Podezření na vir

[WymleeSe]

Zdravím, netuším jestli to je přesně vir nebo ne, ale když mám zapnutou aplikaci na fulllscreen (třeba hru), tak se mi tak 2x do dne stává, že mi aplikace spadne na plochu, když ji zase nahodím, tak ještě jednou spadne. Mám asi něco nechtěného nainstalováno, ale netuším co by to mohlo dělat. + mi tak 2x do měsíce hodí PC bluescreen ( který ale nikde neuloží data ikdyž to mám nastavené)

FRST64
LOG FRST.TXT
LOG addition.txt

RSIT mi bohužel hází chybu při pokusu o scan.
DDS hází také chybu.

Díky za jakoukoliv radu.

Edit**
příkládám ještě log po cleanu z adwcleaner:

# AdwCleaner 7.0.4.0 - Logfile created on Sat Nov 25 10:05:11 2017
# Updated on 2017/27/10 by Malwarebytes
# Running on Windows 8.1 Pro (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

No malicious folders deleted.

***** [ Files ] *****

No malicious files deleted.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks deleted.

***** [ Registry ] *****

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{80107F16-CB2E-42AB-AB9D-6C11540D5A8B}
Deleted: [Key] - HKLM\SOFTWARE\Classes\Applications\WinThrusterSetup.exe
Deleted: [Key] - HKLM\SOFTWARE\Classes\Applications\Setup_WinThruster_2016.exe
Deleted: [Key] - HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\Software\win
Deleted: [Key] - HKCU\Software\win


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

Startpage deleted: http://google.cz/
Startpage deleted: http://search.conduit.com/?ctid=CT33195 ... 7E10&SSPV=
Startpage deleted: http://websearch.fastosearch.info/?pid= ... Z&unqvl=55
Startpage deleted: http://websearch.fixsearch.info/?pid=37 ... Z&unqvl=61
Startpage deleted: http://www.mystartsearch.com/?type=hp&t ... J9AF107816
Startpage deleted: http://www.oursurfing.com/?type=hp&ts=1 ... J9AF107816
Startpage deleted: http://www.mystartsearch.com/?type=hp&t ... J9AF107816
Startpage deleted: http://www.trotux.com/?z=a81715975cf322 ... 99&type=hp
Startpage deleted: http://google.cz/
Startpage deleted: http://search.conduit.com/?ctid=CT33195 ... 7E10&SSPV=
Startpage deleted: http://websearch.fastosearch.info/?pid= ... Z&unqvl=55
Startpage deleted: http://websearch.fixsearch.info/?pid=37 ... Z&unqvl=61
Startpage deleted: http://www.mystartsearch.com/?type=hp&t ... J9AF107816
Startpage deleted: http://www.oursurfing.com/?type=hp&ts=1 ... J9AF107816
Startpage deleted: http://www.mystartsearch.com/?type=hp&t ... J9AF107816
Startpage deleted: http://www.trotux.com/?z=a81715975cf322 ... 99&type=hp
Startpage deleted: http://google.cz/
Startpage deleted: http://search.conduit.com/?ctid=CT33195 ... 7E10&SSPV=
Startpage deleted: http://websearch.fastosearch.info/?pid= ... Z&unqvl=55
Startpage deleted: http://websearch.fixsearch.info/?pid=37 ... Z&unqvl=61
Startpage deleted: http://www.mystartsearch.com/?type=hp&t ... J9AF107816
Startpage deleted: http://www.oursurfing.com/?type=hp&ts=1 ... J9AF107816
Startpage deleted: http://www.mystartsearch.com/?type=hp&t ... J9AF107816
Startpage deleted: http://www.trotux.com/?z=a81715975cf322 ... 99&type=hp
Startpage deleted: http://google.cz/
Startpage deleted: http://search.conduit.com/?ctid=CT33195 ... 7E10&SSPV=
Startpage deleted: http://websearch.fastosearch.info/?pid= ... Z&unqvl=55
Startpage deleted: http://websearch.fixsearch.info/?pid=37 ... Z&unqvl=61
Startpage deleted: http://www.mystartsearch.com/?type=hp&t ... J9AF107816
Startpage deleted: http://www.oursurfing.com/?type=hp&ts=1 ... J9AF107816
Startpage deleted: http://www.mystartsearch.com/?type=hp&t ... J9AF107816
Startpage deleted: http://www.trotux.com/?z=a81715975cf322 ... 99&type=hp
Startpage deleted: http://google.cz/
Startpage deleted: http://search.conduit.com/?ctid=CT33195 ... 7E10&SSPV=
Startpage deleted: http://websearch.fastosearch.info/?pid= ... Z&unqvl=55
Startpage deleted: http://websearch.fixsearch.info/?pid=37 ... Z&unqvl=61
Startpage deleted: http://www.mystartsearch.com/?type=hp&t ... J9AF107816
Startpage deleted: http://www.oursurfing.com/?type=hp&ts=1 ... J9AF107816
Startpage deleted: http://www.mystartsearch.com/?type=hp&t ... J9AF107816
Startpage deleted: http://www.trotux.com/?z=a81715975cf322 ... 99&type=hp
Startpage deleted: http://google.cz/
Startpage deleted: http://search.conduit.com/?ctid=CT33195 ... 7E10&SSPV=
Startpage deleted: http://websearch.fastosearch.info/?pid= ... Z&unqvl=55
Startpage deleted: http://websearch.fixsearch.info/?pid=37 ... Z&unqvl=61
Startpage deleted: http://www.mystartsearch.com/?type=hp&t ... J9AF107816
Startpage deleted: http://www.oursurfing.com/?type=hp&ts=1 ... J9AF107816
Startpage deleted: http://www.mystartsearch.com/?type=hp&t ... J9AF107816
Startpage deleted: http://www.trotux.com/?z=a81715975cf322 ... 99&type=hp
Startpage deleted: http://google.cz/
Startpage deleted: http://search.conduit.com/?ctid=CT33195 ... 7E10&SSPV=
Startpage deleted: http://websearch.fastosearch.info/?pid= ... Z&unqvl=55
Startpage deleted: http://websearch.fixsearch.info/?pid=37 ... Z&unqvl=61
Startpage deleted: http://www.mystartsearch.com/?type=hp&t ... J9AF107816
Startpage deleted: http://www.oursurfing.com/?type=hp&ts=1 ... J9AF107816
Startpage deleted: http://www.mystartsearch.com/?type=hp&t ... J9AF107816
Startpage deleted: http://www.trotux.com/?z=a81715975cf322 ... 99&type=hp
Startpage deleted: http://google.cz/
Startpage deleted: http://search.conduit.com/?ctid=CT33195 ... 7E10&SSPV=
Startpage deleted: http://websearch.fastosearch.info/?pid= ... Z&unqvl=55
Startpage deleted: http://websearch.fixsearch.info/?pid=37 ... Z&unqvl=61
Startpage deleted: http://www.mystartsearch.com/?type=hp&t ... J9AF107816
Startpage deleted: http://www.oursurfing.com/?type=hp&ts=1 ... J9AF107816
Startpage deleted: http://www.mystartsearch.com/?type=hp&t ... J9AF107816
Startpage deleted: http://www.trotux.com/?z=a81715975cf322 ... 99&type=hp


*************************

::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0



*************************

C:/AdwCleaner/AdwCleaner[S0].txt - [2672 B] - [2017/11/25 10:3:40]


########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########

[Rudy]

Zdravím!
Dejte log FRST: https://forum.viry.cz/viewtopic.php?f=13&t=152707 .

