Modrá smrt 0x00000050

[kabu.kabu]

Tak program nenašel žádné narušen, a ne, nic netaktuju í

[Rudy]

OK. Udělejte test RAM: https://forum.viry.cz/viewtopic.php?f=53&t=106788 .

[kabu.kabu]

Ten jsem dělal předevčírem, vše v pohodě

[Rudy]

Zkuste přeinstalovat ovladače hardwaru zákaldní desky a gr. karty.

[kabu.kabu]

Ok, ještě koukám že se přehřejvá procák, tak pořídim větší chladič - jen je mi divný že se nezvýší otácky větráčku při vysoké teplotě.

[kabu.kabu]

Tak přeinstalováno všechno, procesor přepastovanej a pořádně vyčištěnej, tak teplota už taky ok, tak uvidime (jinak zase mi to hodilo modrou s chybou 50 - než sem přepastoval).

[Rudy]

OK, přehřátí to také může způsobovat. Možná stačilo jen vyčistit chladič. Nyní to sledujte a případně se ozvěte.

[kabu.kabu]

Děkuji, na pc nemám vůbecčas u něj sedět, až někdy mamka, já mam se svym starostí dost (také se ozvu). Mohl bych poprosit o preventivku? Koukam že tu má zese toolbary, mcaffeiatd... dočistit aby se to hejbalo??? Děkuji

[Rudy]

Jistě. Dejte log FRST: https://forum.viry.cz/viewtopic.php?f=13&t=152707 .

[kabu.kabu]

Děkuji
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14.03.2018
Ran by Romča (administrator) on ROMČA-PC (04-04-2018 23:25:14)
Running from C:\Users\Romča\Desktop
Loaded Profiles: Romča (Available Profiles: Romča)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\spd.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(ZONER software) C:\Programy\Photo Studio 17\Program32\ZPSTray.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
() C:\Program Files (x86) (x86)\Lexmark 2600 Series\lxdnmon.exe
(Lexmark International Inc.) C:\Program Files (x86) (x86)\Lexmark 2600 Series\ezprint.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86) (x86)\Lexmark 2600 Series\lxdnmsdmon.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation)
HKLM\...\Run: [VIAAUD] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VIAAUD.exe*r*************************************************
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2792448 2009-12-04] (VIA)
HKLM-x32\...\Run: [lxdnmon.exe] => C:\Program Files (x86) (x86)\Lexmark 2600 Series\lxdnmon.exe [660136 2010-02-04] ()
HKLM-x32\...\Run: [EzPrint] => C:\Program Files (x86) (x86)\Lexmark 2600 Series\ezprint.exe [107176 2010-02-04] (Lexmark International Inc.)
HKLM-x32\...\Run: [lxdnamon] => C:\Program Files (x86) (x86)\Lexmark 2600 Series\lxdnamon.exe [16040 2010-02-04] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-12-19] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-832870467-146566840-3686179043-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27244512 2016-12-20] (Skype Technologies S.A.)
HKU\S-1-5-21-832870467-146566840-3686179043-1000\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAMY\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE [563416 2015-07-12] (ZONER software)
HKU\S-1-5-21-832870467-146566840-3686179043-1000\...\Run: [ASRockOCTuner] => [X]
HKU\S-1-5-21-832870467-146566840-3686179043-1000\...\Run: [ASRockIES] => [X]
HKU\S-1-5-21-832870467-146566840-3686179043-1000\...\MountPoints2: {2b429f8f-a9e3-11e5-93e3-806e6f6e6963} - D:\ASRSetup.exe
HKU\S-1-5-21-832870467-146566840-3686179043-1000\...\MountPoints2: {c63c2c9f-f1e0-11e5-be6a-002522e4a3f2} - F:\iStudio.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\$McRebootA5E6DEAA56$.lnk [2018-04-04]
ShortcutTarget: $McRebootA5E6DEAA56$.lnk -> (No File)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.111.128.254 10.111.128.253
Tcpip\..\Interfaces\{F116DD0F-51F4-4D57-B2F8-0A250879282D}: [DhcpNameServer] 10.111.128.254 10.111.128.253

Internet Explorer:
==================
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\ssv.dll [2018-03-24] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\jp2ssv.dll [2018-03-24] (Oracle Corporation)

FireFox:
========
FF DefaultProfile: zs3pzepm.default
FF ProfilePath: C:\Users\Romča\AppData\Roaming\Mozilla\Firefox\Profiles\zs3pzepm.default [2018-04-04]
FF Homepage: Mozilla\Firefox\Profiles\zs3pzepm.default -> hxxps://www.seznam.cz/
FF HomepageOverride: Mozilla\Firefox\Profiles\zs3pzepm.default -> Disabled: _ceMembers_@free.easypdfcombine.com
FF HomepageOverride: Mozilla\Firefox\Profiles\zs3pzepm.default -> Disabled: _65Members_@download.fromdoctopdf.com
FF NewTabOverride: Mozilla\Firefox\Profiles\zs3pzepm.default -> Disabled: _ceMembers_@free.easypdfcombine.com
FF NewTabOverride: Mozilla\Firefox\Profiles\zs3pzepm.default -> Disabled: _65Members_@download.fromdoctopdf.com
FF Extension: (FromDocToPDF) - C:\Users\Romča\AppData\Roaming\Mozilla\Firefox\Profiles\zs3pzepm.default\Extensions\_65Members_@download.fromdoctopdf.com.xpi [2018-03-12]
FF Extension: (EasyPDFCombine) - C:\Users\Romča\AppData\Roaming\Mozilla\Firefox\Profiles\zs3pzepm.default\Extensions\_ceMembers_@free.easypdfcombine.com.xpi [2018-03-13]
FF Extension: (Search Extension by Ask) - C:\Users\Romča\AppData\Roaming\Mozilla\Firefox\Profiles\zs3pzepm.default\Extensions\_j5Members_@ext.ask.com.xpi [2018-03-30]
FF Extension: (TLS 1.3 gradual roll-out) - C:\Users\Romča\AppData\Roaming\Mozilla\Firefox\Profiles\zs3pzepm.default\features\{5c2c2dd1-abf4-4db9-bede-e743b00b2ff0}\tls13-rollout-bug1442042@mozilla.org.xpi [2018-04-03] [Legacy]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_29_0_0_113.dll [2018-03-13] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Programy\PDF Xchange\PDF Viewer\npPDFXCviewNPPlugin.dll [2015-09-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_113.dll [2018-03-13] ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Programy\PDF Xchange\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2015-09-09] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @java.com/DTPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll [2018-03-24] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\plugin2\npjp2.dll [2018-03-24] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-02-12] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-832870467-146566840-3686179043-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Programy\PDF Xchange\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2015-09-09] (Tracker Software Products (Canada) Ltd.)

