Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17.03.2019
Ran by casyo (administrator) on DESKTOP-FVLKRAU (28-03-2019 20:58:19)
Running from C:\Users\casyo\Desktop
Loaded Profiles: casyo (Available Profiles: casyo)
Platform: Windows 10 Pro Version 1803 17134.648 (X64) Language: Čeština (Česká republika)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\ProtectedService.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.YourPhone_1.0.20594.0_x64__8wekyb3d8bbwe\YourPhone.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19021.10411.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe
(GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\GraphicsCardEngine.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Skillbrains) [File not signed] C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.35\Lightshot.exe
(GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\GIGABYTE\SmartSurvey\GbtCareBotService.exe
(GIGA-BYTE TECHNOLOGY CO., LTD. -> Microsoft) C:\Program Files (x86)\GIGABYTE\GService\GCloud.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_1.16.1012.0_x64__8wekyb3d8bbwe\GameBar.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(uTorrent.CZ -> BitTorrent, Inc.) [File not signed] C:\Users\casyo\AppData\Roaming\uTorrent\utorrent.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9274312 2018-05-04] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [98024 2019-03-12] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira System Speedup User Starter] => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [323632 2018-12-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-12-16] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-2172372831-1064090382-2824033594-1001\...\Run: [uTorrent] => C:\Users\casyo\AppData\Roaming\uTorrent\utorrent.exe [414656 2018-10-25] (uTorrent.CZ -> BitTorrent, Inc.) [File not signed]
HKU\S-1-5-21-2172372831-1064090382-2824033594-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
HKU\S-1-5-21-2172372831-1064090382-2824033594-1001\...\MountPoints2: {34e6ab62-48c2-11e9-87f3-e0d55eaeb3a8} - "H:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-2172372831-1064090382-2824033594-1001\...\MountPoints2: {ba0e5039-f18a-11e8-87ce-e0d55eaeb3a8} - "G:\HiSuiteDownLoader.exe" 
HKLM\...\Drivers32: [vidc.i420] => lvcod64.dll
HKLM\...\Drivers32-x32: [vidc.i420] => lvcodec2.dll
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\73.0.3683.86\Installer\chrmstp.exe [2019-03-26] (Google LLC -> Google Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{5EF9A232-5B5B-4768-95F2-3F601FB184E3}] -> C:\Windows\system32\AutoGreenCP.dll [2018-10-28] () [File not signed]
Lsa: [Authentication Packages] msv1_0 SshdPinAuthLsa
Startup: C:\Users\casyo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GIGABYTE AORUS GRAPHICS ENGINE.lnk [2018-10-28]
ShortcutTarget: GIGABYTE AORUS GRAPHICS ENGINE.lnk -> C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\autorun.exe () [File not signed]
GroupPolicy: Restriction ? <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 192.168.1.1
Tcpip\..\Interfaces\{6f7295dc-33cc-417e-980a-bcfd2addac97}: [DhcpNameServer] 8.8.8.8 192.168.1.1

Internet Explorer:
==================
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: GBHO.BHO -> {45d30484-7ded-43d9-957a-d2fd1f046511} -> C:\Windows\system32\mscoree.dll [2018-04-12] (Microsoft Windows -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\ssv.dll [2019-02-06] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\jp2ssv.dll [2019-02-06] (Oracle America, Inc. -> Oracle Corporation)
Toolbar: HKLM - Smart Backup - {1d09c093-f71e-43c3-b948-19316cbd695e} - C:\Windows\system32\mscoree.dll [2018-04-12] (Microsoft Windows -> Microsoft Corporation)

Edge: 
======
Edge Extension: (Translator For Microsoft Edge) -> MicrosoftTranslate_MicrosoftTranslatorforMicrosoftEdge_8wekyb3d8bbwe => C:\Program Files\WindowsApps\Microsoft.TranslatorforMicrosoftEdge_0.91.51.0_neutral__8wekyb3d8bbwe [2019-02-01]

FireFox:
========
FF Plugin-x32: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-02-06] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-02-06] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-11-29] (NVIDIA Corporation -> NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-11-29] (NVIDIA Corporation -> NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-28] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-28] (Google Inc -> Google LLC)

Chrome: 
=======
CHR HomePage: Default -> hxxp://google.sk/
CHR StartupUrls: Default -> "hxxp://google.sk/"
CHR Profile: C:\Users\casyo\AppData\Local\Google\Chrome\User Data\Default [2019-03-28]
CHR Extension: (Prezentácie) - C:\Users\casyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-11-24]
CHR Extension: (Dokumenty) - C:\Users\casyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-11-24]
CHR Extension: (Disk Google) - C:\Users\casyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-11-24]
CHR Extension: (YouTube) - C:\Users\casyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-11-24]
CHR Extension: (Tampermonkey) - C:\Users\casyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2019-02-23]
CHR Extension: (Google Apps Script) - C:\Users\casyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\eoieeedlomnegifmaghhjnghhmcldobl [2018-11-24]
CHR Extension: (Tabuľky) - C:\Users\casyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-11-24]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\casyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-11-24]
CHR Extension: (AdBlock) - C:\Users\casyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2019-03-24]
CHR Extension: (The West) - C:\Users\casyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilkgeioneoemibpddeiamfgiofnpjifm [2018-11-24]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\casyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-11-24]
CHR Extension: (Script Installation Services/Website Setup) - C:\Users\casyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojkfkmbechelifpehnokcfhlamloapmc [2018-11-24]
CHR Extension: (Gmail) - C:\Users\casyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-11-24]