[WymleeSe]

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 24-11-2017 01
Ran by Wymlee (administrator) on JEDETO (26-11-2017 10:16:37)
Running from C:\Users\Wymlee\Desktop
Loaded Profiles: Wymlee (Available Profiles: Wymlee)
Platform: Windows 8.1 Pro (Update) (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\KillerService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
() W:\Steam\steamapps\common\wallpaper_engine\wallpaper32.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Spotify Ltd) C:\Users\Wymlee\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe
(SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() W:\Steam\steamapps\common\wallpaper_engine\bin\webwallpaper32.exe
() W:\Steam\steamapps\common\wallpaper_engine\bin\webwallpaper32.exe
() W:\Steam\steamapps\common\wallpaper_engine\bin\webwallpaper32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Akamai Technologies, Inc.) C:\Users\Wymlee\AppData\Local\Akamai\netsession_win.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Akamai Technologies, Inc.) C:\Users\Wymlee\AppData\Local\Akamai\netsession_win.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [596640 2017-04-13] (Razer Inc.)
HKLM-x32\...\Run: [EaseUS EPM tray] => C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\EpmNews.exe
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3111712 2017-11-22] (Valve Corporation)
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27832272 2017-08-25] (Skype Technologies S.A.)
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4701888 2017-02-07] (Disc Soft Ltd)
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Wymlee\AppData\Local\Akamai\netsession_win.exe [4490200 2017-01-03] (Akamai Technologies, Inc.)
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\Run: [Discord] => C:\Users\Wymlee\AppData\Local\Discord\app-0.0.298\Discord.exe [57477112 2017-08-08] (Discord Inc.)
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\Run: [WallpaperEngine] => W:\Steam\steamapps\common\wallpaper_engine\wallpaper32.exe [1292288 2017-09-08] ()
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\Run: [Spotify] => C:\Users\Wymlee\AppData\Roaming\Spotify\Spotify.exe [21076080 2017-11-24] (Spotify Ltd)
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\Run: [GoogleChromeAutoLaunch_FA47297563F66CCB18CB816997156211] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1556312 2017-11-10] (Google Inc.)
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\Run: [Spotify Web Helper] => C:\Users\Wymlee\AppData\Roaming\Spotify\SpotifyWebHelper.exe [777840 2017-11-24] (Spotify Ltd)
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\Policies\Explorer: []
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\MountPoints2: {2523b078-23f7-11e7-825d-4ccc6a237cf3} - "H:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\MountPoints2: {2523b89f-23f7-11e7-825d-4ccc6a237cf3} - "I:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\MountPoints2: {4a3b8b89-1e20-11e7-8259-4ccc6a237cf3} - "G:\SETUP.EXE"
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\MountPoints2: {b0ef4cc7-16e0-11e7-8253-4ccc6a237cf3} - "E:\WD SmartWare.exe" autoplay=true
IFEO\SppExtComObj.exe: [Debugger] SppExtComObjPatcher.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2017-04-01]
ShortcutTarget: Killer Network Manager.lnk -> C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe (Rivet Networks)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2017-11-03]
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS)
Startup: C:\Users\Wymlee\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sledovat výstrahy inkoustu - HP Deskjet 2540 series.lnk [2017-11-25]

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{4FC6E1A3-1F20-4A8F-9B90-3734D160E0F8}: [NameServer] 8.8.8.8,4.4.4.4
Tcpip\..\Interfaces\{4FC6E1A3-1F20-4A8F-9B90-3734D160E0F8}: [DhcpNameServer] 10.0.0.138

Internet Explorer:
==================
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
BHO: Kaspersky Protection -> {0E2877D3-2641-4970-B794-A553E295428D} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\x64\IEExt\ie_plugin.dll [2017-10-22] (AO Kaspersky Lab)
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-11-17] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-04-01] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-04-01] (Oracle Corporation)
BHO-x32: Kaspersky Protection -> {0E2877D3-2641-4970-B794-A553E295428D} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\IEExt\ie_plugin.dll [2017-10-22] (AO Kaspersky Lab)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-26] (Microsoft Corporation)
Toolbar: HKLM - Kaspersky Protection Toolbar - {4853DF44-7D6B-48E9-9258-D800EEE54AF6} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\x64\IEExt\ie_plugin.dll [2017-10-22] (AO Kaspersky Lab)
Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {4853DF44-7D6B-48E9-9258-D800EEE54AF6} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\IEExt\ie_plugin.dll [2017-10-22] (AO Kaspersky Lab)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-11-11] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-11-11] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-11-11] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-11-11] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: c9orjwdm.default
FF ProfilePath: C:\Users\Wymlee\AppData\Roaming\Mozilla\Firefox\Profiles\c9orjwdm.default [2017-11-25]
FF Extension: (Safe Browsing Version 4 (temporary add-on)) - C:\Users\Wymlee\AppData\Roaming\Mozilla\Firefox\Profiles\c9orjwdm.default\Extensions\sbv4-gradual-rollout@mozilla.com.xpi [2017-11-12] [Lagacy]
FF HKLM\...\Firefox\Extensions: [light_plugin_448EC0843447455C9DA355B3C2811D6A@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Ochrana Kaspersky) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\FFExt\light_plugin_firefox\addon.xpi [2017-10-22]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_448EC0843447455C9DA355B3C2811D6A@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-04-01] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-04-01] (Oracle Corporation)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-10-21] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-03-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-03-16] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-07-31] (Adobe Systems Inc.)
FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin HKU\S-1-5-21-1660184287-1871170033-2940578802-1001: www.wansview.com/HYPlayer -> C:\Program Files (x86)\HYPlayer\npHYPlayer.dll [2016-06-02] (IPC)

Chrome:
=======
CHR HomePage: Default -> hxxp://google.cz/
CHR StartupUrls: Default -> "hxxp://search.conduit.com/?ctid=CT3319597&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPE0E86F74-6F9B-4F56-A9D9-7E9F170D7E10&SSPV=","hxxp://websearch.fastosearch.info/?pid=377&r=2014/06/13&hid=9525075102808422866&lg=EN&cc=CZ&unqvl=55","hxxp://websearch.fixsearch.info/?pid=377&r=2014/09/08&hid=16656924991604749929&lg=EN&cc=CZ&unqvl=61","hxxp://www.mystartsearch.com/?type=hp&ts=14282 ... google.com"
CHR Profile: C:\Users\Wymlee\AppData\Local\Google\Chrome\User Data\Default [2017-11-26]
CHR Extension: (Prezentace) - C:\Users\Wymlee\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]
CHR Extension: (Theme Creator) - C:\Users\Wymlee\AppData\Local\Google\Chrome\User Data\Default\Extensions\akpelnjfckgfiplcikojhomllgombffc [2017-11-11]
CHR Extension: (Dokumenty) - C:\Users\Wymlee\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]
CHR Extension: (Disk Google) - C:\Users\Wymlee\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-04-01]
CHR Extension: (YouTube) - C:\Users\Wymlee\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-04-01]
CHR Extension: (Steam Inventory Helper) - C:\Users\Wymlee\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2017-11-22]
CHR Extension: (Tipli do prohlížeče) - C:\Users\Wymlee\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbnfnbehhjknomdbfhcobpgpphnlnikp [2017-11-09]
CHR Extension: (Tabulky) - C:\Users\Wymlee\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-12]
CHR Extension: (Dokumenty Google offline) - C:\Users\Wymlee\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-04-01]
CHR Extension: (AdBlock) - C:\Users\Wymlee\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-11-13]
CHR Extension: (Tlačítko Uložit) - C:\Users\Wymlee\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2017-11-15]
CHR Extension: (ThemeBeta.com) - C:\Users\Wymlee\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjmnpmcmidjgimafcndcngnccjcempee [2017-11-11]
CHR Extension: (TwitchAlerts Stream Labels) - C:\Users\Wymlee\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgmggmdngboajiakmbpdknfpdelbjbcg [2017-04-01]
CHR Extension: (SteamWizard) - C:\Users\Wymlee\AppData\Local\Google\Chrome\User Data\Default\Extensions\kojolejmgolbhakghocbgjemjgbmcjig [2017-10-31]
CHR Extension: (Ochrana Kaspersky) - C:\Users\Wymlee\AppData\Local\Google\Chrome\User Data\Default\Extensions\mchjnmdbdlkdbfliogedbnpnanfjnolk [2017-10-22]
CHR Extension: (Steam.Design Buttons) - C:\Users\Wymlee\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjmabgdoainclinjecbkdancpamdiaih [2017-10-31]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Wymlee\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-09-04]
CHR Extension: (Gmail) - C:\Users\Wymlee\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-04-01]
CHR Extension: (Chrome Media Router) - C:\Users\Wymlee\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-11-15]
CHR HKLM\...\Chrome\Extension: [mchjnmdbdlkdbfliogedbnpnanfjnolk] - hxxps://chrome.google.com/webstore/detail/mchjnmdbdlkdbfliogedbnpnanfjnolk
CHR HKLM-x32\...\Chrome\Extension: [mchjnmdbdlkdbfliogedbnpnanfjnolk] - hxxps://chrome.google.com/webstore/detail/mchjnmdbdlkdbfliogedbnpnanfjnolk