Chrome:
=======
CHR DefaultSearchURL: Default -> hxxps://search.yahoo.com/search?fr=mcafee_uninternational&type=C210CZ91105D20180225&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR Profile: C:\Users\Romča\AppData\Local\Google\Chrome\User Data\Default [2018-04-02]
CHR Extension: (Docs) - C:\Users\Romča\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-14]
CHR Extension: (Google Drive) - C:\Users\Romča\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-29]
CHR Extension: (YouTube) - C:\Users\Romča\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-29]
CHR Extension: (Google Search) - C:\Users\Romča\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-29]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\Romča\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2018-03-24]
CHR Extension: (Google Docs Offline) - C:\Users\Romča\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-27]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Romča\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-25]
CHR Extension: (Gmail) - C:\Users\Romča\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-29]
CHR Extension: (Chrome Media Router) - C:\Users\Romča\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-03-24]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 0050571522876331mcinstcleanup; C:\Users\ROMA~1\AppData\Local\Temp\005057~1.EXE [1031928 2018-03-22] (McAfee, Inc.) <==== ATTENTION
R2 cFosSpeedS; C:\Program Files\ASRock\XFast LAN\spd.exe [395136 2011-10-19] (cFos Software GmbH)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-02-17] (VIA Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AsrVDrive; C:\Windows\System32\DRIVERS\AsrVDrive.sys [23048 2015-02-03] (ASRock Inc.)
S3 cpuz145; C:\Windows\temp\cpuz145\cpuz145_x64.sys [49968 2018-04-04] (CPUID)
R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [15936 2018-04-02] (FNet Co., Ltd.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
R1 MpKsl26259852; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{65DF8C39-334D-4C0E-8B82-28B5FA43E493}\MpKsl26259852.sys [58120 2018-04-04] (Microsoft Corporation)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-04-04 23:25 - 2018-04-04 23:25 - 000012158 _____ C:\Users\Romča\Desktop\FRST.txt
2018-04-04 23:24 - 2018-04-04 23:25 - 000000000 ____D C:\FRST
2018-04-04 23:21 - 2018-04-04 23:21 - 000002944 _____ C:\Windows\System32\Tasks\{49908E43-C1BA-449A-A088-BC78EC1D3637}
2018-04-04 23:20 - 2018-04-04 23:20 - 000000000 _____ C:\Users\Romča\Downloads\FRSTLauncher.exe
2018-04-04 23:17 - 2018-04-04 23:17 - 000000000 _____ C:\Users\Romča\Downloads\FRSTLauncher(1).exe
2018-04-04 23:16 - 2018-04-04 23:16 - 000000000 _____ C:\Users\Romča\Desktop\FRSTLauncher.exe
2018-04-04 23:14 - 2018-04-04 23:15 - 002403328 _____ (Farbar) C:\Users\Romča\Desktop\FRST64.exe
2018-04-03 00:06 - 2009-11-25 22:06 - 001276928 _____ (VIA Technologies, Inc.) C:\Windows\system32\Drivers\viahduaa.sys
2018-04-03 00:06 - 2009-11-12 12:09 - 001011712 _____ (VIA Technologies, Inc.) C:\Windows\system32\VIAPropPageExt.dll
2018-04-03 00:06 - 2009-11-11 12:33 - 000532480 _____ (VIA Technologies, Inc.) C:\Windows\system32\VIASysFx.dll
2018-04-03 00:06 - 2009-07-29 09:36 - 000601088 _____ (Creative Technology Ltd.) C:\Windows\system32\VMAPO64.DLL
2018-04-03 00:06 - 2009-07-29 09:36 - 000524288 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\VMAPO32.DLL
2018-04-03 00:06 - 2009-07-29 09:36 - 000057856 _____ (Creative Technology Ltd.) C:\Windows\system32\VMPPLD64.DLL
2018-04-03 00:06 - 2009-07-23 16:21 - 000072704 _____ (Creative Technology Ltd.) C:\Windows\system32\VMWRP64.DLL
2018-04-03 00:06 - 2009-07-23 16:20 - 000053760 _____ (Creative Technology Ltd.) C:\Windows\system32\VMPPCN64.DLL
2018-04-03 00:06 - 2009-06-01 10:10 - 000242176 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\Dts2APO.dll
2018-04-03 00:06 - 2009-03-04 17:42 - 000084992 _____ (VIA Technologies, Inc.) C:\Windows\system32\Dts2PropPageExt.dll
2018-04-03 00:06 - 2009-01-19 22:32 - 000193024 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\ViaMicArrayAPO.dll
2018-04-03 00:06 - 2009-01-19 22:32 - 000076288 _____ (VIA Technologies,Inc.) C:\Windows\system32\ViaMicArrayPropPageExt.dll
2018-04-03 00:02 - 2010-06-11 14:37 - 000015368 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\AsrAppCharger.sys
2018-04-03 00:01 - 2018-04-03 00:02 - 000000000 ____D C:\Program Files\ASRock Utility
2018-04-03 00:01 - 2015-02-03 20:28 - 000023048 _____ (ASRock Inc.) C:\Windows\system32\Drivers\AsrVDrive.sys
2018-04-02 23:52 - 2018-04-02 23:52 - 000276392 _____ C:\Windows\Minidump\040218-23718-01.dmp
2018-04-02 23:15 - 2018-04-03 00:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASRock Utility
2018-04-02 23:15 - 2018-04-02 23:58 - 000000000 ____D C:\Program Files (x86)\ASRock Utility
2018-04-02 22:58 - 2018-04-02 23:14 - 000010112 _____ C:\Windows\cFosSpeed_Setup_Log.txt
2018-04-02 22:58 - 2018-04-02 22:58 - 000000003 _____ C:\Users\Romča\AppData\Local\user_data.ini
2018-04-02 22:58 - 2018-04-02 22:58 - 000000000 ____D C:\Users\Romča\AppData\Local\cFos
2018-04-02 22:58 - 2018-04-02 22:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XFast LAN
2018-04-02 22:58 - 2018-04-02 22:58 - 000000000 ____D C:\ProgramData\cFos
2018-04-02 22:58 - 2018-04-02 22:58 - 000000000 ____D C:\Program Files\ASRock
2018-04-02 22:58 - 2011-07-04 15:19 - 001632128 _____ (cFos Software GmbH) C:\Windows\system32\Drivers\cfosspeed6.sys
2018-04-02 22:47 - 2018-04-02 22:47 - 000015936 _____ (FNet Co., Ltd.) C:\Windows\system32\Drivers\FNETURPX.SYS
2018-04-02 22:47 - 2018-04-02 22:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XFast USB
2018-04-02 22:47 - 2018-04-02 22:47 - 000000000 ____D C:\Program Files (x86)\XFastUSB
2018-04-02 22:24 - 2018-04-02 22:24 - 000000930 _____ C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2018-04-02 22:24 - 2018-04-02 22:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2018-04-02 22:24 - 2018-04-02 22:24 - 000000000 ____D C:\Program Files\CPUID
2018-04-02 18:32 - 2018-04-02 18:33 - 000134602 _____ C:\Windows\ntbtlog.txt
2018-04-02 17:38 - 2018-04-02 17:38 - 000001702 _____ C:\Users\Romča\Desktop\CrystalDiskInfo.lnk
2018-04-02 17:31 - 2018-04-02 23:52 - 432801635 _____ C:\Windows\MEMORY.DMP
2018-04-02 15:52 - 2018-04-02 15:52 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2018-04-02 15:47 - 2018-04-02 15:52 - 000000000 ____D C:\Windows\system32\MRT
2018-04-02 15:46 - 2018-04-02 15:46 - 130364688 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2018-04-02 15:44 - 2018-04-02 15:45 - 130364688 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-03-30 18:40 - 2018-03-28 10:31 - 005583040 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-03-30 18:40 - 2018-03-28 10:09 - 004046016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2018-03-30 18:40 - 2018-03-28 10:09 - 004026048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2018-03-30 18:40 - 2018-03-09 05:39 - 000708288 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-03-30 18:40 - 2018-03-09 05:39 - 000262336 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2018-03-30 18:40 - 2018-03-09 05:39 - 000154816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2018-03-30 18:40 - 2018-03-09 05:39 - 000095424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2018-03-30 18:40 - 2018-03-09 05:18 - 000631640 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-03-30 18:40 - 2018-03-09 05:09 - 001665336 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 001461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000094720 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000007168 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 05:06 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:47 - 001314064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:43 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:38 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2018-03-30 18:40 - 2018-03-09 04:38 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2018-03-30 18:40 - 2018-03-09 04:38 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2018-03-30 18:40 - 2018-03-09 04:37 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2018-03-30 18:40 - 2018-03-09 04:34 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2018-03-30 18:40 - 2018-03-09 04:34 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\videoprt.sys
2018-03-30 18:40 - 2018-03-09 04:33 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2018-03-30 18:40 - 2018-03-09 04:31 - 000160256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-03-30 18:40 - 2018-03-09 04:30 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2018-03-30 18:40 - 2018-03-09 04:30 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2018-03-30 18:40 - 2018-03-09 04:29 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2018-03-30 18:40 - 2018-03-09 04:29 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2018-03-30 18:40 - 2018-03-09 04:26 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2018-03-30 18:40 - 2018-03-09 04:22 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2018-03-30 18:40 - 2018-03-09 04:22 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2018-03-30 18:40 - 2018-03-09 04:22 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2018-03-30 18:40 - 2018-03-09 04:22 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2018-03-30 18:40 - 2018-03-09 04:22 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2018-03-30 18:40 - 2018-03-09 04:21 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:21 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:21 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-03-30 18:40 - 2018-03-09 04:21 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2018-03-30 18:40 - 2018-02-18 23:34 - 000634272 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2018-03-26 20:27 - 2018-03-26 20:27 - 000001188 _____ C:\Users\Romča\Documents\cc_20180326_202718.reg
2018-03-26 18:20 - 2018-03-26 18:20 - 000002962 _____ C:\Windows\System32\Tasks\{68798154-6BB0-45C3-B2E5-3AA444D5D897}
2018-03-25 22:34 - 2018-03-25 22:34 - 000000000 ____D C:\Program Files (x86)\MSXML 4.0
2018-03-25 17:55 - 2012-06-08 03:20 - 000280651 _____ C:\Windows6.1-KB2719594-x64.msu
2018-03-25 09:03 - 2018-03-25 09:03 - 000000000 _____ C:\Users\Romča\AppData\Local\{0AF759A8-0FB5-43FB-8356-57866F4996F2}