CHR Extension: (Chrome Media Router) - C:\Users\casyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-03-26]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [893008 2019-03-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntivirProtectedService; C:\Program Files (x86)\Avira\Antivirus\ProtectedService.exe [314264 2019-03-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [248312 2019-03-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [248312 2019-03-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1191152 2019-03-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [455424 2019-03-12] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AviraOptimizerHost; C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe [2979032 2018-12-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AviraPhantomVPN; C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [362552 2019-03-11] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AviraUpdaterService; C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe [104752 2019-03-26] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [7356680 2018-10-29] (BattlEye Innovations e.K. -> )
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [781440 2018-12-09] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R2 EasyTuneEngineService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe [146864 2018-05-17] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S4 gadjservice; C:\Program Files (x86)\GIGABYTE\AppCenter\AdjustService.exe [17920 2015-06-25] () [File not signed]
R2 GbtCareBotService; C:\Program Files (x86)\GIGABYTE\SmartSurvey\GbtCareBotService.exe [138160 2018-05-22] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 Gservice; C:\Program Files (x86)\GIGABYTE\GService\GCloud.exe [19888 2016-12-02] (GIGA-BYTE TECHNOLOGY CO., LTD. -> Microsoft)
S3 HwmRecordService; C:\Program Files (x86)\GIGABYTE\SIV\HwmRecordService.exe [117680 2018-04-12] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [790920 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [790920 2019-01-30] (NVIDIA Corporation -> NVIDIA Corporation)
S4 OcButtonService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\OcButtonService.exe [123312 2018-05-17] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4737560 2019-02-16] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 Smart TimeLock; C:\Program Files (x86)\GIGABYTE\Smart TimeLock\TimeMgmtDaemon.exe [102400 2013-02-22] (Gigabyte Technology CO., LTD.) [File not signed]
S3 sshd; C:\Windows\System32\OpenSSH\sshd.exe [970240 2018-05-20] (Microsoft Windows -> )
S3 SshdBroker; C:\Windows\System32\SshdBroker.dll [285696 2019-02-16] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\NisSrv.exe [3917016 2018-10-29] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1810.5-0\MsMpEng.exe [114208 2018-10-29] (Microsoft Corporation -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 
R2 NvTelemetryContainer; "C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdgpio2; C:\Windows\System32\drivers\amdgpio2.sys [35176 2018-10-28] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc)
R3 amdgpio3; C:\Windows\System32\drivers\amdgpio3.sys [33120 2018-10-28] (AMD PMP-PE CB Code Signer v20160415 -> Advanced Micro Devices, Inc)
S3 amdkmcsp; C:\Windows\system32\DRIVERS\amdkmcsp.sys [101232 2017-06-12] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc. )
R3 AMDPCIDev; C:\Windows\System32\drivers\AMDPCIDev.sys [31600 2018-10-28] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R0 amdpsp; C:\Windows\System32\DRIVERS\amdpsp.sys [137496 2018-09-12] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc. )
R2 AMDRyzenMasterDriver; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\AMD\Ryzen\AMDRyzenMasterDriver.sys [70304 2017-11-16] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
R0 amd_sata; C:\Windows\System32\drivers\amd_sata.sys [93240 2018-10-28] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R0 amd_xata; C:\Windows\System32\drivers\amd_xata.sys [33336 2018-10-28] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [22240 2013-10-28] (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [75432 2019-03-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S0 avelam; C:\Windows\System32\drivers\avelam.sys [22336 2019-03-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [188008 2019-03-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [175104 2019-03-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [46704 2019-03-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [89736 2019-03-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [45472 2019-03-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R3 e1rexpress; C:\Windows\system32\DRIVERS\e1r65x64.sys [548800 2018-10-28] (Intel(R) INTELNPG1 -> Intel Corporation)
R3 gdrv; C:\Windows\gdrv.sys [26792 2018-10-28] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 gdrv2; C:\Windows\gdrv2.sys [32720 2018-10-28] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 GLCKIO2; C:\Program Files (x86)\GIGABYTE\RGBFusion\GLCKIO2.sys [19392 2018-03-08] (ASUSTeK Computer Inc. -> )
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2018-10-28] (Martin Malik - REALiX -> REALiX(tm))
S3 MSIO; C:\Program Files (x86)\GIGABYTE\RGBFusion\msio64.sys [25616 2018-02-12] (MICSYS Technology Co., Ltd. -> )
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_9db4450b8107f59a\nvlddmkm.sys [20420352 2018-12-01] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30336 2019-01-16] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [70024 2018-10-01] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [66792 2018-10-03] (NVIDIA Corporation -> NVIDIA Corporation)
S3 phantomtap; C:\Windows\System32\drivers\phantomtap.sys [45056 2018-11-08] (Avira Operations GmbH & Co. KG -> The OpenVPN Project)
R3 UcmCxUcsiNvppc; C:\Windows\System32\drivers\UcmCxUcsiNvppc.sys [459912 2018-11-13] (NVIDIA Corporation -> NVIDIA Corporation)
S1 UsbCharger; C:\Windows\System32\DRIVERS\UsbCharger.sys [22240 2013-10-24] (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [46184 2018-10-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [328696 2018-10-29] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [60408 2018-10-29] (Microsoft Windows -> Microsoft Corporation)
S3 cpuz143; \??\C:\Windows\temp\cpuz143\cpuz143_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-03-28 20:58 - 2019-03-28 20:58 - 000021974 _____ C:\Users\casyo\Desktop\FRST.txt
2019-03-28 20:58 - 2019-03-28 20:58 - 000000000 ____D C:\FRST
2019-03-28 20:57 - 2019-03-28 20:57 - 001222144 _____ C:\Users\casyo\Desktop\RSITx64.exe
2019-03-28 20:56 - 2019-03-28 20:56 - 002434048 _____ (Farbar) C:\Users\casyo\Desktop\FRST64.exe