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AVP18.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\avp.exe [354672 2017-01-24] (AO Kaspersky Lab)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1547200 2017-10-30] ()
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8063656 2017-11-02] (Microsoft Corporation)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2017-02-07] (Disc Soft Ltd)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [143872 2014-10-24] (Microsoft Corporation) [File not signed]
R2 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [452096 2015-09-16] (Rivet Networks) [File not signed]
S3 klvssbridge64_18.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\x64\vssbridge64.exe [426416 2017-10-22] (AO Kaspersky Lab)
S2 KSDE2.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 2.0\ksde.exe [354672 2017-01-24] (AO Kaspersky Lab)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495224 2017-05-03] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495224 2017-05-03] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [464440 2017-03-17] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [450168 2017-05-03] (NVIDIA Corporation)
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [189264 2016-09-24] ()
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [122368 2015-02-26] (Microsoft Corporation) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [656664 2014-08-19] (Wacom Technology, Corp.)
S2 AdobeARMservice; "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" [X]
S3 BstHdAndroidSvc; "C:\Program Files (x86)\BlueStacks\HD-Service.exe" BstHdAndroidSvc Android [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [142408 2015-09-16] (Rivet Networks, LLC.)
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [247008 2016-12-26] (AO Kaspersky Lab)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2017-04-06] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2017-04-06] (Disc Soft Ltd)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2017-04-01] (REALiX(tm))
S3 Ke2200; C:\Windows\system32\DRIVERS\e22w8x64.sys [157752 2015-09-03] (Qualcomm Atheros, Inc.)
R3 KillerEth; C:\Windows\system32\DRIVERS\e2xw8x64.sys [162456 2017-04-01] (Qualcomm Atheros, Inc.)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [554408 2016-10-01] (AO Kaspersky Lab)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [70872 2017-10-22] (AO Kaspersky Lab)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [89952 2017-10-22] (AO Kaspersky Lab)
R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [78216 2016-05-31] (AO Kaspersky Lab)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29816 2016-10-14] (AO Kaspersky Lab)
R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [207576 2017-10-22] (AO Kaspersky Lab)
R1 klhk; C:\Windows\System32\drivers\klhk.sys [594144 2017-10-22] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [1055448 2017-10-22] (AO Kaspersky Lab)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [57424 2016-10-12] (AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [57056 2016-12-23] (AO Kaspersky Lab)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [58592 2016-12-07] (AO Kaspersky Lab)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [50672 2017-06-22] (AO Kaspersky Lab)
S3 klpnpflt; C:\Windows\system32\DRIVERS\klpnpflt.sys [44768 2017-01-20] (AO Kaspersky Lab)
R3 kltap; C:\Windows\system32\DRIVERS\kltap.sys [52152 2016-06-07] (The OpenVPN Project)
S4 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [93920 2016-12-20] (AO Kaspersky Lab)
R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [136176 2017-06-22] (AO Kaspersky Lab)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [199360 2017-06-22] (AO Kaspersky Lab)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30328 2017-05-03] (NVIDIA Corporation)
R3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [47672 2017-03-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [48248 2017-05-03] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [59448 2017-03-17] (NVIDIA Corporation)
R3 rzendpt; C:\Windows\System32\drivers\rzendpt.sys [50392 2015-08-13] (Razer Inc)
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [44144 2016-09-17] (Razer, Inc.)
R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [137840 2016-10-08] (Razer, Inc.)
R3 ssdevfactory; C:\Windows\System32\drivers\ssdevfactory.sys [46408 2017-06-02] (SteelSeries ApS)
R3 sshid; C:\Windows\System32\drivers\sshid.sys [45928 2017-10-10] (SteelSeries ApS)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
R3 xhcdrv; C:\Windows\System32\drivers\xhcdrv.sys [305664 2017-04-01] (VIA Technologies, Inc.)
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-11-25 11:02 - 2017-11-25 11:03 - 000000000 ____D C:\AdwCleaner
2017-11-25 11:00 - 2017-11-25 11:00 - 008261584 _____ (Malwarebytes) C:\Users\Wymlee\Desktop\adwcleaner_7.0.4.0.exe
2017-11-25 10:55 - 2017-11-25 10:54 - 000688992 _____ (Swearware) C:\Users\Wymlee\Desktop\dds.exe
2017-11-25 10:54 - 2017-11-25 10:54 - 000688992 _____ (Swearware) C:\Users\Wymlee\Downloads\dds.exe
2017-11-25 10:53 - 2017-11-25 10:54 - 000000000 ____D C:\Program Files\trend micro
2017-11-25 10:53 - 2017-11-25 10:53 - 000000000 ____D C:\rsit
2017-11-25 10:52 - 2017-11-25 10:52 - 001222144 _____ C:\Users\Wymlee\Downloads\RSITx64.exe
2017-11-25 10:52 - 2017-11-25 10:52 - 001222144 _____ C:\RSITx64.exe
2017-11-25 10:50 - 2017-11-25 11:01 - 000000000 ____D C:\Users\Wymlee\Documents\ShareX
2017-11-25 10:50 - 2017-11-25 10:50 - 000662208 _____ () C:\Users\Wymlee\Downloads\puush-installer.exe
2017-11-25 10:50 - 2017-11-25 10:50 - 000000796 _____ C:\Users\Wymlee\Desktop\ShareX.lnk
2017-11-25 10:50 - 2017-11-25 10:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShareX
2017-11-25 10:50 - 2017-11-25 10:50 - 000000000 ____D C:\Program Files\ShareX
2017-11-25 10:46 - 2017-11-25 10:46 - 000047860 _____ C:\Users\Wymlee\Desktop\Addition.txt
2017-11-25 10:45 - 2017-11-26 10:17 - 000025544 _____ C:\Users\Wymlee\Desktop\FRST.txt
2017-11-25 10:45 - 2017-11-26 10:16 - 000000000 ____D C:\FRST
2017-11-25 10:44 - 2017-11-25 10:44 - 002393088 _____ (Farbar) C:\Users\Wymlee\Downloads\FRST64.exe
2017-11-25 10:44 - 2017-11-25 10:44 - 002393088 _____ (Farbar) C:\Users\Wymlee\Desktop\FRST64.exe
2017-11-25 10:44 - 2017-11-25 10:44 - 000112640 _____ (forum.viry.cz) C:\Users\Wymlee\Downloads\FRSTLauncher.exe
2017-11-25 10:44 - 2017-11-25 10:44 - 000015327 _____ C:\Users\Wymlee\Desktop\LM.bat
2017-11-20 23:46 - 2017-11-20 23:46 - 000018217 _____ C:\Users\Wymlee\Desktop\didav5snadposlednijedoucikussvehodruhu.xlsx
2017-11-20 22:26 - 2017-11-20 23:46 - 000018216 _____ C:\Users\Wymlee\Desktop\didav4.xlsx
2017-11-20 22:05 - 2017-11-20 22:25 - 000018908 _____ C:\Users\Wymlee\Desktop\didav3.xlsx
2017-11-20 21:44 - 2017-11-20 22:05 - 000018870 _____ C:\Users\Wymlee\Desktop\didav2.xlsx
2017-11-20 21:20 - 2017-11-20 21:20 - 000009634 _____ C:\Users\Wymlee\Downloads\Fuckign-dioda-body (1).xlsx
2017-11-20 20:54 - 2017-11-20 20:54 - 000018055 _____ C:\Users\Wymlee\Downloads\dida.xlsx
2017-11-20 19:12 - 2017-11-23 18:32 - 000000000 ____D C:\Users\Wymlee\Desktop\Nová složka (2)
2017-11-20 19:12 - 2017-11-20 19:12 - 211562245 _____ C:\Users\Wymlee\Downloads\CZSK 2v2 turnaj Group Stage map pool.rar
2017-11-20 18:51 - 2017-11-20 18:51 - 000009634 _____ C:\Users\Wymlee\Downloads\Fuckign-dioda-body.xlsx
2017-11-19 09:58 - 2017-11-19 10:08 - 002030993 _____ (BlueStack Systems Inc.) C:\Users\Wymlee\Downloads\Nepotvrzeno 479736.crdownload
2017-11-18 11:48 - 2017-11-18 11:48 - 000009216 _____ C:\Users\Wymlee\Downloads\Ut 8.00.xls
2017-11-18 11:36 - 2017-11-18 11:36 - 005857740 _____ C:\Users\Wymlee\Downloads\9. Tisk z vysky.pdf
2017-11-17 16:04 - 2017-11-17 16:05 - 000000000 ____D C:\Users\Wymlee\AppData\Roaming\iSpy
2017-11-17 16:04 - 2017-11-17 16:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iSpy
2017-11-17 16:04 - 2017-11-17 16:04 - 000000000 ____D C:\Program Files\iSpy
2017-11-17 16:03 - 2017-11-17 16:04 - 024669465 _____ C:\Users\Wymlee\Downloads\iSpy64_6_8_8_0.zip
2017-11-17 15:25 - 2017-11-17 15:26 - 1828917690 _____ C:\Users\Wymlee\Downloads\HesloJeČeskýPřekladNázvu.rar
2017-11-15 23:22 - 2017-11-15 23:22 - 008488830 _____ C:\Users\Wymlee\Desktop\3F_řešené,doporučené příklady.pdf
2017-11-15 12:51 - 2017-11-16 00:00 - 000000000 ____D C:\Users\Wymlee\Downloads\Osu! Stažené rary
2017-11-15 09:36 - 2017-10-14 09:38 - 025731584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-11-15 09:36 - 2017-10-14 08:14 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-11-15 09:36 - 2017-10-14 08:05 - 015431680 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2017-11-15 09:35 - 2017-10-17 20:11 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2017-11-15 09:35 - 2017-10-16 19:38 - 002013016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-11-15 09:35 - 2017-10-14 14:04 - 001548624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-11-15 09:35 - 2017-10-14 09:23 - 004168704 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-11-15 09:35 - 2017-10-14 09:13 - 002903552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-11-15 09:35 - 2017-10-14 09:11 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-11-15 09:35 - 2017-10-14 09:09 - 005979648 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-11-15 09:35 - 2017-10-14 09:01 - 000816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-11-15 09:35 - 2017-10-14 08:36 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2017-11-15 09:35 - 2017-10-14 08:31 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-11-15 09:35 - 2017-10-14 08:30 - 015266816 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-11-15 09:35 - 2017-10-14 08:30 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-11-15 09:35 - 2017-10-14 08:30 - 000380416 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-11-15 09:35 - 2017-10-14 08:29 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-11-15 09:35 - 2017-10-14 