2018-03-24 23:28 - 2017-04-28 00:50 - 003550208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2018-03-24 23:28 - 2017-04-12 15:05 - 004296704 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2018-03-24 22:13 - 2016-08-29 17:04 - 003229696 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2018-03-24 22:13 - 2016-08-29 16:55 - 002972672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2018-03-24 22:12 - 2018-02-10 10:44 - 025740288 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-03-24 22:12 - 2018-02-10 09:29 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2018-03-24 22:12 - 2018-02-10 09:19 - 002900480 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-03-24 22:12 - 2018-02-10 09:17 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2018-03-24 22:12 - 2018-02-10 09:17 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2018-03-24 22:12 - 2018-02-10 09:16 - 000577536 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-03-24 22:12 - 2018-02-10 09:16 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2018-03-24 22:12 - 2018-02-10 09:10 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2018-03-24 22:12 - 2018-02-10 09:09 - 005782016 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-03-24 22:12 - 2018-02-10 09:07 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2018-03-24 22:12 - 2018-02-10 09:06 - 000816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-03-24 22:12 - 2018-02-10 09:06 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-03-24 22:12 - 2018-02-10 09:06 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2018-03-24 22:12 - 2018-02-10 09:06 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2018-03-24 22:12 - 2018-02-10 09:01 - 000969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2018-03-24 22:12 - 2018-02-10 08:52 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2018-03-24 22:12 - 2018-02-10 08:52 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-03-24 22:12 - 2018-02-10 08:48 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2018-03-24 22:12 - 2018-02-10 08:36 - 015283712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-03-24 22:12 - 2018-02-10 08:34 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-03-24 22:12 - 2018-02-10 08:33 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2018-03-24 22:12 - 2018-02-10 08:32 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-03-24 22:12 - 2018-02-10 08:27 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-03-24 22:12 - 2018-02-10 08:20 - 020274176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-03-24 22:12 - 2018-02-10 08:14 - 001546240 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-03-24 22:12 - 2018-02-10 08:02 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-03-24 22:12 - 2018-02-10 07:57 - 000499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-03-24 22:12 - 2018-02-10 07:57 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2018-03-24 22:12 - 2018-02-10 07:56 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2018-03-24 22:12 - 2018-02-10 07:54 - 002294272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2018-03-24 22:12 - 2018-02-10 07:52 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2018-03-24 22:12 - 2018-02-10 07:50 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2018-03-24 22:12 - 2018-02-10 07:49 - 000662528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-03-24 22:12 - 2018-02-10 07:49 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2018-03-24 22:12 - 2018-02-10 07:49 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2018-03-24 22:12 - 2018-02-10 07:39 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2018-03-24 22:12 - 2018-02-10 07:38 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2018-03-24 22:12 - 2018-02-10 07:35 - 004498944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-03-24 22:12 - 2018-02-10 07:35 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2018-03-24 22:12 - 2018-02-10 07:33 - 013680640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-03-24 22:12 - 2018-02-10 07:27 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2018-03-24 22:12 - 2018-02-10 07:27 - 000694784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-03-24 22:12 - 2018-02-10 07:26 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2018-03-24 22:12 - 2018-02-10 07:14 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-03-24 22:12 - 2018-02-10 07:10 - 001314304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-03-24 22:12 - 2018-02-10 07:08 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-03-24 22:12 - 2018-01-12 18:44 - 001894120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2018-03-24 22:12 - 2018-01-11 18:09 - 003224064 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-03-24 22:12 - 2018-01-01 04:21 - 001680616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2018-03-24 22:12 - 2018-01-01 04:18 - 014183936 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2018-03-24 22:12 - 2018-01-01 04:18 - 002066432 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2018-03-24 22:12 - 2018-01-01 04:18 - 002004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2018-03-24 22:12 - 2018-01-01 04:00 - 012880384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2018-03-24 22:12 - 2017-10-12 02:55 - 014635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2018-03-24 22:12 - 2017-10-12 02:55 - 002319872 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2018-03-24 22:12 - 2017-10-12 02:55 - 002222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2018-03-24 22:12 - 2017-10-12 02:55 - 002058240 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2018-03-24 22:12 - 2017-10-12 02:37 - 011410944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2018-03-24 22:12 - 2017-10-12 02:37 - 001549824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000995272 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2018-03-24 22:12 - 2017-09-07 15:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2018-03-24 22:12 - 2017-08-19 17:28 - 004121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2018-03-24 22:12 - 2017-08-19 17:10 - 003209216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2018-03-24 22:12 - 2017-08-14 19:35 - 003203584 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
2018-03-24 22:12 - 2017-08-13 23:37 - 002144256 _____ (Microsoft Corporation) C:\Windows\system32\mmc.exe
2018-03-24 22:12 - 2017-07-21 16:26 - 000518144 _____ C:\Windows\SysWOW64\msjetoledb40.dll
2018-03-24 22:12 - 2017-07-21 16:26 - 000290816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjtes40.dll
2018-03-24 22:12 - 2017-07-07 17:29 - 001143296 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll
2018-03-24 22:12 - 2017-07-01 15:05 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
2018-03-24 22:12 - 2017-07-01 15:05 - 000616448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrepl40.dll
2018-03-24 22:12 - 2017-07-01 15:05 - 000343552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2018-03-24 22:12 - 2017-07-01 15:05 - 000310272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd2x40.dll
2018-03-24 22:12 - 2017-05-12 18:25 - 001251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2018-03-24 22:12 - 2017-05-12 17:58 - 001648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2018-03-24 22:12 - 2017-05-12 17:58 - 001180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2018-03-24 22:12 - 2017-05-10 17:29 - 003165184 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2018-03-24 22:12 - 2017-05-10 17:29 - 000192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2018-03-24 22:12 - 2017-05-10 17:29 - 000098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2018-03-24 22:12 - 2017-05-10 17:14 - 002651136 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2018-03-24 22:12 - 2017-05-10 17:13 - 000709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2018-03-24 22:12 - 2017-05-10 17:13 - 000140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2018-03-24 22:12 - 2017-05-10 17:13 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2018-03-24 22:12 - 2017-05-10 17:12 - 000174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2018-03-24 22:12 - 2017-05-10 17:00 - 000573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2018-03-24 22:12 - 2017-05-10 17:00 - 000093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2018-03-24 22:12 - 2017-05-10 17:00 - 000035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2018-03-24 22:12 - 2017-01-11 20:01 - 001887744 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2018-03-24 22:12 - 2016-11-09 18:33 - 003244032 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2018-03-24 22:12 - 2016-11-09 18:17 - 002365440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2018-03-24 22:12 - 2016-10-07 17:32 - 003649536 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2018-03-24 22:12 - 2016-09-15 16:56 - 000041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2018-03-24 22:12 - 2016-08-22 18:19 - 001386496 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2018-03-24 22:12 - 2016-08-06 17:31 - 002023424 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2018-03-24 22:12 - 2016-06-14 19:16 - 001202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2018-03-24 22:12 - 2016-06-14 19:16 - 000842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2018-03-24 22:12 - 2016-06-14 17:21 - 000988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2018-03-24 22:12 - 2016-06-14 17:21 - 000744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2018-03-24 22:11 - 2018-02-10 21:52 - 000395928 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2018-03-24 22:11 - 2018-02-10 21:03 - 000347296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-03-24 22:11 - 2018-02-10 09:30 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2018-03-24 22:11 - 2018-02-10 09:17 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2018-03-24 22:11 - 2018-02-10 09:10 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2018-03-24 22:11 - 2018-02-10 08:58 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2018-03-24 22:11 - 2018-02-10 08:51 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2018-03-24 22:11 - 2018-02-10 08:49 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2018-03-24 22:11 - 2018-02-10 08:46 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2018-03-24 22:11 - 2018-02-10 08:45 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2018-03-24 22:11 - 2018-02-10 08:36 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2018-03-24 22:11 - 2018-02-10 08:34 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2018-03-24 22:11 - 2018-02-10 08:08 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2018-03-24 22:11 - 2018-02-10 07:57 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2018-03-24 22:11 - 2018-02-10 07:57 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2018-03-24 22:11 - 2018-02-10 07:51 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2018-03-24 22:11 - 2018-02-10 07:42 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2018-03-24 22:11 - 2018-02-10 07:38 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2018-03-24 22:11 - 2018-02-10 07:36 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2018-03-24 22:11 - 2018-02-10 07:35 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2018-03-24 22:11 - 2018-02-10 07:34 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2018-03-24 22:11 - 2018-02-10 07:29 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2018-03-24 22:11 - 2018-01-12 18:44 - 000377064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2018-03-24 22:11 - 2018-01-12 18:44 - 000371432 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2018-03-24 22:11 - 2018-01-12 18:44 - 000287976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2018-03-24 22:11 - 2018-01-12 18:40 - 000484864 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2018-03-24 22:11 - 2018-01-12 18:27 - 004834816 _____ (Microsoft Corporation) C:\Windows\system32\xpsrchvw.exe
2018-03-24 22:11 - 2018-01-12 18:26 - 000363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2018-03-24 22:11 - 2018-01-12 18:16 - 003405824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xpsrchvw.exe