2019-03-27 12:20 - 2019-03-27 12:20 - 000000000 ____D C:\Users\casyo\AppData\Roaming\miniworddata410
2019-03-27 12:18 - 2019-03-28 15:14 - 000000000 ____D C:\Users\casyo\AppData\Roaming\miniworldOverseasgame
2019-03-27 12:18 - 2019-03-27 12:18 - 000001091 _____ C:\Users\casyo\Desktop\Mini World.lnk
2019-03-27 12:18 - 2019-03-27 12:18 - 000000000 ____D C:\Users\casyo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mini World
2019-03-27 09:15 - 2019-03-28 20:46 - 000000000 ____D C:\Program Files (x86)\Ubisoft
2019-03-26 22:12 - 2019-03-26 22:15 - 000000000 ____D C:\Users\casyo\Desktop\GlobalMu.net Season 13v7
2019-03-26 22:09 - 2019-03-26 22:11 - 1211105070 _____ C:\Users\casyo\Desktop\GlobalMu.net Season 13v7.rar
2019-03-26 17:12 - 2019-03-26 17:12 - 000001175 _____ C:\Users\casyo\Desktop\VictorVran.lnk
2019-03-26 13:18 - 2019-03-26 17:12 - 000000000 ____D C:\Users\casyo\AppData\Roaming\Victor Vran
2019-03-26 12:48 - 2019-03-26 12:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Victor Vran [GOG.com]
2019-03-26 12:47 - 2019-03-26 12:47 - 000000000 ____D C:\ProgramData\GOG.com
2019-03-26 11:26 - 2019-03-26 11:26 - 000000000 ____D C:\Users\casyo\AppData\LocalLow\Antigravity
2019-03-26 11:23 - 2019-03-26 11:23 - 000000718 _____ C:\Users\casyo\Desktop\Hell Warders.lnk
2019-03-26 09:49 - 2019-03-26 09:49 - 000001391 _____ C:\Users\casyo\Desktop\The Simpsons - Hit & Run.lnk
2019-03-26 09:49 - 2019-03-26 09:49 - 000000000 ____D C:\Users\casyo\AppData\Roaming\The Simpsons - Hit & Run
2019-03-26 09:49 - 2019-03-26 09:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics
2019-03-26 09:47 - 2019-03-26 09:47 - 000000000 ____D C:\Program Files (x86)\R.G. Mechanics
2019-03-26 09:08 - 2019-03-26 09:30 - 000000000 ____D C:\Users\casyo\Documents\Mount&Blade Warband Savegames
2019-03-26 09:06 - 2019-03-26 09:15 - 000000000 ____D C:\Users\casyo\Documents\Mount&Blade Warband
2019-03-26 09:06 - 2019-03-26 09:07 - 000000000 ____D C:\Users\casyo\AppData\Roaming\Mount&Blade Warband
2019-03-26 09:06 - 2019-03-26 09:06 - 000000000 ____D C:\ProgramData\SkidRow
2019-03-26 09:04 - 2019-03-26 09:04 - 000000000 ____D C:\Users\casyo\AppData\Roaming\Gagun
2019-03-17 11:42 - 2019-03-17 11:42 - 000000000 ____D C:\Users\Public\Documents\uPlay
2019-03-17 11:41 - 2019-03-17 11:41 - 000000836 _____ C:\Users\casyo\Desktop\Far Cry New Dawn.lnk
2019-03-16 12:36 - 2019-03-16 12:36 - 000000000 ____D C:\Users\casyo\AppData\Roaming\The Creative Assembly
2019-03-15 23:26 - 2019-03-15 23:26 - 000000000 ____D C:\Users\casyo\AppData\LocalLow\2 Zombie Games
2019-03-15 23:22 - 2019-03-15 23:22 - 000000723 _____ C:\Users\casyo\Desktop\Quest Hunter.lnk
2019-03-13 08:36 - 2019-03-06 16:39 - 000720536 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2019-03-13 08:36 - 2019-03-06 16:37 - 001616608 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2019-03-13 08:36 - 2019-03-06 16:36 - 001047352 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2019-03-13 08:36 - 2019-03-06 16:20 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\iemigplugin.dll
2019-03-13 08:36 - 2019-03-06 16:19 - 000058368 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2019-03-13 08:36 - 2019-03-06 16:17 - 012730368 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2019-03-13 08:36 - 2019-03-06 16:17 - 000810496 _____ C:\Windows\system32\MBR2GPT.EXE
2019-03-13 08:36 - 2019-03-06 16:17 - 000116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys
2019-03-13 08:36 - 2019-03-06 16:14 - 001180672 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2019-03-13 08:36 - 2019-03-06 16:14 - 000522240 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2019-03-13 08:36 - 2019-03-06 16:14 - 000488448 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2019-03-13 08:36 - 2019-03-06 16:13 - 004053504 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2019-03-13 08:36 - 2019-03-06 16:13 - 001856512 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2019-03-13 08:36 - 2019-03-06 16:13 - 001662976 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2019-03-13 08:36 - 2019-03-06 16:13 - 001364992 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvruserservice.dll
2019-03-13 08:36 - 2019-03-06 16:12 - 001180672 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2019-03-13 08:36 - 2019-03-06 13:18 - 000918032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2019-03-13 08:36 - 2019-03-06 13:18 - 000607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2019-03-13 08:36 - 2019-03-06 13:10 - 000044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf3216.dll
2019-03-13 08:36 - 2019-03-06 13:09 - 011919360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2019-03-13 08:36 - 2019-03-06 13:06 - 000425472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
2019-03-13 08:36 - 2019-03-06 13:05 - 004054016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2019-03-13 08:36 - 2019-03-06 13:05 - 001586176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2019-03-13 08:36 - 2019-03-06 13:04 - 001471488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2019-03-13 08:36 - 2019-03-06 13:04 - 000423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2019-03-13 08:36 - 2019-03-06 12:59 - 001008640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.MixedRealityCapture.dll
2019-03-13 08:36 - 2019-03-06 10:29 - 001035040 _____ (Microsoft Corporation) C:\Windows\system32\ApplyTrustOffline.exe
2019-03-13 08:36 - 2019-03-06 10:16 - 002822456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2019-03-13 08:36 - 2019-03-06 10:16 - 001457032 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2019-03-13 08:36 - 2019-03-06 10:16 - 001188000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2019-03-13 08:36 - 2019-03-06 10:16 - 000776792 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2019-03-13 08:36 - 2019-03-06 10:16 - 000722744 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2019-03-13 08:36 - 2019-03-06 10:16 - 000566568 _____ (Microsoft Corporation) C:\Windows\system32\tcblaunch.exe
2019-03-13 08:36 - 2019-03-06 10:16 - 000527160 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
2019-03-13 08:36 - 2019-03-06 10:11 - 000493880 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2019-03-13 08:36 - 2019-03-06 10:10 - 000248880 _____ (Microsoft Corporation) C:\Windows\system32\weretw.dll