08:27 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-11-15 09:35 - 2017-10-14 08:21 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-11-15 09:35 - 2017-10-14 08:09 - 001544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-11-15 09:35 - 2017-10-14 07:58 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-11-15 09:35 - 2017-10-14 07:53 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-11-15 09:35 - 2017-10-14 07:50 - 002293760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-11-15 09:35 - 2017-10-14 07:45 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-11-15 09:35 - 2017-10-14 07:33 - 004542464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-11-15 09:35 - 2017-10-14 07:28 - 013680128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-11-15 09:35 - 2017-10-14 07:28 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2017-11-15 09:35 - 2017-10-14 07:25 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-11-15 09:35 - 2017-10-14 07:24 - 000694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-11-15 09:35 - 2017-10-14 07:24 - 000331776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-11-15 09:35 - 2017-10-14 07:23 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-11-15 09:35 - 2017-10-14 07:14 - 013317632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2017-11-15 09:35 - 2017-10-14 07:10 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-11-15 09:35 - 2017-10-14 07:07 - 001314304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-11-15 09:35 - 2017-10-14 07:04 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-11-15 09:35 - 2017-10-10 17:36 - 000124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
2017-11-15 09:35 - 2017-10-10 16:38 - 003631616 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-11-15 09:35 - 2017-10-10 16:38 - 000425984 _____ (Microsoft Corporation) C:\Windows\system32\PCPTpm12.dll
2017-11-15 09:35 - 2017-10-10 16:11 - 002749952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-11-15 09:35 - 2017-10-10 16:08 - 000367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PCPTpm12.dll
2017-11-15 09:35 - 2017-10-05 08:17 - 000380248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2017-11-15 09:35 - 2017-09-15 00:52 - 000986968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2017-11-15 09:35 - 2017-09-08 18:14 - 003084288 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2017-11-15 09:35 - 2017-09-08 17:50 - 002471424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2017-11-15 09:35 - 2017-09-08 04:31 - 000685440 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-11-15 09:35 - 2017-09-08 04:28 - 000507176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2017-11-15 09:35 - 2017-09-07 22:31 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\mgmtapi.dll
2017-11-15 09:35 - 2017-09-07 20:20 - 000018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mgmtapi.dll
2017-11-15 09:35 - 2017-09-07 18:20 - 000513456 _____ C:\Windows\SysWOW64\locale.nls
2017-11-15 09:35 - 2017-09-07 18:20 - 000513456 _____ C:\Windows\system32\locale.nls
2017-11-15 09:35 - 2017-09-07 14:40 - 000995272 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2017-11-15 09:35 - 2017-09-07 14:40 - 000922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2017-11-15 09:35 - 2017-09-07 00:07 - 000158552 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2017-11-15 09:35 - 2017-09-06 22:17 - 000461144 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2017-11-15 09:35 - 2017-09-06 22:17 - 000443224 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2017-11-15 09:35 - 2017-09-06 15:14 - 000166400 _____ (Microsoft Corporation) C:\Windows\system32\regsvc.dll
2017-11-15 09:35 - 2017-08-11 02:39 - 002779136 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2017-11-15 09:35 - 2017-08-11 02:30 - 002464256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2017-11-15 09:27 - 2017-10-11 08:35 - 000143016 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2017-11-15 09:27 - 2017-10-10 16:21 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2017-11-15 09:27 - 2017-10-10 14:18 - 002023936 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2017-11-15 09:27 - 2017-10-10 14:18 - 001570304 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-11-15 09:27 - 2017-10-10 14:18 - 000670208 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2017-11-15 09:27 - 2017-10-10 14:18 - 000605184 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-11-15 09:27 - 2017-10-10 14:18 - 000603648 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-11-15 09:27 - 2017-10-10 14:18 - 000402944 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2017-11-15 09:27 - 2017-10-10 14:18 - 000370688 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-11-15 09:27 - 2017-10-10 14:18 - 000241664 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2017-11-15 09:27 - 2017-10-10 14:18 - 000181760 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2017-11-14 17:29 - 2017-11-14 17:29 - 000000512 _____ C:\Users\Wymlee\Desktop\osu!.lnk
2017-11-14 17:29 - 2017-11-14 17:29 - 000000512 _____ C:\Users\Wymlee\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\osu!.lnk
2017-11-13 23:39 - 2017-11-20 18:51 - 000018055 _____ C:\Users\Wymlee\Desktop\dida.xlsx
2017-11-13 14:55 - 2010-06-02 04:55 - 000239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2017-11-13 14:55 - 2010-06-02 04:55 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2017-11-13 14:55 - 2010-02-04 10:01 - 000530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2017-11-13 14:55 - 2010-02-04 10:01 - 000528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2017-11-13 14:55 - 2010-02-04 10:01 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2017-11-13 14:55 - 2010-02-04 10:01 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2017-11-13 14:55 - 2010-02-04 10:01 - 000078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2017-11-13 14:55 - 2010-02-04 10:01 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2017-11-13 14:55 - 2009-09-04 17:44 - 000517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2017-11-13 14:55 - 2009-09-04 17:44 - 000515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2017-11-13 14:55 - 2009-09-04 17:44 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2017-11-13 14:55 - 2009-09-04 17:44 - 000176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2017-11-13 14:55 - 2009-09-04 17:44 - 000073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2017-11-13 14:55 - 2009-09-04 17:44 - 000069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2017-11-13 14:55 - 2009-09-04 17:29 - 005554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2017-11-13 14:55 - 2009-09-04 17:29 - 005501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2017-11-13 14:55 - 2009-09-04 17:29 - 002582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2017-11-13 14:55 - 2009-09-04 17:29 - 002475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2017-11-13 14:55 - 2009-09-04 17:29 - 001974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2017-11-13 14:55 - 2009-09-04 17:29 - 001892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2017-11-13 14:55 - 2009-09-04 17:29 - 000523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2017-11-13 14:55 - 2009-09-04 17:29 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2017-11-13 14:55 - 2009-09-04 17:29 - 000285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2017-11-13 14:55 - 2009-09-04 17:29 - 000235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2017-11-13 14:55 - 2009-03-16 14:18 - 000521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2017-11-13 14:55 - 2009-03-16 14:18 - 000517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2017-11-13 14:55 - 2009-03-16 14:18 - 000235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2017-11-13 14:55 - 2009-03-16 14:18 - 000174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2017-11-13 14:55 - 2009-03-16 14:18 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2017-11-13 14:55 - 2009-03-16 14:18 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2017-11-13 14:55 - 2009-03-09 15:27 - 005425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2017-11-13 14:55 - 2009-03-09 15:27 - 004178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2017-11-13 14:55 - 2009-03-09 15:27 - 002430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2017-11-13 14:55 - 2009-03-09 15:27 - 001846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2017-11-13 14:55 - 2009-03-09 15:27 - 000520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2017-11-13 14:55 - 2009-03-09 15:27 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2017-11-13 14:55 - 2008-10-27 10:04 - 000518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2017-11-13 14:55 - 2008-10-27 10:04 - 000514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2017-11-13 14:55 - 2008-10-27 10:04 - 000235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2017-11-13 14:55 - 2008-10-27 10:04 - 000175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2017-11-13 14:55 - 2008-10-27 10:04 - 000074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2017-11-13 14:55 - 2008-10-27 10:04 - 000070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2017-11-13 14:55 - 2008-10-27 10:04 - 000025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2017-11-13 14:55 - 2008-10-27 10:04 - 000023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2017-11-13 14:55 - 2008-10-15 06:22 - 005631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2017-11-13 14:55 - 2008-10-15 06:22 - 004379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2017-11-13 14:55 - 2008-10-15 06:22 - 002605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2017-11-13 14:55 - 2008-10-15 06:22 - 002036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2017-11-13 14:55 - 2008-10-15 06:22 - 000519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2017-11-13 14:55 - 2008-10-15 06:22 - 