2018-03-24 22:11 - 2018-01-12 18:16 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2018-03-24 22:11 - 2018-01-12 18:16 - 000030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2018-03-24 22:11 - 2018-01-12 18:15 - 000032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2018-03-24 22:11 - 2018-01-11 18:41 - 001133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2018-03-24 22:11 - 2018-01-11 18:22 - 000805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2018-03-24 22:11 - 2018-01-05 18:31 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2018-03-24 22:11 - 2018-01-05 18:31 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2018-03-24 22:11 - 2018-01-05 18:30 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2018-03-24 22:11 - 2018-01-05 18:30 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2018-03-24 22:11 - 2018-01-05 18:30 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2018-03-24 22:11 - 2018-01-05 18:25 - 000383720 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2018-03-24 22:11 - 2018-01-05 18:14 - 000309480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2018-03-24 22:11 - 2018-01-05 18:11 - 000111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2018-03-24 22:11 - 2018-01-05 18:11 - 000071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2018-03-24 22:11 - 2018-01-05 18:11 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2018-03-24 22:11 - 2018-01-05 18:11 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2018-03-24 22:11 - 2018-01-05 17:50 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2018-03-24 22:11 - 2018-01-01 04:21 - 000948968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2018-03-24 22:11 - 2018-01-01 04:21 - 000288488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2018-03-24 22:11 - 2018-01-01 04:21 - 000213736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2018-03-24 22:11 - 2018-01-01 04:21 - 000114408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2018-03-24 22:11 - 2018-01-01 04:18 - 001942016 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 001867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 001741312 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 001361408 _____ (Microsoft Corporation) C:\Windows\system32\PeerDistSvc.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 001110528 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000977408 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000961024 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000863232 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2018-03-24 22:11 - 2018-01-01 04:18 - 000842752 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000828928 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000749568 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000705024 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2018-03-24 22:11 - 2018-01-01 04:18 - 000512000 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000473600 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000444928 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000439296 _____ (Microsoft Corporation) C:\Windows\system32\p2psvc.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000366592 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\pnrpsvc.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2018-03-24 22:11 - 2018-01-01 04:18 - 000303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000264704 _____ (Microsoft Corporation) C:\Windows\system32\P2P.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000223232 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000181760 _____ (Microsoft Corporation) C:\Windows\system32\PeerDist.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000131584 _____ (Microsoft Corporation) C:\Windows\system32\PeerDistWSDDiscoProv.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000120320 _____ (Microsoft Corporation) C:\Windows\system32\WcnApi.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000108544 _____ (Microsoft Corporation) C:\Windows\system32\icfupgd.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000101376 _____ (Microsoft Corporation) C:\Windows\system32\fdWCN.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000095744 _____ (Microsoft Corporation) C:\Windows\system32\rascfg.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\rasdiag.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\ndptsp.tsp
2018-03-24 22:11 - 2018-01-01 04:18 - 000053760 _____ (Microsoft Corporation) C:\Windows\system32\vmicres.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000051200 _____ (Microsoft Corporation) C:\Windows\system32\PeerDistHttpTrans.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\kmddsp.tsp
2018-03-24 22:11 - 2018-01-01 04:18 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\rasmxs.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000039424 _____ (Microsoft Corporation) C:\Windows\system32\traffic.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\rasser.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\WcnEapPeerProxy.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000024064 _____ (Microsoft Corporation) C:\Windows\system32\WcnEapAuthProxy.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\wfapigp.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000016896 _____ (Microsoft Corporation) C:\Windows\system32\wshqos.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wshnetbs.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
2018-03-24 22:11 - 2018-01-01 04:18 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2018-03-24 22:11 - 2018-01-01 04:04 - 000559616 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2018-03-24 22:11 - 2018-01-01 04:00 - 001499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2018-03-24 22:11 - 2018-01-01 04:00 - 001417728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2018-03-24 22:11 - 2018-01-01 04:00 - 001390080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2018-03-24 22:11 - 2018-01-01 04:00 - 000741888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2018-03-24 22:11 - 2018-01-01 04:00 - 000666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2018-03-24 22:11 - 2018-01-01 04:00 - 000463360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll
2018-03-24 22:11 - 2018-01-01 04:00 - 000351744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2018-03-24 22:11 - 2018-01-01 04:00 - 000304640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskcomp.dll
2018-03-24 22:11 - 2018-01-01 04:00 - 000276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll
2018-03-24 22:11 - 2018-01-01 04:00 - 000217600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\P2P.dll
2018-03-24 22:11 - 2018-01-01 04:00 - 000216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2018-03-24 22:11 - 2018-01-01 04:00 - 000162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2018-03-24 22:11 - 2018-01-01 04:00 - 000139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PeerDist.dll
2018-03-24 22:11 - 2018-01-01 04:00 - 000084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2018-03-24 22:11 - 2018-01-01 04:00 - 000081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdWCN.dll
2018-03-24 22:11 - 2018-01-01 04:00 - 000081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rascfg.dll
2018-03-24 22:11 - 2018-01-01 04:00 - 000061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasdiag.dll
2018-03-24 22:11 - 2018-01-01 04:00 - 000052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2018-03-24 22:11 - 2018-01-01 04:00 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ndptsp.tsp
2018-03-24 22:11 - 2018-01-01 04:00 - 000033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\traffic.dll
2018-03-24 22:11 - 2018-01-01 04:00 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll
2018-03-24 22:11 - 2018-01-01 04:00 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2018-03-24 22:11 - 2018-01-01 03:59 - 001806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2018-03-24 22:11 - 2018-01-01 03:59 - 000309760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2018-03-24 22:11 - 2018-01-01 03:55 - 000131584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pacer.sys
2018-03-24 22:11 - 2018-01-01 03:55 - 000088576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2018-03-24 22:11 - 2018-01-01 03:55 - 000058368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2018-03-24 22:11 - 2018-01-01 03:55 - 000045056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbios.sys
2018-03-24 22:11 - 2018-01-01 03:55 - 000024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndistapi.sys
2018-03-24 22:11 - 2018-01-01 03:54 - 000077312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys
2018-03-24 22:11 - 2018-01-01 03:50 - 000455680 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2018-03-24 22:11 - 2018-01-01 03:47 - 000244224 _____ (Microsoft Corporation) C:\Windows\system32\vmicsvc.exe
2018-03-24 22:11 - 2018-01-01 03:46 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\IcCoinstall.dll
2018-03-24 22:11 - 2018-01-01 03:46 - 000051712 _____ (Microsoft Corporation) C:\Windows\system32\vmictimeprovider.dll
2018-03-24 22:11 - 2018-01-01 03:43 - 000086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcnApi.dll
2018-03-24 22:11 - 2018-01-01 03:43 - 000038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kmddsp.tsp
2018-03-24 22:11 - 2018-01-01 03:43 - 000033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasmxs.dll
2018-03-24 22:11 - 2018-01-01 03:43 - 000022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasser.dll
2018-03-24 22:11 - 2018-01-01 03:43 - 000020480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcnEapPeerProxy.dll
2018-03-24 22:11 - 2018-01-01 03:43 - 000019968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcnEapAuthProxy.dll
2018-03-24 22:11 - 2018-01-01 03:43 - 000018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfapigp.dll
2018-03-24 22:11 - 2018-01-01 03:43 - 000013824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshqos.dll
2018-03-24 22:11 - 2018-01-01 03:42 - 000460288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2018-03-24 22:11 - 2018-01-01 03:42 - 000406016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2018-03-24 22:11 - 2018-01-01 03:42 - 000168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2018-03-24 22:11 - 2018-01-01 03:41 - 000754176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2018-03-24 22:11 - 2018-01-01 03:41 - 000106496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2018-03-24 22:11 - 2018-01-01 03:41 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
2018-03-24 22:11 - 2017-12-05 19:36 - 001484288 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2018-03-24 22:11 - 2017-12-05 19:36 - 000625664 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2018-03-24 22:11 - 2017-12-05 19:36 - 000250880 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll
2018-03-24 22:11 - 2017-12-05 19:36 - 000229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2018-03-24 22:11 - 2017-12-05 19:36 - 000218112 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2018-03-24 22:11 - 2017-12-05 19:36 - 000190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2018-03-24 22:11 - 2017-12-05 19:36 - 000141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2018-03-24 22:11 - 2017-12-05 19:36 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
2018-03-24 22:11 - 2017-12-05 19:36 - 000040960 _____ (Microsoft Corporation) C:\Windows\system32\WcsPlugInService.dll
2018-03-24 22:11 - 2017-12-05 19:08 - 001176576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2018-03-24 22:11 - 2017-12-05 19:08 - 000481792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll
2018-03-24 22:11 - 2017-12-05 19:08 - 000215040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icm32.dll
2018-03-24 22:11 - 2017-12-05 19:08 - 000179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2018-03-24 22:11 - 2017-12-05 19:08 - 000145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2018-03-24 22:11 - 2017-12-05 19:08 - 000135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2018-03-24 22:11 - 2017-12-05 19:08 - 000106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2018-03-24 22:11 - 2017-12-05 18:04 - 000404992 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe
2018-03-24 22:11 - 2017-12-05 17:49 - 000032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcsPlugInService.dll
2018-03-24 22:11 - 2017-11-07 18:31 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2018-03-24 22:11 - 2017-11-07 18:13 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2018-03-24 22:11 - 2017-11-04 17:31 - 000194048 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll
2018-03-24 22:11 - 2017-11-04 17:31 - 000170496 _____ (Microsoft Corporation) C:\Windows\system32\itss.dll