2019-03-13 08:36 - 2019-03-06 10:07 - 001219896 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2019-03-13 08:36 - 2019-03-06 10:07 - 001023800 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2019-03-13 08:36 - 2019-03-06 10:07 - 000376120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2019-03-13 08:36 - 2019-03-06 10:06 - 009084216 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2019-03-13 08:36 - 2019-03-06 10:06 - 000134968 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.dll
2019-03-13 08:36 - 2019-03-06 10:06 - 000076088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hvservice.sys
2019-03-13 08:36 - 2019-03-06 10:05 - 000439224 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2019-03-13 08:36 - 2019-03-06 10:05 - 000436240 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2019-03-13 08:36 - 2019-03-06 10:05 - 000159864 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2019-03-13 08:36 - 2019-03-06 10:04 - 002765856 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2019-03-13 08:36 - 2019-03-06 10:04 - 000945464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refsv1.sys
2019-03-13 08:36 - 2019-03-06 10:04 - 000628024 _____ (Microsoft Corporation) C:\Windows\system32\dpx.dll
2019-03-13 08:36 - 2019-03-06 10:03 - 007519896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2019-03-13 08:36 - 2019-03-06 10:03 - 002719544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2019-03-13 08:36 - 2019-03-06 10:03 - 002465784 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2019-03-13 08:36 - 2019-03-06 10:03 - 001921848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2019-03-13 08:36 - 2019-03-06 10:03 - 000793400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2019-03-13 08:36 - 2019-03-06 10:03 - 000412984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2019-03-13 08:36 - 2019-03-06 10:03 - 000375608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys
2019-03-13 08:36 - 2019-03-06 10:02 - 002421048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2019-03-13 08:36 - 2019-03-06 10:02 - 001257672 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2019-03-13 08:36 - 2019-03-06 10:02 - 001140480 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2019-03-13 08:36 - 2019-03-06 10:02 - 000982912 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2019-03-13 08:36 - 2019-03-06 10:02 - 000626488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2019-03-13 08:36 - 2019-03-06 09:44 - 025856512 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2019-03-13 08:36 - 2019-03-06 09:36 - 022716928 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2019-03-13 08:36 - 2019-03-06 09:36 - 004383744 _____ (Microsoft Corporation) C:\Windows\system32\EdgeContent.dll
2019-03-13 08:36 - 2019-03-06 09:34 - 004866048 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2019-03-13 08:36 - 2019-03-06 09:33 - 000046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2019-03-13 08:36 - 2019-03-06 09:32 - 003399168 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2019-03-13 08:36 - 2019-03-06 09:32 - 000358912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys
2019-03-13 08:36 - 2019-03-06 09:32 - 000209408 _____ (Microsoft Corporation) C:\Windows\system32\AppXApplicabilityBlob.dll
2019-03-13 08:36 - 2019-03-06 09:31 - 007598592 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2019-03-13 08:36 - 2019-03-06 09:31 - 002368512 _____ (Microsoft Corporation) C:\Windows\system32\WebRuntimeManager.dll
2019-03-13 08:36 - 2019-03-06 09:31 - 001826816 _____ (Microsoft Corporation) C:\Windows\system32\Windows.CloudStore.dll
2019-03-13 08:36 - 2019-03-06 09:31 - 000894464 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2019-03-13 08:36 - 2019-03-06 09:31 - 000808448 _____ (Microsoft Corporation) C:\Windows\system32\EdgeManager.dll
2019-03-13 08:36 - 2019-03-06 09:31 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2019-03-13 08:36 - 2019-03-06 09:31 - 000353792 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
2019-03-13 08:36 - 2019-03-06 09:31 - 000324608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2019-03-13 08:36 - 2019-03-06 09:31 - 000279552 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2019-03-13 08:36 - 2019-03-06 09:31 - 000266752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2019-03-13 08:36 - 2019-03-06 09:31 - 000154112 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2019-03-13 08:36 - 2019-03-06 09:29 - 002364928 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll
2019-03-13 08:36 - 2019-03-06 09:29 - 002174976 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2019-03-13 08:36 - 2019-03-06 09:29 - 001559552 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2019-03-13 08:36 - 2019-03-06 09:29 - 000736256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2019-03-13 08:36 - 2019-03-06 09:28 - 004937728 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2019-03-13 08:36 - 2019-03-06 09:28 - 001803776 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2019-03-13 08:36 - 2019-03-06 09:27 - 002224640 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2019-03-13 08:36 - 2019-03-06 09:27 - 000776192 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2019-03-13 08:36 - 2019-03-06 09:27 - 000542720 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2019-03-13 08:36 - 2019-03-06 09:27 - 000507392 _____ (Microsoft Corporation) C:\Windows\system32\edgeIso.dll
2019-03-13 08:36 - 2019-03-06 09:26 - 000868864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.MixedRealityCapture.dll
2019-03-13 08:36 - 2019-03-06 09:26 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\npfs.sys
2019-03-13 08:36 - 2019-03-06 09:26 - 000031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msfs.sys
2019-03-13 08:36 - 2019-03-06 09:25 - 000093696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdfs.sys
2019-03-13 08:36 - 2019-03-06 08:08 - 000001310 _____ C:\Windows\system32\tcbres.wim
2019-03-13 08:36 - 2019-03-06 07:17 - 001989040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2019-03-13 08:36 - 2019-03-06 07:17 - 000146712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2019-03-13 08:36 - 2019-03-06 07:15 - 002253488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2019-03-13 08:36 - 2019-03-06 07:15 - 000434488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2019-03-13 08:36 - 2019-03-06 07:14 - 006568528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-03-13 08:36 - 2019-03-06 07:14 - 000785568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2019-03-13 08:36 - 2019-03-06 07:14 - 000665224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2019-03-13 08:36 - 2019-03-06 07:14 - 000450872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpx.dll