000452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2017-11-13 14:55 - 2008-07-31 10:41 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2017-11-13 14:55 - 2008-07-31 10:41 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2017-11-13 14:55 - 2008-07-31 10:41 - 000072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2017-11-13 14:55 - 2008-07-31 10:40 - 000513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2017-11-13 14:55 - 2008-07-10 11:00 - 004992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2017-11-13 14:55 - 2008-07-10 11:00 - 001942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2017-11-13 14:55 - 2008-07-10 11:00 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2017-11-13 14:55 - 2008-05-30 14:19 - 000511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2017-11-13 14:55 - 2008-05-30 14:19 - 000507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2017-11-13 14:55 - 2008-05-30 14:18 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2017-11-13 14:55 - 2008-05-30 14:18 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2017-11-13 14:55 - 2008-05-30 14:17 - 000068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2017-11-13 14:55 - 2008-05-30 14:17 - 000065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2017-11-13 14:55 - 2008-05-30 14:17 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2017-11-13 14:55 - 2008-05-30 14:16 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2017-11-13 14:55 - 2008-05-30 14:11 - 004991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2017-11-13 14:55 - 2008-05-30 14:11 - 003850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2017-11-13 14:55 - 2008-05-30 14:11 - 001941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2017-11-13 14:55 - 2008-05-30 14:11 - 001491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2017-11-13 14:55 - 2008-05-30 14:11 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2017-11-13 14:55 - 2008-05-30 14:11 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2017-11-13 14:55 - 2008-03-05 16:04 - 000489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2017-11-13 14:55 - 2008-03-05 16:03 - 000479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2017-11-13 14:55 - 2008-03-05 16:03 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2017-11-13 14:55 - 2008-03-05 16:03 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2017-11-13 14:55 - 2008-03-05 16:00 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2017-11-13 14:55 - 2008-03-05 16:00 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2017-11-13 14:55 - 2008-03-05 15:56 - 004910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2017-11-13 14:55 - 2008-03-05 15:56 - 003786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2017-11-13 14:55 - 2008-03-05 15:56 - 001860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2017-11-13 14:55 - 2008-03-05 15:56 - 001420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2017-11-13 14:55 - 2008-02-05 23:07 - 000529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2017-11-13 14:55 - 2008-02-05 23:07 - 000462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2017-11-13 14:55 - 2007-10-22 03:40 - 000411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2017-11-13 14:55 - 2007-10-22 03:39 - 000267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2017-11-13 14:55 - 2007-10-22 03:37 - 000021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2017-11-13 14:55 - 2007-10-22 03:37 - 000017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2017-11-13 14:55 - 2007-10-12 15:14 - 005081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2017-11-13 14:55 - 2007-10-12 15:14 - 003734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2017-11-13 14:55 - 2007-10-12 15:14 - 002006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2017-11-13 14:55 - 2007-10-12 15:14 - 001374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2017-11-13 14:55 - 2007-10-02 09:56 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2017-11-13 14:55 - 2007-10-02 09:56 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2017-11-13 14:55 - 2007-07-20 00:57 - 000411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2017-11-13 14:55 - 2007-07-20 00:57 - 000267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2017-11-13 14:55 - 2007-07-19 18:14 - 005073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2017-11-13 14:55 - 2007-07-19 18:14 - 003727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2017-11-13 14:55 - 2007-07-19 18:14 - 001985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2017-11-13 14:55 - 2007-07-19 18:14 - 001358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2017-11-13 14:55 - 2007-07-19 18:14 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2017-11-13 14:55 - 2007-07-19 18:14 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2017-11-13 14:55 - 2007-06-20 20:49 - 000409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2017-11-13 14:55 - 2007-06-20 20:46 - 000266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2017-11-13 14:55 - 2007-05-16 16:45 - 004496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2017-11-13 14:55 - 2007-05-16 16:45 - 003497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2017-11-13 14:55 - 2007-05-16 16:45 - 001401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2017-11-13 14:55 - 2007-05-16 16:45 - 001124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2017-11-13 14:55 - 2007-05-16 16:45 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2017-11-13 14:55 - 2007-05-16 16:45 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2017-11-13 14:55 - 2007-04-04 18:55 - 000403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2017-11-13 14:55 - 2007-04-04 18:55 - 000261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2017-11-13 14:55 - 2007-03-15 16:57 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2017-11-13 14:55 - 2007-03-15 16:57 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2017-11-13 14:55 - 2007-03-12 16:42 - 004494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2017-11-13 14:55 - 2007-03-12 16:42 - 003495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2017-11-13 14:55 - 2007-03-12 16:42 - 001400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2017-11-13 14:55 - 2007-03-12 16:42 - 001123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2017-11-13 14:55 - 2007-03-05 12:42 - 000017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2017-11-13 14:55 - 2007-03-05 12:42 - 000015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2017-11-13 14:55 - 2007-01-24 15:27 - 000393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2017-11-13 14:55 - 2007-01-24 15:27 - 000255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2017-11-13 14:55 - 2006-12-08 12:02 - 000251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2017-11-13 14:55 - 2006-12-08 12:00 - 000390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2017-11-13 14:55 - 2006-11-29 13:06 - 004398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2017-11-13 14:55 - 2006-11-29 13:06 - 003426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2017-11-13 14:55 - 2006-11-29 13:06 - 000469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2017-11-13 14:55 - 2006-11-29 13:06 - 000440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2017-11-13 14:55 - 2006-09-28 16:05 - 003977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2017-11-13 14:55 - 2006-09-28 16:05 - 002414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2017-11-13 14:55 - 2006-09-28 16:05 - 000237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2017-11-13 14:55 - 2006-09-28 16:04 - 000364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2017-11-13 14:55 - 2006-07-28 09:31 - 000083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2017-11-13 14:55 - 2006-07-28 09:30 - 000363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2017-11-13 14:55 - 2006-07-28 09:30 - 000236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2017-11-13 14:55 - 2006-07-28 09:30 - 000062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2017-11-13 14:55 - 2006-05-31 07:24 - 000230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2017-11-13 14:55 - 2006-05-31 07:22 - 000354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2017-11-13 14:55 - 2006-03-31 12:41 - 003927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2017-11-13 14:55 - 2006-03-31 12:40 - 002388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2017-11-13 14:55 - 2006-03-31 12:40 - 000352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2017-11-13 14:55 - 2006-03-31 12:39 - 000229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2017-11-13 14:55 - 2006-03-31 12:39 - 000083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2017-11-13 14:55 - 2006-03-31 12:39 - 000062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2017-11-13 14:55 - 2006-02-03 08:43 - 003830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2017-11-13 14:55 - 2006-02-03 08:43 - 002332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2017-11-13 14:55 - 2006-02-03 08:42 - 000355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2017-11-13 14:55 - 2006-02-03 08:42 - 000230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2017-11-13 14:55 - 2006-02-03 08:41 - 000016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2017-11-13 14:55 - 2006-02-03 08:41 - 000014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2017-11-13 14:55 - 2005-12-05 18:09 - 003815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2017-11-13 14:55 - 2005-12-05 18:09 - 002323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2017-11-13 14:55 - 2005-07-22 19:59 - 003807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2017-11-13 14:55 - 2005-07-22 19:59 - 002319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2017-11-13 14:55 - 2005-05-26 15:34 - 003767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2017-11-13 14:55 - 2005-05-26 15:34 - 002297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2017-11-13 14:55 - 2005-03-18 17:19 - 003823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2017-11-13 14:55 - 2005-03-18 17:19 - 002337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2017-11-13 14:54 - 2005-02-05 19:45 - 003544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2017-11-13 14:54 - 2005-02-05 19:45 - 002222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2017-11-13 14:42 - 2017-11-13 14:42 - 000002174 _____ C:\Users\Wymlee\Desktop\Lineage II High Five - Memorium Server.lnk