2018-03-24 22:11 - 2017-11-04 17:10 - 000158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itircl.dll
2018-03-24 22:11 - 2017-11-04 17:10 - 000142336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itss.dll
2018-03-24 22:11 - 2017-11-02 18:55 - 000281600 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll
2018-03-24 22:11 - 2017-11-02 18:55 - 000138240 _____ (Microsoft Corporation) C:\Windows\system32\rtm.dll
2018-03-24 22:11 - 2017-11-02 18:55 - 000097792 _____ (Microsoft Corporation) C:\Windows\system32\mprdim.dll
2018-03-24 22:11 - 2017-11-02 18:55 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\iprtprio.dll
2018-03-24 22:11 - 2017-11-02 17:11 - 000271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iprtrmgr.dll
2018-03-24 22:11 - 2017-11-02 17:11 - 000115200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rtm.dll
2018-03-24 22:11 - 2017-11-02 17:11 - 000075264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprdim.dll
2018-03-24 22:11 - 2017-11-02 16:56 - 000008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iprtprio.dll
2018-03-24 22:11 - 2017-10-18 04:06 - 000344064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2018-03-24 22:11 - 2017-10-18 04:06 - 000327168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2018-03-24 22:11 - 2017-10-18 04:06 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2018-03-24 22:11 - 2017-10-18 04:06 - 000056320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2018-03-24 22:11 - 2017-10-18 04:06 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2018-03-24 22:11 - 2017-10-18 04:06 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2018-03-24 22:11 - 2017-10-18 04:06 - 000007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2018-03-24 22:11 - 2017-10-17 01:04 - 001001984 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll
2018-03-24 22:11 - 2017-10-17 00:46 - 000953344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll
2018-03-24 22:11 - 2017-10-16 23:55 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2018-03-24 22:11 - 2017-10-12 02:55 - 012574720 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2018-03-24 22:11 - 2017-10-12 02:55 - 000778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2018-03-24 22:11 - 2017-10-12 02:55 - 000491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2018-03-24 22:11 - 2017-10-12 02:55 - 000288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2018-03-24 22:11 - 2017-10-12 02:55 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2018-03-24 22:11 - 2017-10-12 02:55 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2018-03-24 22:11 - 2017-10-12 02:55 - 000075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2018-03-24 22:11 - 2017-10-12 02:55 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2018-03-24 22:11 - 2017-10-12 02:55 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2018-03-24 22:11 - 2017-10-12 02:55 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2018-03-24 22:11 - 2017-10-12 02:55 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2018-03-24 22:11 - 2017-10-12 02:39 - 000591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2018-03-24 22:11 - 2017-10-12 02:38 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2018-03-24 22:11 - 2017-10-12 02:38 - 000113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2018-03-24 22:11 - 2017-10-12 02:37 - 012574208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2018-03-24 22:11 - 2017-10-12 02:37 - 001400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2018-03-24 22:11 - 2017-10-12 02:37 - 001363968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Query.dll
2018-03-24 22:11 - 2017-10-12 02:37 - 000666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2018-03-24 22:11 - 2017-10-12 02:37 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2018-03-24 22:11 - 2017-10-12 02:37 - 000197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2018-03-24 22:11 - 2017-10-12 02:37 - 000104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2018-03-24 22:11 - 2017-10-12 02:37 - 000059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2018-03-24 22:11 - 2017-10-12 02:37 - 000034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2018-03-24 22:11 - 2017-10-12 02:26 - 000427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2018-03-24 22:11 - 2017-10-12 02:26 - 000164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2018-03-24 22:11 - 2017-10-12 02:25 - 000086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2018-03-24 22:11 - 2017-10-12 02:25 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2018-03-24 22:11 - 2017-10-12 02:24 - 000008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2018-03-24 22:11 - 2017-10-12 02:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2018-03-24 22:11 - 2017-10-12 02:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2018-03-24 22:11 - 2017-10-12 02:20 - 000317440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2018-03-24 22:11 - 2017-10-12 02:20 - 000113152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
2018-03-24 22:11 - 2017-09-13 17:28 - 001068544 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2018-03-24 22:11 - 2017-09-13 17:28 - 000886272 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2018-03-24 22:11 - 2017-09-13 17:28 - 000448512 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2018-03-24 22:11 - 2017-09-13 17:28 - 000414208 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2018-03-24 22:11 - 2017-09-13 17:28 - 000118784 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2018-03-24 22:11 - 2017-09-13 17:28 - 000113664 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2018-03-24 22:11 - 2017-09-13 17:09 - 000830464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2018-03-24 22:11 - 2017-09-13 17:09 - 000428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2018-03-24 22:11 - 2017-09-13 17:09 - 000392704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlansec.dll
2018-03-24 22:11 - 2017-09-13 17:09 - 000083968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2018-03-24 22:11 - 2017-09-13 17:09 - 000080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2018-03-24 22:11 - 2017-09-13 17:05 - 000324608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2018-03-24 22:11 - 2017-09-08 17:30 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2018-03-24 22:11 - 2017-09-08 17:10 - 000312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2018-03-24 22:11 - 2017-09-08 16:20 - 000640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswstr10.dll
2018-03-24 22:11 - 2017-09-08 16:20 - 000008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjint40.dll
2018-03-24 22:11 - 2017-09-07 17:31 - 002851328 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2018-03-24 22:11 - 2017-09-07 17:12 - 002755072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themeui.dll
2018-03-24 22:11 - 2017-08-19 17:28 - 000206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2018-03-24 22:11 - 2017-08-19 17:28 - 000197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2018-03-24 22:11 - 2017-08-19 17:28 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2018-03-24 22:11 - 2017-08-19 17:10 - 000180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2018-03-24 22:11 - 2017-08-19 17:10 - 000103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2018-03-24 22:11 - 2017-08-19 17:10 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2018-03-24 22:11 - 2017-08-19 17:08 - 000055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2018-03-24 22:11 - 2017-08-19 17:08 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2018-03-24 22:11 - 2017-08-19 16:57 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2018-03-24 22:11 - 2017-08-19 16:57 - 000023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2018-03-24 22:11 - 2017-08-16 17:29 - 000806912 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2018-03-24 22:11 - 2017-08-16 17:10 - 000629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2018-03-24 22:11 - 2017-08-14 19:35 - 002150912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcndmgr.dll
2018-03-24 22:11 - 2017-08-14 19:35 - 001032192 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2018-03-24 22:11 - 2017-08-14 19:35 - 000827904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2018-03-24 22:11 - 2017-08-14 19:35 - 000355328 _____ (Microsoft Corporation) C:\Windows\system32\mmcbase.dll
2018-03-24 22:11 - 2017-08-14 19:35 - 000303104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcbase.dll
2018-03-24 22:11 - 2017-08-14 19:35 - 000172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cic.dll
2018-03-24 22:11 - 2017-08-14 19:35 - 000131072 _____ (Microsoft Corporation) C:\Windows\system32\mmcshext.dll
2018-03-24 22:11 - 2017-08-14 19:35 - 000128512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcshext.dll
2018-03-24 22:11 - 2017-08-14 19:35 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2018-03-24 22:11 - 2017-08-14 19:34 - 000211968 _____ (Microsoft Corporation) C:\Windows\system32\cic.dll
2018-03-24 22:11 - 2017-08-13 23:46 - 001112576 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2018-03-24 22:11 - 2017-08-13 23:45 - 000162816 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2018-03-24 22:11 - 2017-08-13 23:45 - 000040448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2018-03-24 22:11 - 2017-08-13 23:45 - 000020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2018-03-24 22:11 - 2017-08-13 23:30 - 001401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmc.exe
2018-03-24 22:11 - 2017-08-11 08:35 - 000757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2018-03-24 22:11 - 2017-08-11 08:35 - 000346112 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2018-03-24 22:11 - 2017-08-11 08:35 - 000313856 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2018-03-24 22:11 - 2017-08-11 08:35 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\nsisvc.dll
2018-03-24 22:11 - 2017-08-11 08:35 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\winnsi.dll
2018-03-24 22:11 - 2017-08-11 08:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\nsi.dll
2018-03-24 22:11 - 2017-08-11 08:34 - 000971776 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2018-03-24 22:11 - 2017-08-11 08:34 - 000166400 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2018-03-24 22:11 - 2017-08-11 08:34 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
2018-03-24 22:11 - 2017-08-11 08:20 - 000071680 _____ C:\Windows\system32\PrintBrmUi.exe
2018-03-24 22:11 - 2017-08-11 08:20 - 000061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
2018-03-24 22:11 - 2017-08-11 08:20 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe
2018-03-24 22:11 - 2017-08-11 08:19 - 000497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2018-03-24 22:11 - 2017-08-11 08:19 - 000299008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll
2018-03-24 22:11 - 2017-08-11 08:19 - 000271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2018-03-24 22:11 - 2017-08-11 08:19 - 000016384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winnsi.dll
2018-03-24 22:11 - 2017-08-11 08:19 - 000008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nsi.dll
2018-03-24 22:11 - 2017-08-11 08:12 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2018-03-24 22:11 - 2017-08-11 08:09 - 000061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.exe
2018-03-24 22:11 - 2017-08-11 08:03 - 000026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe
2018-03-24 22:11 - 2017-08-11 08:00 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2018-03-24 22:11 - 2017-08-11 07:58 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nsiproxy.sys