2019-03-13 08:36 - 2019-03-06 07:14 - 000380728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2019-03-13 08:36 - 2019-03-06 07:13 - 000607248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
2019-03-13 08:36 - 2019-03-06 07:05 - 022018048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2019-03-13 08:36 - 2019-03-06 06:56 - 019404288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2019-03-13 08:36 - 2019-03-06 06:53 - 005307392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2019-03-13 08:36 - 2019-03-06 06:53 - 003711488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2019-03-13 08:36 - 2019-03-06 06:52 - 005790720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2019-03-13 08:36 - 2019-03-06 06:52 - 000608768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EdgeManager.dll
2019-03-13 08:36 - 2019-03-06 06:52 - 000261632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2019-03-13 08:36 - 2019-03-06 06:51 - 000561152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2019-03-13 08:36 - 2019-03-06 06:51 - 000333824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgeIso.dll
2019-03-13 08:36 - 2019-03-06 06:51 - 000032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
2019-03-13 08:36 - 2019-03-06 06:50 - 001628160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2019-03-13 08:36 - 2019-03-06 06:50 - 001347584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OpcServices.dll
2019-03-13 08:36 - 2019-03-06 06:50 - 000578560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2019-03-13 08:36 - 2019-03-06 06:49 - 004516352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2019-03-13 08:36 - 2019-03-06 06:49 - 000318464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll
2019-03-13 08:36 - 2019-03-06 06:49 - 000251904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msIso.dll
2019-03-13 08:36 - 2019-03-06 06:48 - 000669696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2019-03-13 08:36 - 2019-03-06 06:48 - 000533504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2019-03-13 08:36 - 2019-03-03 17:54 - 000835480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2019-03-13 08:36 - 2019-03-03 17:54 - 000179608 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2019-03-13 08:36 - 2019-02-21 04:26 - 000313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd2x40.dll
2019-03-13 08:36 - 2019-02-16 14:02 - 002871304 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2019-03-13 08:36 - 2019-02-16 14:02 - 001644040 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2019-03-13 08:36 - 2019-02-16 14:02 - 000808456 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2019-03-13 08:36 - 2019-02-16 14:02 - 000735752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2019-03-13 08:36 - 2019-02-16 14:02 - 000620040 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2019-03-13 08:36 - 2019-02-16 14:02 - 000460296 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2019-03-13 08:36 - 2019-02-16 14:02 - 000322568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2019-03-13 08:36 - 2019-02-16 14:02 - 000147464 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2019-03-13 08:36 - 2019-02-16 14:02 - 000071176 _____ (Microsoft Corporation) C:\Windows\system32\win32appinventorycsp.dll
2019-03-13 08:36 - 2019-02-16 13:57 - 002266936 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystems64.dll
2019-03-13 08:36 - 2019-02-16 13:57 - 001786672 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntVirtualization.dll
2019-03-13 08:36 - 2019-02-16 13:57 - 001627448 _____ (Microsoft Corporation) C:\Windows\system32\AppVIntegration.dll
2019-03-13 08:36 - 2019-02-16 13:57 - 001424696 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystemController.dll
2019-03-13 08:36 - 2019-02-16 13:57 - 001048472 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2019-03-13 08:36 - 2019-02-16 13:57 - 001038136 _____ (Microsoft Corporation) C:\Windows\system32\AppVPolicy.dll
2019-03-13 08:36 - 2019-02-16 13:57 - 000954168 _____ (Microsoft Corporation) C:\Windows\system32\AppVManifest.dll
2019-03-13 08:36 - 2019-02-16 13:57 - 000830264 _____ (Microsoft Corporation) C:\Windows\system32\AppVOrchestration.dll
2019-03-13 08:36 - 2019-02-16 13:57 - 000825144 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntStreamingManager.dll
2019-03-13 08:36 - 2019-02-16 13:57 - 000749880 _____ (Microsoft Corporation) C:\Windows\system32\AppVReporting.dll
2019-03-13 08:36 - 2019-02-16 13:57 - 000670008 _____ (Microsoft Corporation) C:\Windows\system32\AppVCatalog.dll
2019-03-13 08:36 - 2019-02-16 13:57 - 000652088 _____ (Microsoft Corporation) C:\Windows\system32\AppVPublishing.dll
2019-03-13 08:36 - 2019-02-16 13:57 - 000506088 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
2019-03-13 08:36 - 2019-02-16 13:57 - 000495416 _____ (Microsoft Corporation) C:\Windows\system32\TransportDSA.dll
2019-03-13 08:36 - 2019-02-16 13:57 - 000399672 _____ (Microsoft Corporation) C:\Windows\system32\AppVScripting.dll
2019-03-13 08:36 - 2019-02-16 13:57 - 000257848 _____ (Microsoft Corporation) C:\Windows\system32\AppVFileSystemMetadata.dll
2019-03-13 08:36 - 2019-02-16 13:57 - 000231224 _____ (Microsoft Corporation) C:\Windows\system32\AppVShNotify.exe
2019-03-13 08:36 - 2019-02-16 13:57 - 000228152 _____ (Microsoft Corporation) C:\Windows\system32\AppVStreamMap.dll
2019-03-13 08:36 - 2019-02-16 13:57 - 000201528 _____ (Microsoft Corporation) C:\Windows\system32\AppVStreamingUX.dll
2019-03-13 08:36 - 2019-02-16 13:57 - 000183608 _____ (Microsoft Corporation) C:\Windows\system32\mavinject.exe
2019-03-13 08:36 - 2019-02-16 13:57 - 000180528 _____ (Microsoft Corporation) C:\Windows\system32\AppVDllSurrogate.exe
2019-03-13 08:36 - 2019-02-16 13:57 - 000172856 _____ (Microsoft Corporation) C:\Windows\system32\AppVNice.exe
2019-03-13 08:36 - 2019-02-16 13:57 - 000034104 _____ C:\Windows\system32\SyncAppvPublishingServer.exe
2019-03-13 08:36 - 2019-02-16 13:56 - 000549520 _____ (Microsoft Corporation) C:\Windows\system32\AppResolver.dll