2017-11-13 14:28 - 2017-11-13 14:28 - 000000219 _____ C:\Users\Wymlee\Desktop\Counter-Strike Global Offensive.url
2017-11-13 14:27 - 2009-04-06 09:08 - 000005174 _____ C:\Windows\SysWOW64\nppt9x.vxd
2017-11-13 14:27 - 2009-04-06 09:08 - 000004682 _____ (INCA Internet Co., Ltd.) C:\Windows\SysWOW64\npptNT2.sys
2017-11-13 14:08 - 2011-01-31 11:53 - 000000000 ____D C:\Users\Wymlee\Downloads\Lineage 2 installace
2017-11-13 14:05 - 2017-11-13 14:05 - 000000000 ____D C:\Users\Wymlee\AppData\LocalLow\uTorrent
2017-11-12 23:03 - 2017-11-12 23:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-11-11 16:49 - 2017-11-11 16:49 - 000000000 ____D C:\Users\Wymlee\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Memorium Installer High Five - Rev3
2017-11-11 16:42 - 2017-11-13 14:19 - 000000000 ____D C:\Program Files (x86)\NCsoft
2017-11-10 13:05 - 2017-11-10 13:05 - 000000078 _____ C:\Users\Wymlee\Desktop\btc bu.txt
2017-11-10 12:18 - 2017-11-10 12:18 - 000000000 _____ C:\Users\Wymlee\Desktop\Nový textový dokument.txt
2017-11-10 12:17 - 2017-11-10 12:17 - 000000000 ____D C:\Users\Wymlee\AppData\Local\Chromium
2017-11-10 12:17 - 2017-11-10 12:17 - 000000000 ____D C:\Users\Wymlee\AppData\Local\bitcoin.com
2017-11-10 12:16 - 2017-09-01 15:49 - 000000000 ____D C:\Users\Wymlee\Desktop\Bitcoin-com-wallet-3.6.0-win64
2017-11-07 23:17 - 2017-11-07 23:17 - 000000000 ____D C:\ProgramData\Riot Games
2017-11-07 23:11 - 2008-07-31 10:41 - 000068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2017-11-07 23:11 - 2008-07-31 10:40 - 000509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2017-11-07 23:11 - 2008-07-12 08:18 - 003851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2017-11-07 23:11 - 2008-07-12 08:18 - 001493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2017-11-07 23:11 - 2008-07-12 08:18 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2017-11-07 18:05 - 2017-11-20 18:59 - 000000000 ____D C:\Users\Wymlee\Desktop\Nová složka
2017-11-07 02:40 - 2017-11-07 02:40 - 000025754 _____ C:\Users\Wymlee\Documents\Sešit1.xlsx
2017-11-01 15:59 - 2017-11-01 15:59 - 000000000 ____D C:\ProgramData\SmartGuard
2017-11-01 15:32 - 2017-11-13 14:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCsoft
2017-10-31 20:09 - 2017-10-31 20:36 - 000000000 ____D C:\Users\Wymlee\Desktop\des
2017-10-31 14:34 - 2017-10-31 14:34 - 000000000 ____D C:\Users\Wymlee\Downloads\Nová složka
2017-10-30 17:00 - 2017-10-30 17:00 - 000000000 ____D C:\Users\Wymlee\AppData\Local\FortniteGame
2017-10-30 16:31 - 2017-10-30 16:31 - 000029756 _____ C:\Users\Wymlee\Downloads\[CzT]Lineage_2_High_Five.torrent
2017-10-30 00:52 - 2017-11-12 23:05 - 000000000 ____D C:\Program Files\Epic Games
2017-10-30 00:51 - 2010-06-02 04:55 - 000527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2017-10-30 00:51 - 2010-06-02 04:55 - 000518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2017-10-30 00:51 - 2010-06-02 04:55 - 000077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2017-10-30 00:51 - 2010-06-02 04:55 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2017-10-30 00:51 - 2010-05-26 11:41 - 002526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2017-10-30 00:51 - 2010-05-26 11:41 - 001907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2017-10-30 00:51 - 2010-05-26 11:41 - 000511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2017-10-30 00:51 - 2010-05-26 11:41 - 000276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2017-10-30 00:51 - 2010-02-04 10:01 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2017-10-30 00:51 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2017-10-30 00:51 - 2007-04-04 18:54 - 000107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2017-10-30 00:49 - 2017-10-30 17:00 - 000000000 ____D C:\Users\Wymlee\AppData\Local\UnrealEngine
2017-10-30 00:49 - 2010-05-26 11:41 - 001868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2017-10-30 00:49 - 2010-05-26 11:41 - 000470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2017-10-30 00:49 - 2010-05-26 11:41 - 000248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2017-10-30 00:49 - 2007-04-04 18:53 - 000081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-11-26 10:10 - 2017-04-01 17:37 - 000000000 ____D C:\Users\Wymlee\AppData\Roaming\Skype
2017-11-26 10:08 - 2017-04-21 11:59 - 000000000 ____D C:\Users\Wymlee\AppData\Roaming\TS3Client
2017-11-26 10:07 - 2017-04-01 13:18 - 000000000 ____D C:\Program Files (x86)\Steam
2017-11-26 09:54 - 2017-10-07 13:10 - 000000000 ____D C:\Users\Wymlee\AppData\Local\Spotify
2017-11-26 09:53 - 2017-04-01 12:55 - 000003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1660184287-1871170033-2940578802-1001
2017-11-26 09:52 - 2013-08-22 14:36 - 000000000 ____D C:\Windows\Inf
2017-11-26 09:46 - 2017-04-01 12:54 - 000003966 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{B9111BE8-6822-430D-B1EB-5D80859E3D61}
2017-11-26 09:44 - 2017-10-07 13:09 - 000000000 ____D C:\Users\Wymlee\AppData\Roaming\Spotify
2017-11-26 09:44 - 2017-04-01 13:01 - 000000000 ____D C:\ProgramData\NVIDIA
2017-11-26 09:43 - 2017-04-10 19:55 - 000000000 ____D C:\Users\Wymlee\AppData\Local\Akamai
2017-11-26 09:42 - 2017-10-22 09:25 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2017-11-26 01:39 - 2017-04-01 23:50 - 000000000 ____D C:\Users\Wymlee
2017-11-25 17:01 - 2014-03-18 16:33 - 001748728 _____ C:\Windows\system32\PerfStringBackup.INI
2017-11-25 17:01 - 2014-03-18 15:54 - 000739580 _____ C:\Windows\system32\perfh005.dat
2017-11-25 17:01 - 2014-03-18 15:54 - 000151742 _____ C:\Windows\system32\perfc005.dat
2017-11-25 16:55 - 2013-08-22 15:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-11-25 16:31 - 2017-05-22 16:53 - 000000000 ____D C:\Users\Wymlee\AppData\LocalLow\Mozilla
2017-11-20 23:49 - 2017-04-06 16:12 - 000000000 ____D C:\Users\Wymlee\AppData\Local\CrashDumps
2017-11-20 23:11 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\rescache
2017-11-20 19:07 - 2017-04-19 18:04 - 000000000 ____D C:\Users\Wymlee\AppData\Roaming\discord
2017-11-19 19:33 - 2013-08-22 14:25 - 000262144 ___SH C:\Windows\system32\config\BBI
2017-11-17 16:04 - 2017-04-01 13:06 - 000000000 ____D C:\ProgramData\Package Cache
2017-11-17 09:30 - 2013-08-22 16:36 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-11-17 09:29 - 2017-04-10 20:05 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2017-11-16 18:59 - 2013-08-22 16:36 - 000000000 ___HD C:\Program Files\WindowsApps
2017-11-16 18:59 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\AppReadiness
2017-11-15 23:45 - 2017-04-07 22:56 - 000000000 ____D C:\Windows\system32\appraiser
2017-11-15 23:45 - 2013-08-22 15:44 - 000488080 _____ C:\Windows\system32\FNTCACHE.DAT
2017-11-15 15:03 - 2017-04-01 13:02 - 000003384 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-11-15 15:03 - 2017-04-01 13:02 - 000003256 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-11-15 11:56 - 2013-08-22 16:20 - 000000000 ____D C:\Windows\CbsTemp
2017-11-13 23:59 - 2017-04-01 13:02 - 000002215 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-11-13 23:59 - 2017-04-01 13:02 - 000002203 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-11-13 23:51 - 2017-09-18 19:32 - 000000000 ____D C:\Users\Wymlee\AppData\Local\ElevatedDiagnostics
2017-11-13 17:26 - 2017-09-13 18:08 - 000000000 ____D C:\Program Files (x86)\BlueStacks
2017-11-13 17:26 - 2017-05-22 16:53 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-11-13 17:26 - 2017-05-22 16:53 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-11-13 17:23 - 2017-04-06 14:32 - 000000000 ____D C:\Users\Wymlee\AppData\Roaming\uTorrent
2017-11-13 14:19 - 2017-04-01 12:54 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-11-13 13:53 - 2017-09-11 09:49 - 000000000 ____D C:\ProgramData\VEGAS
2017-11-13 13:53 - 2017-04-02 16:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MacroGamer
2017-11-12 23:11 - 2017-04-01 21:51 - 000000000 ____D C:\Program Files (x86)\Minecraft
2017-11-12 23:07 - 2017-04-26 20:10 - 000000000 ____D C:\Users\Wymlee\Documents\The Witcher 3
2017-11-12 23:07 - 2017-04-22 21:10 - 000000000 ____D C:\GOG Games
2017-11-12 23:05 - 2017-04-02 15:49 - 000000000 ____D C:\Users\Wymlee\AppData\Local\Bluestacks
2017-11-12 23:04 - 2017-04-01 13:31 - 000000000 ____D C:\Users\Wymlee\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-11-12 23:03 - 2017-07-25 15:12 - 000000000 ____D C:\Program Files\FIFA 17
2017-11-12 23:03 - 2017-05-25 17:22 - 000000000 ____D C:\Program Files (x86)\Ekura
2017-11-07 22:04 - 2017-06-20 11:25 - 000000000 ____D C:\Users\Wymlee\AppData\Roaming\obs-studio
2017-11-06 23:44 - 2017-07-26 08:31 - 000003170 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1660184287-1871170033-2940578802-1001
2017-11-06 23:44 - 2017-05-03 15:09 - 000002329 _____ C:\Users\Wymlee\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive pro firmy.lnk
2017-11-04 01:41 - 2017-04-18 06:25 - 000835568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-11-04 01:41 - 2017-04-18 06:25 - 000177648 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-11-04 01:15 - 2017-10-04 17:45 - 000000000 ____D C:\Users\Wymlee\AppData\Roaming\steelseries-engine-3-client
2017-11-03 14:44 - 2017-05-01 22:50 - 000000132 _____ C:\Users\Wymlee\AppData\Roaming\Adobe PNG Format CS6 Prefs
2017-10-31 14:34 - 2017-10-18 21:27 - 000000000 ____D C:\Users\Wymlee\AppData\Local\IdleMaster