2018-03-24 22:11 - 2017-07-29 16:56 - 000117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2018-03-24 22:11 - 2017-07-21 16:26 - 000409600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexch40.dll
2018-03-24 22:11 - 2017-07-21 16:26 - 000282624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstext40.dll
2018-03-24 22:11 - 2017-07-14 17:29 - 000486400 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2018-03-24 22:11 - 2017-07-14 17:29 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2018-03-24 22:11 - 2017-07-14 17:10 - 000382976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2018-03-24 22:11 - 2017-07-14 16:57 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2018-03-24 22:11 - 2017-07-14 16:50 - 000054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2018-03-24 22:11 - 2017-07-14 16:50 - 000028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
2018-03-24 22:11 - 2017-07-07 17:33 - 000363752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys
2018-03-24 22:11 - 2017-07-07 17:10 - 000973312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXPTaskRingtone.dll
2018-03-24 22:11 - 2017-07-01 15:05 - 000866816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswdat10.dll
2018-03-24 22:11 - 2017-07-01 15:05 - 000475648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxbde40.dll
2018-03-24 22:11 - 2017-07-01 15:05 - 000375808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspbde40.dll
2018-03-24 22:11 - 2017-07-01 15:05 - 000240640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msltus40.dll
2018-03-24 22:11 - 2017-07-01 15:05 - 000083968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjter40.dll
2018-03-24 22:11 - 2017-06-13 00:49 - 001363456 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2018-03-24 22:11 - 2017-06-13 00:49 - 000594432 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2018-03-24 22:11 - 2017-06-13 00:49 - 000475136 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2018-03-24 22:11 - 2017-06-13 00:49 - 000058880 _____ (Microsoft Corporation) C:\Windows\system32\pdhui.dll
2018-03-24 22:11 - 2017-06-13 00:29 - 001227264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
2018-03-24 22:11 - 2017-06-13 00:29 - 000444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll
2018-03-24 22:11 - 2017-06-13 00:29 - 000390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx
2018-03-24 22:11 - 2017-06-13 00:28 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdhui.dll
2018-03-24 22:11 - 2017-06-13 00:14 - 000379392 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2018-03-24 22:11 - 2017-06-13 00:14 - 000172544 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe
2018-03-24 22:11 - 2017-06-13 00:14 - 000103936 _____ (Microsoft Corporation) C:\Windows\system32\resmon.exe
2018-03-24 22:11 - 2017-06-13 00:06 - 000303616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinfo32.exe
2018-03-24 22:11 - 2017-06-13 00:06 - 000157184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfmon.exe
2018-03-24 22:11 - 2017-06-13 00:06 - 000103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resmon.exe
2018-03-24 22:11 - 2017-06-02 10:10 - 000733696 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2018-03-24 22:11 - 2017-05-16 17:35 - 000986856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2018-03-24 22:11 - 2017-05-16 17:35 - 000265448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2018-03-24 22:11 - 2017-05-16 17:30 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2018-03-24 22:11 - 2017-05-10 17:33 - 000091368 _____ (Microsoft Corporation) C:\Windows\system32\MigAutoPlay.exe
2018-03-24 22:11 - 2017-05-10 17:28 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2018-03-24 22:11 - 2017-05-10 17:16 - 000091368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MigAutoPlay.exe
2018-03-24 22:11 - 2017-05-10 17:13 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2018-03-24 22:11 - 2017-05-10 17:13 - 000036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2018-03-24 22:11 - 2017-05-10 17:13 - 000012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2018-03-24 22:11 - 2017-05-10 17:00 - 000030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2018-03-24 22:11 - 2017-05-07 17:33 - 000094440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2018-03-24 22:11 - 2017-05-07 17:29 - 000011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2018-03-24 22:11 - 2017-04-17 17:37 - 000876544 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2018-03-24 22:11 - 2017-04-17 17:12 - 000581632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2018-03-24 22:11 - 2017-04-04 16:53 - 000496128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2018-03-24 22:11 - 2017-03-30 17:03 - 000046080 _____ (Microsoft Corporation) C:\Windows\system32\rundll32.exe
2018-03-24 22:11 - 2017-03-30 16:58 - 000045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
2018-03-24 22:11 - 2017-03-10 18:32 - 001389056 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll
2018-03-24 22:11 - 2017-03-10 18:32 - 000300544 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2018-03-24 22:11 - 2017-03-10 18:20 - 001508352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pla.dll
2018-03-24 22:11 - 2017-03-10 18:20 - 000237056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll
2018-03-24 22:11 - 2017-03-10 17:57 - 000009216 _____ (Microsoft Corporation) C:\Windows\system32\plasrv.exe
2018-03-24 22:11 - 2017-03-10 17:55 - 000205312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2018-03-24 22:11 - 2017-03-10 17:55 - 000195584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys
2018-03-24 22:11 - 2017-03-07 18:30 - 000085504 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2018-03-24 22:11 - 2017-03-07 18:17 - 000067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2018-03-24 22:11 - 2017-03-04 03:27 - 001574912 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2018-03-24 22:11 - 2017-03-04 03:27 - 000093696 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll
2018-03-24 22:11 - 2017-03-04 03:14 - 001329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2018-03-24 22:11 - 2017-03-04 03:14 - 000077312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmjpegdec.dll
2018-03-24 22:11 - 2017-02-09 18:32 - 000769536 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2018-03-24 22:11 - 2017-02-09 18:32 - 000106496 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2018-03-24 22:11 - 2017-02-09 18:14 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2018-03-24 22:11 - 2017-01-11 20:01 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2018-03-24 22:11 - 2017-01-11 19:43 - 001241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2018-03-24 22:11 - 2017-01-11 19:43 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2018-03-24 22:11 - 2016-11-21 20:12 - 000109568 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2018-03-24 22:11 - 2016-11-20 18:19 - 000084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2018-03-24 22:11 - 2016-11-20 16:07 - 000467392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2018-03-24 22:11 - 2016-11-10 18:32 - 001009152 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2018-03-24 22:11 - 2016-11-10 18:19 - 000833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2018-03-24 22:11 - 2016-11-09 18:33 - 000504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2018-03-24 22:11 - 2016-11-09 18:33 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2018-03-24 22:11 - 2016-11-09 18:17 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2018-03-24 22:11 - 2016-11-09 18:17 - 000025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2018-03-24 22:11 - 2016-11-09 18:02 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2018-03-24 22:11 - 2016-11-09 17:55 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2018-03-24 22:11 - 2016-10-11 17:32 - 000069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2018-03-24 22:11 - 2016-10-11 17:31 - 001148416 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME
2018-03-24 22:11 - 2016-10-11 17:31 - 000878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2018-03-24 22:11 - 2016-10-11 17:31 - 000457216 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime
2018-03-24 22:11 - 2016-10-11 17:31 - 000246784 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
2018-03-24 22:11 - 2016-10-11 17:31 - 000176128 _____ (Microsoft Corporation) C:\Windows\system32\tintlgnt.ime
2018-03-24 22:11 - 2016-10-11 17:31 - 000175104 _____ (Microsoft Corporation) C:\Windows\system32\quick.ime
2018-03-24 22:11 - 2016-10-11 17:31 - 000175104 _____ (Microsoft Corporation) C:\Windows\system32\qintlgnt.ime
2018-03-24 22:11 - 2016-10-11 17:31 - 000175104 _____ (Microsoft Corporation) C:\Windows\system32\phon.ime
2018-03-24 22:11 - 2016-10-11 17:31 - 000175104 _____ (Microsoft Corporation) C:\Windows\system32\chajei.ime
2018-03-24 22:11 - 2016-10-11 17:31 - 000175104 _____ (Microsoft Corporation) C:\Windows\system32\cintlgnt.ime
2018-03-24 22:11 - 2016-10-11 17:31 - 000132608 _____ (Microsoft Corporation) C:\Windows\system32\pintlgnt.ime
2018-03-24 22:11 - 2016-10-11 17:18 - 001027584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10.IME
2018-03-24 22:11 - 2016-10-11 17:18 - 000701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2018-03-24 22:11 - 2016-10-11 17:18 - 000430080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imkr80.ime
2018-03-24 22:11 - 2016-10-11 17:18 - 000202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\input.dll
2018-03-24 22:11 - 2016-10-11 17:18 - 000126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tintlgnt.ime
2018-03-24 22:11 - 2016-10-11 17:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quick.ime
2018-03-24 22:11 - 2016-10-11 17:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qintlgnt.ime
2018-03-24 22:11 - 2016-10-11 17:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\phon.ime
2018-03-24 22:11 - 2016-10-11 17:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\chajei.ime
2018-03-24 22:11 - 2016-10-11 17:18 - 000125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cintlgnt.ime
2018-03-24 22:11 - 2016-10-11 17:18 - 000090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pintlgnt.ime
2018-03-24 22:11 - 2016-10-11 17:18 - 000069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll
2018-03-24 22:11 - 2016-10-11 16:55 - 000346112 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2018-03-24 22:11 - 2016-10-11 15:33 - 000187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2018-03-24 22:11 - 2016-10-11 15:18 - 000419648 _____ C:\Windows\SysWOW64\locale.nls
2018-03-24 22:11 - 2016-10-11 15:17 - 000419648 _____ C:\Windows\system32\locale.nls
2018-03-24 22:11 - 2016-10-11 15:06 - 000221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2018-03-24 22:11 - 2016-10-07 17:12 - 002291712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll
2018-03-24 22:11 - 2016-10-05 16:54 - 000090112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2018-03-24 22:11 - 2016-09-12 23:08 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll
2018-03-24 22:11 - 2016-09-12 22:49 - 000076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adsmsext.dll
2018-03-24 22:11 - 2016-09-08 22:34 - 000263680 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2018-03-24 22:11 - 2016-09-08 22:34 - 000208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2018-03-24 22:11 - 2016-09-08 22:34 - 000108544 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2018-03-24 22:11 - 2016-09-08 22:34 - 000087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2018-03-24 22:11 - 2016-09-08 16:55 - 000142336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2018-03-24 22:11 - 2016-08-12 18:26 - 000461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2018-03-24 22:11 - 2016-08-06 17:31 - 000347136 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2018-03-24 22:11 - 2016-08-06 17:31 - 000310784 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2018-03-24 22:11 - 2016-08-06 17:31 - 000182272 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2018-03-24 22:11 - 2016-08-06 17:31 - 000054272 _____ (Microsoft Corporation) C:\Windows\system32\WsmRes.dll