2019-03-13 08:36 - 2019-02-16 13:56 - 000540984 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2019-03-13 08:36 - 2019-02-16 13:53 - 001516416 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2019-03-13 08:36 - 2019-02-16 13:36 - 000127488 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2019-03-13 08:36 - 2019-02-16 13:34 - 004718080 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2019-03-13 08:36 - 2019-02-16 13:34 - 001725952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2019-03-13 08:36 - 2019-02-16 13:34 - 000302080 _____ (Microsoft Corporation) C:\Windows\system32\AcLayers.dll
2019-03-13 08:36 - 2019-02-16 13:33 - 002194432 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Uev.ModernAppAgent.dll
2019-03-13 08:36 - 2019-02-16 13:33 - 001786880 _____ (Microsoft Corporation) C:\Windows\system32\wsp_health.dll
2019-03-13 08:36 - 2019-02-16 13:32 - 003646976 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2019-03-13 08:36 - 2019-02-16 13:32 - 002051072 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
2019-03-13 08:36 - 2019-02-16 13:32 - 001127936 _____ (Microsoft Corporation) C:\Windows\system32\ApplySettingsTemplateCatalog.exe
2019-03-13 08:36 - 2019-02-16 13:31 - 001271808 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2019-03-13 08:36 - 2019-02-16 13:31 - 001186816 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Uev.CommonBridge.dll
2019-03-13 08:36 - 2019-02-16 13:31 - 001003520 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2019-03-13 08:36 - 2019-02-16 13:31 - 000861184 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll
2019-03-13 08:36 - 2019-02-16 13:31 - 000615424 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2019-03-13 08:36 - 2019-02-16 13:30 - 002019840 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
2019-03-13 08:36 - 2019-02-16 13:30 - 000877568 _____ (Microsoft Corporation) C:\Windows\system32\RecoveryDrive.exe
2019-03-13 08:36 - 2019-02-16 13:29 - 000174080 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngOnline.dll
2019-03-13 08:36 - 2019-02-16 13:29 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe
2019-03-13 08:36 - 2019-02-16 13:25 - 001539896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppVEntSubsystems32.dll
2019-03-13 08:36 - 2019-02-16 13:25 - 000148784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mavinject.exe
2019-03-13 08:36 - 2019-02-16 13:24 - 000444176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppResolver.dll
2019-03-13 08:36 - 2019-02-16 13:22 - 001322176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2019-03-13 08:36 - 2019-02-16 13:08 - 000373760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AcLayers.dll
2019-03-13 08:36 - 2019-02-16 13:07 - 001307648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_health.dll
2019-03-13 08:36 - 2019-02-16 13:07 - 000484352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2019-03-13 08:36 - 2019-02-16 13:06 - 002890752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2019-03-13 08:36 - 2019-02-16 13:06 - 001530880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2019-03-13 08:36 - 2019-02-16 13:06 - 001451520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_fs.dll
2019-03-13 08:36 - 2019-02-16 13:06 - 000774656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2019-03-13 08:36 - 2019-02-16 13:06 - 000765952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprddm.dll
2019-03-13 08:36 - 2019-02-16 13:04 - 000080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mcbuilder.exe
2019-03-13 08:36 - 2019-02-16 13:02 - 000055808 _____ (Microsoft Corporation) C:\Windows\system32\UevAppMonitor.exe
2019-03-13 08:36 - 2019-02-16 12:55 - 000070656 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Uev.Common.dll
2019-03-13 08:36 - 2019-02-16 11:24 - 023862272 _____ (Microsoft Corporation) C:\Windows\system32\Hydrogen.dll
2019-03-13 08:36 - 2019-02-16 11:22 - 019525120 _____ (Microsoft Corporation) C:\Windows\system32\HologramCompositor.dll
2019-03-13 08:36 - 2019-02-16 09:16 - 000511800 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2019-03-13 08:36 - 2019-02-16 09:15 - 000505656 _____ (Microsoft Corporation) C:\Windows\system32\dcntel.dll
2019-03-13 08:36 - 2019-02-16 09:15 - 000035640 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe
2019-03-13 08:36 - 2019-02-16 09:05 - 000087800 _____ (Microsoft Corporation) C:\Windows\system32\taskhostw.exe
2019-03-13 08:36 - 2019-02-16 09:04 - 000193032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2019-03-13 08:36 - 2019-02-16 09:03 - 007901392 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2019-03-13 08:36 - 2019-02-16 09:03 - 005625360 _____ (Microsoft Corporation) C:\Windows\system32\StartTileData.dll
2019-03-13 08:36 - 2019-02-16 09:03 - 000510288 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
2019-03-13 08:36 - 2019-02-16 09:02 - 005821440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2019-03-13 08:36 - 2019-02-16 09:02 - 003291632 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2019-03-13 08:36 - 2019-02-16 09:02 - 001934800 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2019-03-13 08:36 - 2019-02-16 09:02 - 001792712 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2019-03-13 08:36 - 2019-02-16 09:02 - 000705848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2019-03-13 08:36 - 2019-02-16 09:02 - 000432952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2019-03-13 08:36 - 2019-02-16 09:02 - 000413712 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2019-03-13 08:36 - 2019-02-16 09:01 - 001285424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2019-03-13 08:36 - 2019-02-16 09:01 - 001209696 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2019-03-13 08:36 - 2019-02-16 09:01 - 001098056 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2019-03-13 08:36 - 2019-02-16 09:01 - 001028920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2019-03-13 08:36 - 2019-02-16 09:01 - 001014344 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2019-03-13 08:36 - 2019-02-16 09:01 - 000735464 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2019-03-13 08:36 - 2019-02-16 09:01 - 000641984 _____ (Microsoft Corporation) C:\Windows\system32\msvcp_win.dll
2019-03-13 08:36 - 2019-02-16 09:01 - 000594024 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2019-03-13 08:36 - 2019-02-16 09:01 - 000527160 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2019-03-13 08:36 - 2019-02-16 09:01 - 000480840 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase_enclave.dll