==================== Files in the root of some directories =======

2017-05-01 22:50 - 2017-11-03 14:44 - 000000132 _____ () C:\Users\Wymlee\AppData\Roaming\Adobe PNG Format CS6 Prefs
2017-04-02 15:58 - 2017-04-02 15:59 - 000000552 _____ () C:\Users\Wymlee\AppData\Local\TroubleshooterConfig.json
2017-10-02 11:54 - 2017-10-02 11:54 - 000000000 _____ () C:\Users\Wymlee\AppData\Local\{1B5F10AA-8449-41DD-B53C-E4555D2977AD}

Some files in TEMP:
====================
2017-05-08 08:21 - 2017-05-08 08:21 - 000000000 _____ () C:\Users\Wymlee\AppData\Local\Temp\-w2lcezp.dll
2017-05-22 07:00 - 2017-05-22 07:00 - 000061440 _____ () C:\Users\Wymlee\AppData\Local\Temp\0kw8olkx.dll
2017-05-22 07:14 - 2017-05-22 07:14 - 000000000 _____ () C:\Users\Wymlee\AppData\Local\Temp\2h9700nu.dll
2017-05-05 22:19 - 2017-05-05 22:19 - 000061440 _____ () C:\Users\Wymlee\AppData\Local\Temp\44ttffq0.dll
2017-06-21 08:57 - 2017-06-21 08:57 - 000000000 _____ () C:\Users\Wymlee\AppData\Local\Temp\9wvce_ho.dll
2017-04-10 20:11 - 2017-01-18 13:07 - 000021928 _____ (Autodesk, Inc.) C:\Users\Wymlee\AppData\Local\Temp\AcDeltree.exe
2017-05-08 08:21 - 2017-05-08 08:21 - 000000000 _____ () C:\Users\Wymlee\AppData\Local\Temp\ahodebe9.dll
2017-11-12 23:05 - 2017-09-05 09:57 - 000961592 _____ (BlueStack Systems, Inc.) C:\Users\Wymlee\AppData\Local\Temp\BlueStacksClientUninstaller.exe
2017-04-04 07:10 - 2017-04-04 07:10 - 000061440 _____ () C:\Users\Wymlee\AppData\Local\Temp\br-zgp0r.dll
2017-04-27 05:17 - 2017-04-27 05:17 - 000061440 _____ () C:\Users\Wymlee\AppData\Local\Temp\cojh5ic3.dll
2017-04-10 18:18 - 2017-04-10 18:18 - 000061440 _____ () C:\Users\Wymlee\AppData\Local\Temp\dn8cctwo.dll
2017-05-04 06:04 - 2017-05-04 06:04 - 000061440 _____ () C:\Users\Wymlee\AppData\Local\Temp\dw1gt_fd.dll
2017-05-05 22:17 - 2017-05-05 22:17 - 000061440 _____ () C:\Users\Wymlee\AppData\Local\Temp\fjlanyqu.dll
2017-10-22 10:01 - 2017-11-13 13:55 - 002398688 _____ (Flexera Software LLC) C:\Users\Wymlee\AppData\Local\Temp\FNP_ACT_InstallerCA.dll
2017-05-03 05:24 - 2017-05-03 05:24 - 000061440 _____ () C:\Users\Wymlee\AppData\Local\Temp\grbrnjrq.dll
2017-11-12 23:05 - 2017-09-05 09:56 - 000421400 _____ (CodeTitans) C:\Users\Wymlee\AppData\Local\Temp\JSON.dll
2017-04-05 21:22 - 2017-04-05 21:22 - 000061440 _____ () C:\Users\Wymlee\AppData\Local\Temp\ko_lyncr.dll
2017-06-13 09:10 - 2017-06-13 09:10 - 000000000 _____ () C:\Users\Wymlee\AppData\Local\Temp\ngfxtjta.dll
2017-04-01 13:13 - 2017-02-23 09:17 - 000354176 _____ (NVIDIA Corporation) C:\Users\Wymlee\AppData\Local\Temp\nvStInst.exe
2017-04-10 20:04 - 2006-10-27 22:14 - 000145184 ____R (Microsoft Corporation) C:\Users\Wymlee\AppData\Local\Temp\ose00000.exe
2017-05-16 17:23 - 2017-05-16 17:23 - 000061440 _____ () C:\Users\Wymlee\AppData\Local\Temp\qboe7mzu.dll
2017-05-16 17:24 - 2017-05-16 17:24 - 000000000 _____ () C:\Users\Wymlee\AppData\Local\Temp\rocbhzws.dll
2017-06-22 08:31 - 2017-09-21 16:02 - 058881488 _____ (Skype Technologies S.A.) C:\Users\Wymlee\AppData\Local\Temp\SkypeSetup.exe
2017-05-23 07:08 - 2017-05-23 07:08 - 000061440 _____ () C:\Users\Wymlee\AppData\Local\Temp\vb8jtmxd.dll
2017-04-01 17:36 - 2017-04-01 17:36 - 014456872 _____ (Microsoft Corporation) C:\Users\Wymlee\AppData\Local\Temp\vc_redist.x86.exe
2017-04-27 14:25 - 2017-04-27 14:25 - 000000000 _____ () C:\Users\Wymlee\AppData\Local\Temp\wflwledo.dll
2017-05-16 17:24 - 2017-05-16 17:24 - 000000000 _____ () C:\Users\Wymlee\AppData\Local\Temp\xfj9fbx5.dll
2017-04-04 21:04 - 2017-04-04 21:04 - 000000000 _____ () C:\Users\Wymlee\AppData\Local\Temp\_colxn1l.dll
2017-04-20 17:01 - 2008-03-27 00:59 - 000459400 ____R (Macrovision Corporation) C:\Users\Wymlee\AppData\Local\Temp\_isBECD.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-11-23 23:23