2018-03-24 22:11 - 2016-08-06 17:31 - 000012800 _____ (Microsoft Corporation) C:\Windows\system32\wsmplpxy.dll
2018-03-24 22:11 - 2016-08-06 17:15 - 001178112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2018-03-24 22:11 - 2016-08-06 17:15 - 000249344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2018-03-24 22:11 - 2016-08-06 17:15 - 000214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2018-03-24 22:11 - 2016-08-06 17:15 - 000146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2018-03-24 22:11 - 2016-08-06 17:15 - 000054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmRes.dll
2018-03-24 22:11 - 2016-08-06 17:01 - 000266752 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2018-03-24 22:11 - 2016-08-06 17:01 - 000013824 _____ (Microsoft Corporation) C:\Windows\system32\wsmprovhost.exe
2018-03-24 22:11 - 2016-08-06 16:53 - 000199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2018-03-24 22:11 - 2016-08-06 16:53 - 000012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmprovhost.exe
2018-03-24 22:11 - 2016-08-06 16:53 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsmplpxy.dll
2018-03-24 22:11 - 2016-06-14 19:16 - 001068544 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2018-03-24 22:11 - 2016-06-14 19:16 - 000782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2018-03-24 22:11 - 2016-06-14 19:16 - 000680448 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2018-03-24 22:11 - 2016-06-14 19:16 - 000641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2018-03-24 22:11 - 2016-06-14 19:16 - 000632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2018-03-24 22:11 - 2016-06-14 19:16 - 000499712 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2018-03-24 22:11 - 2016-06-14 19:16 - 000497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2018-03-24 22:11 - 2016-06-14 19:16 - 000440320 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2018-03-24 22:11 - 2016-06-14 19:16 - 000433152 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2018-03-24 22:11 - 2016-06-14 19:16 - 000371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2018-03-24 22:11 - 2016-06-14 19:16 - 000325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2018-03-24 22:11 - 2016-06-14 19:16 - 000295936 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2018-03-24 22:11 - 2016-06-14 19:16 - 000284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2018-03-24 22:11 - 2016-06-14 19:16 - 000187904 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2018-03-24 22:11 - 2016-06-14 19:16 - 000081920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2018-03-24 22:11 - 2016-06-14 19:16 - 000037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2018-03-24 22:11 - 2016-06-14 19:16 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2018-03-24 22:11 - 2016-06-14 19:11 - 000663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2018-03-24 22:11 - 2016-06-14 17:21 - 001005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2018-03-24 22:11 - 2016-06-14 17:21 - 000617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2018-03-24 22:11 - 2016-06-14 17:21 - 000519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2018-03-24 22:11 - 2016-06-14 17:21 - 000504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2018-03-24 22:11 - 2016-06-14 17:21 - 000489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2018-03-24 22:11 - 2016-06-14 17:21 - 000442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2018-03-24 22:11 - 2016-06-14 17:21 - 000406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2018-03-24 22:11 - 2016-06-14 17:21 - 000374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2018-03-24 22:11 - 2016-06-14 17:21 - 000354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2018-03-24 22:11 - 2016-06-14 17:21 - 000265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2018-03-24 22:11 - 2016-06-14 17:21 - 000195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2018-03-24 22:11 - 2016-06-14 17:21 - 000080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2018-03-24 22:11 - 2016-06-14 17:15 - 000125952 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2018-03-24 22:11 - 2016-06-14 17:00 - 000011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2018-03-24 22:11 - 2016-06-14 17:00 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2018-03-24 22:09 - 2016-05-12 17:18 - 000090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2018-03-24 22:08 - 2018-02-13 20:17 - 000136384 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2018-03-24 22:08 - 2018-02-13 20:10 - 000655872 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2018-03-24 22:08 - 2018-02-13 16:05 - 001994752 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2018-03-24 22:08 - 2018-02-13 16:05 - 001560064 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2018-03-24 22:08 - 2018-02-13 16:05 - 000740864 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2018-03-24 22:08 - 2018-02-13 16:05 - 000600576 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2018-03-24 22:08 - 2018-02-13 16:05 - 000451072 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2018-03-24 22:08 - 2018-02-13 16:05 - 000380928 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2018-03-24 22:08 - 2018-02-13 16:05 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2018-03-24 22:08 - 2018-02-13 16:05 - 000237568 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2018-03-24 22:08 - 2016-07-22 16:58 - 000142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2018-03-24 22:08 - 2016-07-22 16:51 - 000123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2018-03-24 22:08 - 2016-07-07 17:08 - 000046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2018-03-23 21:45 - 2018-03-23 21:54 - 871048863 _____ C:\Users\Romča\Downloads\Vražda v Orient expresu(2017) CZ dabing.mkv
2018-03-20 20:56 - 2018-03-20 20:56 - 000005528 _____ C:\Users\Romča\Documents\install.txt
2018-03-20 20:55 - 2018-03-20 20:56 - 000035246 _____ C:\Users\Romča\Documents\cc_20180320_195533.reg
2018-03-13 18:50 - 2018-03-13 18:50 - 000004528 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-04-04 23:20 - 2009-07-14 06:45 - 000014416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-04-04 23:20 - 2009-07-14 06:45 - 000014416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-04-04 23:13 - 2015-12-29 14:28 - 000003970 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{CE90FBD4-E8F8-493C-B08F-1AD4EECD4868}
2018-04-04 23:12 - 2016-11-19 14:33 - 000000000 ____D C:\Users\Romča\AppData\LocalLow\Mozilla
2018-04-04 23:06 - 2017-01-19 23:05 - 000000000 ____D C:\Users\Romča\AppData\Roaming\Skype
2018-04-04 23:03 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-04-03 00:15 - 2015-12-23 22:25 - 000089640 _____ C:\Users\Romča\AppData\Local\GDIPFONTCACHEV1.DAT
2018-04-03 00:15 - 2009-07-14 06:45 - 000354416 _____ C:\Windows\system32\FNTCACHE.DAT
2018-04-03 00:09 - 2015-12-23 22:21 - 000001214 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD VDeck.lnk
2018-04-03 00:09 - 2015-12-23 22:21 - 000000000 ____D C:\Program Files (x86)\VIA
2018-04-03 00:09 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2018-04-03 00:04 - 2015-12-23 22:23 - 000000000 ____D C:\Windows\SysWOW64\Atheros_L1e
2018-04-02 23:52 - 2017-04-17 16:33 - 000000000 ____D C:\Windows\Minidump
2018-04-02 17:38 - 2015-12-29 14:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2018-04-02 17:21 - 2009-07-14 07:08 - 000032606 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2018-04-02 16:49 - 2016-02-14 09:55 - 000000274 _____ C:\Windows\Tasks\WinThruster_DEFAULT.job
2018-04-02 12:52 - 2009-07-14 17:18 - 000668542 _____ C:\Windows\system32\perfh005.dat
2018-04-02 12:52 - 2009-07-14 17:18 - 000141202 _____ C:\Windows\system32\perfc005.dat
2018-04-02 12:52 - 2009-07-14 07:13 - 001583226 _____ C:\Windows\system32\PerfStringBackup.INI
2018-03-30 18:28 - 2018-02-25 14:45 - 000004058 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1519562613
2018-03-28 15:48 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\rescache
2018-03-27 22:04 - 2018-02-13 19:12 - 000000000 ____D C:\Users\Romča\Desktop\ŠVP ZV 1.9.2013 uzprava
2018-03-27 22:00 - 2018-02-17 23:31 - 000000000 ____D C:\Users\Romča\Desktop\švp hotové
2018-03-27 21:52 - 2016-11-19 13:07 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-03-27 21:52 - 2015-12-29 14:40 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-03-26 21:22 - 2016-09-10 09:54 - 000000000 ____D C:\Users\Romča\AppData\Local\ElevatedDiagnostics
2018-03-25 22:33 - 2016-01-01 07:18 - 001557940 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2018-03-25 22:11 - 2015-12-29 15:13 - 000002516 ___SH C:\ProgramData\KGyGaAvL.sys
2018-03-25 17:59 - 2015-12-23 22:19 - 000000000 ____D C:\Intel
2018-03-25 08:56 - 2009-07-14 07:32 - 000000000 ____D C:\Program Files\DVD Maker
2018-03-25 08:56 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\SysWOW64\Setup
2018-03-25 08:56 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\SysWOW64\migwiz
2018-03-25 08:56 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\SysWOW64\Dism
2018-03-25 08:56 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\PolicyDefinitions
2018-03-25 08:55 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\system32\Setup
2018-03-25 08:55 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\system32\migwiz
2018-03-25 08:55 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\system32\Dism
2018-03-25 08:54 - 2015-12-30 12:00 - 000000000 ___SD C:\Windows\system32\CompatTel
2018-03-25 08:54 - 2015-12-30 12:00 - 000000000 ____D C:\Windows\system32\appraiser
2018-03-25 08:54 - 2009-07-14 17:37 - 000000000 ____D C:\Windows\ShellNew
2018-03-25 00:19 - 2015-12-29 14:31 - 000001912 _____ C:\Windows\epplauncher.mif
2018-03-25 00:18 - 2015-12-29 14:30 - 000002117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2018-03-25 00:18 - 2015-12-29 14:30 - 000000000 ____D C:\Program Files\Microsoft Security Client
2018-03-25 00:17 - 2015-12-29 14:30 - 000000000 ____D C:\Program Files (x86)\Microsoft Security Client
2018-03-24 21:02 - 2015-12-29 14:39 - 000002224 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-03-24 21:02 - 2015-12-29 14:39 - 000002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-03-24 19:49 - 2016-01-17 03:02 - 000000000 ____D C:\ProgramData\Oracle
2018-03-24 19:48 - 2016-01-17 03:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2018-03-24 19:48 - 2016-01-17 03:37 - 000000000 ____D C:\Program Files (x86)\Java
2018-03-24 19:47 - 2016-01-17 03:38 - 000097344 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2018-03-24 14:34 - 2015-12-23 22:16 - 000000000 ____D C:\Users\Romča
2018-03-24 14:33 - 2015-12-29 14:59 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-03-24 14:33 - 2015-12-29 14:59 - 000000000 ____D C:\Windows\system32\Macromed
2018-03-24 14:33 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\registration
2018-03-24 14:32 - 2018-02-25 14:41 - 000000000 ____D C:\Program Files (x86)\McAfee
2018-03-24 11:15 - 2009-07-14 17:36 - 000000000 ___RD C:\Users\Public\Recorded TV
2018-03-20 20:49 - 2016-07-19 10:05 - 000000000 ____D C:\Users\Romča\AppData\Local\CrashDumps
2018-03-13 18:50 - 2015-12-29 14:59 - 000804352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-03-13 18:50 - 2015-12-29 14:59 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-03-13 18:50 - 2015-12-29 14:59 - 000004396 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