2019-03-13 08:36 - 2019-02-16 09:01 - 000335672 _____ (Microsoft Corporation) C:\Windows\system32\moshostcore.dll
2019-03-13 08:36 - 2019-02-16 09:01 - 000161664 _____ (Microsoft Corporation) C:\Windows\system32\RTWorkQ.dll
2019-03-13 08:36 - 2019-02-16 08:57 - 000383288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aepic.dll
2019-03-13 08:36 - 2019-02-16 08:53 - 000443632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\policymanager.dll
2019-03-13 08:36 - 2019-02-16 08:51 - 002479168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2019-03-13 08:36 - 2019-02-16 08:51 - 001584536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2019-03-13 08:36 - 2019-02-16 08:51 - 000170952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RTWorkQ.dll
2019-03-13 08:36 - 2019-02-16 08:50 - 001805648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2019-03-13 08:36 - 2019-02-16 08:50 - 001171336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2019-03-13 08:36 - 2019-02-16 08:50 - 001130568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll
2019-03-13 08:36 - 2019-02-16 08:50 - 001011872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2019-03-13 08:36 - 2019-02-16 08:50 - 000560384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2019-03-13 08:36 - 2019-02-16 08:50 - 000504072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp_win.dll
2019-03-13 08:36 - 2019-02-16 08:37 - 009084928 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2019-03-13 08:36 - 2019-02-16 08:36 - 007057408 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2019-03-13 08:36 - 2019-02-16 08:36 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\fcon.dll
2019-03-13 08:36 - 2019-02-16 08:35 - 008188928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2019-03-13 08:36 - 2019-02-16 08:35 - 006661632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2019-03-13 08:36 - 2019-02-16 08:34 - 005883904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2019-03-13 08:36 - 2019-02-16 08:34 - 000108032 _____ (Microsoft Corporation) C:\Windows\system32\SshdPinAuthLsa.dll
2019-03-13 08:36 - 2019-02-16 08:34 - 000095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll
2019-03-13 08:36 - 2019-02-16 08:34 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2019-03-13 08:36 - 2019-02-16 08:33 - 006646784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2019-03-13 08:36 - 2019-02-16 08:33 - 004708864 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2019-03-13 08:36 - 2019-02-16 08:33 - 000119808 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2019-03-13 08:36 - 2019-02-16 08:33 - 000054272 _____ (Microsoft Corporation) C:\Windows\system32\CredentialMigrationHandler.dll
2019-03-13 08:36 - 2019-02-16 08:33 - 000043520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialMigrationHandler.dll
2019-03-13 08:36 - 2019-02-16 08:33 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2019-03-13 08:36 - 2019-02-16 08:32 - 002969088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
2019-03-13 08:36 - 2019-02-16 08:32 - 000285696 _____ (Microsoft Corporation) C:\Windows\system32\SshdBroker.dll
2019-03-13 08:36 - 2019-02-16 08:32 - 000173568 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll
2019-03-13 08:36 - 2019-02-16 08:31 - 002825728 _____ (Microsoft Corporation) C:\Windows\system32\MapGeocoder.dll
2019-03-13 08:36 - 2019-02-16 08:31 - 000485888 _____ (Microsoft Corporation) C:\Windows\system32\SshSession.exe
2019-03-13 08:36 - 2019-02-16 08:31 - 000448512 _____ (Microsoft Corporation) C:\Windows\system32\SshSftp.exe
2019-03-13 08:36 - 2019-02-16 08:31 - 000392704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll
2019-03-13 08:36 - 2019-02-16 08:31 - 000264192 _____ (Microsoft Corporation) C:\Windows\system32\SshProxy.dll
2019-03-13 08:36 - 2019-02-16 08:31 - 000141312 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentActivation.dll
2019-03-13 08:36 - 2019-02-16 08:31 - 000126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srpapi.dll
2019-03-13 08:36 - 2019-02-16 08:30 - 002449408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapRouter.dll
2019-03-13 08:36 - 2019-02-16 08:30 - 001986560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapGeocoder.dll
2019-03-13 08:36 - 2019-02-16 08:30 - 001124352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdprt.dll
2019-03-13 08:36 - 2019-02-16 08:30 - 000530432 _____ (Microsoft Corporation) C:\Windows\system32\MapConfiguration.dll
2019-03-13 08:36 - 2019-02-16 08:30 - 000357888 _____ (Microsoft Corporation) C:\Windows\system32\AppLockerCSP.dll
2019-03-13 08:36 - 2019-02-16 08:30 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppLockerCSP.dll
2019-03-13 08:36 - 2019-02-16 08:30 - 000145920 _____ (Microsoft Corporation) C:\Windows\system32\srpapi.dll
2019-03-13 08:36 - 2019-02-16 08:29 - 001768448 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2019-03-13 08:36 - 2019-02-16 08:29 - 000382976 _____ (Microsoft Corporation) C:\Windows\system32\SshBroker.dll
2019-03-13 08:36 - 2019-02-16 08:29 - 000304128 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll
2019-03-13 08:36 - 2019-02-16 08:28 - 003381248 _____ (Microsoft Corporation) C:\Windows\system32\MapRouter.dll
2019-03-13 08:36 - 2019-02-16 08:28 - 002585600 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2019-03-13 08:36 - 2019-02-16 08:28 - 001668096 _____ (Microsoft Corporation) C:\Windows\system32\cdprt.dll
2019-03-13 08:36 - 2019-02-16 08:28 - 000713216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingOnlineServices.dll
2019-03-13 08:36 - 2019-02-16 08:28 - 000705024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll
2019-03-13 08:36 - 2019-02-16 08:28 - 000528384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll
2019-03-13 08:36 - 2019-02-16 08:27 - 001364992 _____ (Microsoft Corporation) C:\Windows\system32\lpasvc.dll
2019-03-13 08:36 - 2019-02-16 08:27 - 000729088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NMAA.dll
2019-03-13 08:36 - 2019-02-16 08:27 - 000686592 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2019-03-13 08:36 - 2019-02-16 08:26 - 001459712 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2019-03-13 08:36 - 2019-02-16 08:26 - 001225216 _____ (Microsoft Corporation) C:\Windows\system32\MapsStore.dll