==================== End of FRST.txt ============================

[Rudy]

Otevřte poznámkový blok a zkopírujte do něj:

Start
C:\Users\Wymlee\AppData\Local\Akamai
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Wymlee\AppData\Local\Akamai\netsession_win.exe [4490200 2017-01-03] (Akamai Technologies, Inc.)
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\MountPoints2: {2523b078-23f7-11e7-825d-4ccc6a237cf3} - "H:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\MountPoints2: {2523b89f-23f7-11e7-825d-4ccc6a237cf3} - "I:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\MountPoints2: {4a3b8b89-1e20-11e7-8259-4ccc6a237cf3} - "G:\SETUP.EXE"
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\MountPoints2: {b0ef4cc7-16e0-11e7-8253-4ccc6a237cf3} - "E:\WD SmartWare.exe" autoplay=true
IFEO\SppExtComObj.exe: [Debugger] SppExtComObjPatcher.exe
CHR StartupUrls: Default -> "hxxp://search.conduit.com/?ctid=CT3319597&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPE0E86F74-6F9B-4F56-A9D9-7E9F170D7E10&SSPV=","hxxp://websearch.fastosearch.info/?pid=377&r=2014/06/13&hid=9525075102808422866&lg=EN&cc=CZ&unqvl=55","hxxp://websearch.fixsearch.info/?pid=377&r=2014/09/08&hid=16656924991604749929&lg=EN&cc=CZ&unqvl=61","hxxp://www.mystartsearch.com/?type=hp&ts=14282 ... google.com"
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\Wymlee\AppData\Local\Temp

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

[WymleeSe]

Fix result of Farbar Recovery Scan Tool (x64) Version: 24-11-2017 01
Ran by Wymlee (26-11-2017 11:44:17) Run:1
Running from C:\Users\Wymlee\Desktop
Loaded Profiles: Wymlee (Available Profiles: Wymlee)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
C:\Users\Wymlee\AppData\Local\Akamai
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Wymlee\AppData\Local\Akamai\netsession_win.exe [4490200 2017-01-03] (Akamai Technologies, Inc.)
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\MountPoints2: {2523b078-23f7-11e7-825d-4ccc6a237cf3} - "H:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\MountPoints2: {2523b89f-23f7-11e7-825d-4ccc6a237cf3} - "I:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\MountPoints2: {4a3b8b89-1e20-11e7-8259-4ccc6a237cf3} - "G:\SETUP.EXE"
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\...\MountPoints2: {b0ef4cc7-16e0-11e7-8253-4ccc6a237cf3} - "E:\WD SmartWare.exe" autoplay=true
IFEO\SppExtComObj.exe: [Debugger] SppExtComObjPatcher.exe
CHR StartupUrls: Default -> "hxxp://search.conduit.com/?ctid=CT3319597&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPE0E86F74-6F9B-4F56-A9D9-7E9F170D7E10&SSPV=","hxxp://websearch.fastosearch.info/?pid=377&r=2014/06/13&hid=9525075102808422866&lg=EN&cc=CZ&unqvl=55","hxxp://websearch.fixsearch.info/?pid=377&r=2014/09/08&hid=16656924991604749929&lg=EN&cc=CZ&unqvl=61","hxxp://www.mystartsearch.com/?type=hp&ts=14282 ... google.com"
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\Wymlee\AppData\Local\Temp

EmptyTemp:
End
*****************


"C:\Users\Wymlee\AppData\Local\Akamai" folder move:

Could not move "C:\Users\Wymlee\AppData\Local\Akamai" => Scheduled to move on reboot.

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value removed successfully
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Akamai NetSession Interface => value removed successfully
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2523b078-23f7-11e7-825d-4ccc6a237cf3} => key removed successfully
HKLM\Software\Classes\CLSID\{2523b078-23f7-11e7-825d-4ccc6a237cf3} => key not found.
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2523b89f-23f7-11e7-825d-4ccc6a237cf3} => key removed successfully
HKLM\Software\Classes\CLSID\{2523b89f-23f7-11e7-825d-4ccc6a237cf3} => key not found.
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4a3b8b89-1e20-11e7-8259-4ccc6a237cf3} => key removed successfully
HKLM\Software\Classes\CLSID\{4a3b8b89-1e20-11e7-8259-4ccc6a237cf3} => key not found.
HKU\S-1-5-21-1660184287-1871170033-2940578802-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b0ef4cc7-16e0-11e7-8253-4ccc6a237cf3} => key removed successfully
HKLM\Software\Classes\CLSID\{b0ef4cc7-16e0-11e7-8253-4ccc6a237cf3} => key not found.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\SppExtComObj.exe => key removed successfully
Chrome StartupUrls => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully

"C:\Users\Wymlee\AppData\Local\Temp" folder move:

Could not move "C:\Users\Wymlee\AppData\Local\Temp" => Scheduled to move on reboot.


=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 191588930 B
Java, Flash, Steam htmlcache => 99444357 B
Windows/system/drivers => 338377840 B
Edge => 0 B
Chrome => 625463894 B
Firefox => 388453192 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 128 B
LocalService => 142970 B
NetworkService => 2279498 B
Wymlee => 3152674806 B

RecycleBin => 14533592877 B
EmptyTemp: => 18 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 26-11-2017 11:47:21)

C:\Users\Wymlee\AppData\Local\Akamai => Is moved successfully
C:\Users\Wymlee\AppData\Local\Temp => moved successfully

==== End of Fixlog 11:47:22 ====

[Rudy]

Smazáno. Nastala nějaká změna?

[WymleeSe]

Prozatím to vypadá dobře, dneska mi hra ani 1x na plochu nespadla a modrou smrt sem zatím taky neměl.

[Rudy]

OK, to jsem rád.

[WymleeSe]

Tak hlásím, že problém číslo jedna je vyřešen. Bohužel jsem dnes zase dostal modrou smrt. nejsem schopnej říct víc. nikde se mi nechce uložit minindump

[Rudy]

Bez minidumpu nic nezjistím. Neinstaloval jste v poslední době něco, co by mohlo tento problém způsobovat?

[WymleeSe]

Bohužel, nic sem neinstaloval.

[Rudy]

OK. Něco zkusíme. Stáhněte, nainstalujte a spusťte HWMonitor: http://www.stahuj.centrum.cz/utility_a_ ... hwmonitor/ . Po spuštění sem dejte screen jeho okna.

[WymleeSe]

Omlouvám se že tak pozdě, nenapadlo mě, že to ještě zkusíte řešit.

momentálně dostávám blue screen 2x denně, ačkoliv se snažím windows přesvědčit, že ty minidumpy chci... tak je stále nedostávám

[Rudy]

Nevidím nic, co by mohlo problém způsobovat ten problém. Zkuste obnovu systému k datu, kdy ještě nedocházelo k BSOD.

[WymleeSe]

no tak to bohužel vidím na format disku a čistou instalaci