OOSU10.exe
2016-08-25 00:59 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-08-23 20:26 - 2016-07-30 03:34 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2016-08-23 17:32 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2016-08-23 13:24 - 2016-08-07 03:09 - 00000000 ____D C:\WINDOWS\pss
2016-08-23 08:38 - 2015-04-18 14:18 - 00000080 _____ C:\Users\Admin\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
2016-08-23 08:34 - 2016-08-06 18:56 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-08-22 08:27 - 2016-08-07 02:25 - 00000000 ____D C:\WINDOWS\SysWOW64\directx
2016-08-22 04:40 - 2016-08-07 02:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2016-08-16 20:06 - 2016-08-08 15:53 - 00001232 _____ C:\Users\Admin\Desktop\dfrgui.lnk
2016-08-16 07:29 - 2016-08-10 12:03 - 11438608 _____ (SurfRight B.V.) C:\Users\Admin\Desktop\HitmanPro_x64.exe
2016-08-16 05:32 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-08-16 01:53 - 2016-08-06 20:07 - 00000000 ____D C:\Program Files (x86)\Prime Benchmark
2016-08-11 17:46 - 2016-07-25 22:56 - 09311368 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\SET7FA6.tmp
2016-08-11 17:46 - 2016-07-15 21:30 - 00149984 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\SETBC6F.tmp
2016-08-11 17:46 - 2016-07-15 21:18 - 00181064 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\SET98E5.tmp
2016-08-11 17:45 - 2016-07-25 22:56 - 07234888 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\SET7A16.tmp
2016-08-11 17:45 - 2016-07-25 22:55 - 00134448 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\SETBBA2.tmp
2016-08-11 17:45 - 2016-07-15 21:18 - 09110856 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\SET8637.tmp
2016-08-11 17:45 - 2016-07-15 21:18 - 01548000 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\SET99D3.tmp
2016-08-11 17:45 - 2016-07-15 21:18 - 01273072 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\SET9BF9.tmp
2016-08-11 17:43 - 2016-07-25 22:53 - 00875152 _____ (AMD) C:\WINDOWS\system32\SETBE0D.tmp
2016-08-11 17:43 - 2016-07-15 21:26 - 26719376 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\SET62DA.tmp
2016-08-11 17:43 - 2016-07-15 21:26 - 00510096 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\SET9884.tmp
2016-08-11 17:38 - 2016-07-15 21:29 - 10970120 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\SET788D.tmp

==================== Files in the root of some directories =======

2016-08-06 23:18 - 2016-08-06 23:18 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Admin\AppData\Local\Temp\avgnt.exe
C:\Users\Admin\AppData\Local\Temp\SkypeSetup.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-09-03 11:35

==================== End of FRST.txt ============================