2019-03-13 08:36 - 2019-02-16 08:26 - 000943616 _____ (Microsoft Corporation) C:\Windows\system32\BingOnlineServices.dll
2019-03-13 08:36 - 2019-02-16 08:26 - 000935424 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2019-03-13 08:36 - 2019-02-16 08:26 - 000401920 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2019-03-13 08:36 - 2019-02-16 08:25 - 000884224 _____ (Microsoft Corporation) C:\Windows\system32\NMAA.dll
2019-03-13 08:36 - 2019-02-16 08:25 - 000652800 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2019-03-10 10:39 - 2019-03-10 10:39 - 000003378 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2172372831-1064090382-2824033594-1001
2019-03-10 10:39 - 2019-03-10 10:39 - 000002371 _____ C:\Users\casyo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-03-05 11:14 - 2019-03-28 20:28 - 000000000 ____D C:\Users\casyo\Desktop\AsgardMU
2019-03-01 20:40 - 2019-03-01 20:40 - 000046704 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2019-03-01 20:40 - 2019-03-01 20:40 - 000022336 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avelam.sys

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-03-28 20:58 - 2018-10-28 16:57 - 000000000 ____D C:\Users\casyo\AppData\Roaming\uTorrent
2019-03-28 20:57 - 2018-12-30 00:28 - 000000000 ____D C:\Users\Public\Speedup Sessions
2019-03-28 20:42 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-03-28 20:18 - 2018-10-28 15:16 - 001689050 _____ C:\Windows\system32\PerfStringBackup.INI
2019-03-28 20:18 - 2018-04-12 16:51 - 000715034 _____ C:\Windows\system32\perfh005.dat
2019-03-28 20:18 - 2018-04-12 16:51 - 000144328 _____ C:\Windows\system32\perfc005.dat
2019-03-28 20:18 - 2018-04-12 00:36 - 000000000 ____D C:\Windows\INF
2019-03-28 20:15 - 2018-10-28 17:59 - 000000000 ____D C:\Users\casyo\AppData\Local\CrashDumps
2019-03-28 20:14 - 2018-10-28 15:55 - 000000000 ____D C:\ProgramData\NVIDIA
2019-03-28 20:12 - 2018-10-28 15:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-03-28 19:20 - 2018-04-11 22:04 - 000524288 _____ C:\Windows\system32\config\BBI
2019-03-28 19:03 - 2018-10-28 15:08 - 000000000 ____D C:\Windows\system32\SleepStudy
2019-03-28 14:59 - 2018-04-12 00:38 - 000000000 ____D C:\Windows\AppReadiness
2019-03-28 10:56 - 2018-10-28 15:46 - 000003470 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2019-03-28 10:56 - 2018-10-28 15:46 - 000003346 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2019-03-27 15:37 - 2018-10-28 15:14 - 000000000 ____D C:\Users\casyo
2019-03-27 09:15 - 2018-10-28 15:29 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2019-03-26 17:56 - 2018-11-24 18:17 - 000002315 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-03-26 17:48 - 2018-11-15 23:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2019-03-26 12:45 - 2018-10-28 16:06 - 000000000 ____D C:\Games
2019-03-26 12:14 - 2018-10-29 16:54 - 000000000 ____D C:\Users\casyo\AppData\Local\D3DSCache
2019-03-26 12:14 - 2018-04-12 00:38 - 000000000 ___HD C:\Program Files\WindowsApps
2019-03-26 11:26 - 2018-11-15 23:56 - 000000000 ____D C:\Program Files (x86)\Steam
2019-03-26 09:53 - 2018-10-28 15:17 - 000000000 ____D C:\Users\casyo\AppData\Local\VirtualStore
2019-03-25 22:40 - 2019-01-20 15:11 - 000000000 ____D C:\Users\casyo\AppData\Roaming\TS3Client
2019-03-25 18:45 - 2019-02-24 13:53 - 000000000 ____D C:\Users\casyo\AppData\Local\ElevatedDiagnostics
2019-03-20 13:25 - 2018-11-16 00:12 - 000000000 ____D C:\Program Files\rempl
2019-03-17 13:40 - 2018-11-24 23:59 - 000000000 ____D C:\Users\casyo\AppData\Roaming\vlc
2019-03-17 11:42 - 2018-10-29 16:44 - 000000000 ____D C:\Users\casyo\Documents\My Games
2019-03-15 15:09 - 2018-10-28 15:29 - 000000000 ____D C:\ProgramData\Package Cache
2019-03-13 23:03 - 2018-10-28 15:08 - 000242448 _____ C:\Windows\system32\FNTCACHE.DAT
2019-03-13 12:26 - 2018-04-12 16:53 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2019-03-13 12:26 - 2018-04-12 00:38 - 000000000 ___SD C:\Windows\system32\UNP
2019-03-13 12:26 - 2018-04-12 00:38 - 000000000 ___RD C:\Program Files\Windows Defender
2019-03-13 12:26 - 2018-04-12 00:38 - 000000000 ____D C:\Windows\TextInput
2019-03-13 12:26 - 2018-04-12 00:38 - 000000000 ____D C:\Windows\system32\oobe
2019-03-13 12:26 - 2018-04-12 00:38 - 000000000 ____D C:\Windows\system32\appraiser
2019-03-13 12:26 - 2018-04-12 00:38 - 000000000 ____D C:\Windows\ShellExperiences
2019-03-13 12:26 - 2018-04-12 00:38 - 000000000 ____D C:\Windows\bcastdvr
2019-03-13 12:26 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2019-03-13 08:38 - 2018-04-12 00:30 - 000000000 ____D C:\Windows\CbsTemp
2019-03-13 08:36 - 2018-10-28 19:15 - 000000000 ____D C:\Windows\system32\MRT
2019-03-13 08:34 - 2018-10-28 19:15 - 127411920 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-03-10 10:39 - 2018-10-28 15:18 - 000000000 ___RD C:\Users\casyo\OneDrive
2019-03-05 11:16 - 2018-10-28 17:59 - 000000000 ____D C:\Users\casyo\AppData\Local\RabanSoft
2019-03-01 20:40 - 2018-11-15 23:28 - 000188008 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2019-03-01 20:40 - 2018-11-15 23:28 - 000175104 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2019-03-01 20:40 - 2018-11-15 23:28 - 000089736 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2019-03-01 20:40 - 2018-11-15 23:28 - 000075432 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avdevprot.sys
2019-03-01 20:40 - 2018-11-15 23:28 - 000045472 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avusbflt.sys
2019-03-01 20:40 - 2018-04-12 00:38 - 000000000 ___HD C:\Windows\ELAMBKUP
2019-03-01 13:18 - 2018-10-28 15:55 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation

==================== Files in the root of some directories =======

2018-11-24 23:23 - 2018-11-24 23:23 - 000000003 _____ () C:\Users\casyo\AppData\Local\updater.log
2018-11-13 23:24 - 2018-11-13 23:24 - 000000425 _____ () C:\Users\casyo\AppData\Local\UserProducts.xml

Some files in TEMP:
====================
2019-03-26 14:08 - 2019-03-26 14:08 - 000753664 _____ () C:\Users\casyo\AppData\Local\Temp\Protect204c8e98.dll
2019-03-26 22:14 - 2019-03-26 22:14 - 000737280 _____ () C:\Users\casyo\AppData\Local\Temp\Protectb081c136.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\dllhost.exe => File is digitally signed
C:\Windows\SysWOW64\dllhost.exe => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-10-28 15:08

==================== End of FRST.txt ============================