==================== Files in the root of some directories =======

2018-02-25 14:41 - 2018-02-25 14:41 - 000195236 _____ () C:\Users\Romča\AppData\Roaming\DMGR_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt
2016-03-02 16:27 - 2017-12-19 18:19 - 000005120 _____ () C:\Users\Romča\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2018-04-02 22:58 - 2018-04-02 22:58 - 000000003 _____ () C:\Users\Romča\AppData\Local\user_data.ini
2018-03-25 09:03 - 2018-03-25 09:03 - 000000000 _____ () C:\Users\Romča\AppData\Local\{0AF759A8-0FB5-43FB-8356-57866F4996F2}

Some files in TEMP:
====================
2018-04-04 23:12 - 2018-03-22 19:59 - 001031928 _____ (McAfee, Inc.) C:\Users\Romča\AppData\Local\Temp\0050571522876331mcinst.exe
2018-04-02 13:01 - 2018-04-02 13:01 - 002183680 _____ (Opera Software) C:\Users\Romča\AppData\Local\Temp\Opera_installer_180402110123152.dll
2018-04-02 16:54 - 2018-04-02 16:54 - 002183680 _____ (Opera Software) C:\Users\Romča\AppData\Local\Temp\Opera_installer_180402145409833.dll
2018-04-02 17:15 - 2018-04-02 17:16 - 002183680 _____ (Opera Software) C:\Users\Romča\AppData\Local\Temp\Opera_installer_180402151547598.dll
2018-04-02 17:28 - 2018-04-02 17:28 - 002183680 _____ (Opera Software) C:\Users\Romča\AppData\Local\Temp\Opera_installer_180402152812389.dll
2018-04-02 17:37 - 2018-04-02 17:37 - 002183680 _____ (Opera Software) C:\Users\Romča\AppData\Local\Temp\Opera_installer_180402153726817.dll
2018-04-02 17:57 - 2018-04-02 17:57 - 002183680 _____ (Opera Software) C:\Users\Romča\AppData\Local\Temp\Opera_installer_180402155722031.dll
2018-04-02 18:20 - 2018-04-02 18:20 - 002183680 _____ (Opera Software) C:\Users\Romča\AppData\Local\Temp\Opera_installer_180402162053057.dll
2018-04-02 18:28 - 2018-04-02 18:28 - 002183680 _____ (Opera Software) C:\Users\Romča\AppData\Local\Temp\Opera_installer_180402162841543.dll
2018-04-02 18:41 - 2018-04-02 18:41 - 002183680 _____ (Opera Software) C:\Users\Romča\AppData\Local\Temp\Opera_installer_180402164116929.dll
2018-04-02 19:19 - 2018-04-02 19:19 - 002183680 _____ (Opera Software) C:\Users\Romča\AppData\Local\Temp\Opera_installer_180402171936520.dll
2018-04-02 23:57 - 2018-04-02 23:57 - 002183680 _____ (Opera Software) C:\Users\Romča\AppData\Local\Temp\Opera_installer_180402215753776.dll
2018-04-03 00:20 - 2018-04-03 00:20 - 002183680 _____ (Opera Software) C:\Users\Romča\AppData\Local\Temp\Opera_installer_180402222041889.dll
2018-04-03 22:24 - 2018-04-03 22:24 - 002183680 _____ (Opera Software) C:\Users\Romča\AppData\Local\Temp\Opera_installer_180403202424212.dll
2018-04-03 22:29 - 2018-04-03 22:29 - 002183680 _____ (Opera Software) C:\Users\Romča\AppData\Local\Temp\Opera_installer_180403202926110.dll
2018-04-04 23:09 - 2018-04-04 23:09 - 002183680 _____ (Opera Software) C:\Users\Romča\AppData\Local\Temp\Opera_installer_180404210911866.dll
2018-04-04 23:15 - 2018-04-04 23:15 - 002183680 _____ (Opera Software) C:\Users\Romča\AppData\Local\Temp\Opera_installer_180404211507496.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-04-02 15:16

==================== End of FRST.txt ============================

[Rudy]

Jak je na tom oper. systém s legalitou?

[kabu.kabu]

Měl by být legální, cd je teda stažené z internetu (zdali obsahuje nějaký crack si nejsem vědom), a při instalaci zadán legální klíč. Systém píše že je aktivován a chová se úplně normálně (nelegální má zakázané aktualizace, případně černou obrazovku s nápisem že je nelegální co si pamatuji). Klidně se rád poučím, ale jak píši, nelegální okna nepoužívám (pc jsem skládal a instaloval mamce já).

[Rudy]

OK. Udělejte tedy tento sken:

Stáhněte a spusťte OTL: http://oldtimer.geekstogo.com/OTL.exe . Spusťte, zaškrněte "Pro všechny uživatele", Kontrola na havěť LOP" a Kontrola na hvěť PURITY" a do dolního bílého okna zkopírujte:

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
atapi.sys
autochk.exe
cdrom.sys
explorer.exe
hal.dll
scecli.dll
services.exe
svchost.exe
tcpip.sys
userinit.exe
winlogon.exe
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s

%PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
%PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
%PROGRAMFILES%\Opera\opera.exe /md5
%PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5

%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*loader* /s

a klikněte na >Prohledat<. Dejte oba logy.

[kabu.kabu]

OTL logfile created on: 5.4.2018 22:09:13 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Romča\Downloads
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.18920)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,75 Gb Total Physical Memory | 2,32 Gb Available Physical Memory | 61,79% Memory free
7,49 Gb Paging File | 5,66 Gb Available in Paging File | 75,56% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 111,69 Gb Total Space | 63,48 Gb Free Space | 56,84% Space Free | Partition Type: NTFS
Drive D: | 55,90 Gb Total Space | 19,93 Gb Free Space | 35,65% Space Free | Partition Type: NTFS

Computer Name: ROMČA-PC | User Name: Romča | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2018.04.05 22:07:17 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Romča\Downloads\OTL.exe
PRC - [2018.02.09 19:02:50 | 000,083,984 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2015.07.12 16:05:00 | 000,563,416 | ---- | M] (ZONER software) -- C:\Programy\Photo Studio 17\Program32\ZPSTray.exe
PRC - [2010.02.04 04:05:58 | 000,107,176 | ---- | M] (Lexmark International Inc.) -- C:\Program Files (x86) (x86)\Lexmark 2600 Series\ezprint.exe
PRC - [2010.02.04 04:05:54 | 000,025,256 | ---- | M] () -- C:\Program Files (x86) (x86)\Lexmark 2600 Series\lxdnmsdmon.exe
PRC - [2009.07.20 12:51:52 | 000,935,208 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
PRC - [2007.07.24 12:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) -- c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe


========== Modules (No Company Name) ==========

MOD - [2018.03.25 10:49:42 | 012,437,504 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\4ea97ae445cc4ce417b396037cd49621\System.Windows.Forms.ni.dll
MOD - [2018.03.25 10:48:59 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\223c5897d6951604bb47b2f3e4107a92\System.Drawing.ni.dll
MOD - [2018.03.25 10:47:26 | 005,469,696 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\bb2b638999bfbbcb15980ddc86903dc8\System.Xml.ni.dll
MOD - [2018.03.25 10:47:06 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c0e3fa0d64a27fa665a2e32e0a4ac7ad\System.Configuration.ni.dll
MOD - [2018.03.25 10:46:10 | 008,003,072 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\e45cf03d42149d19daffb3e0a5c61a68\System.ni.dll
MOD - [2018.03.25 10:45:49 | 011,500,544 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9f895c66454577eff9c77442d0c84f71\mscorlib.ni.dll
MOD - [2014.09.09 14:30:14 | 000,603,648 | ---- | M] () -- C:\Programy\Photo Studio 17\Program32\SpiderMonkey.dll
MOD - [2013.07.08 14:43:52 | 000,303,104 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_cs_b77a5c561934e089\mscorlib.resources.dll
MOD - [2010.02.04 04:05:54 | 000,025,256 | ---- | M] () -- C:\Program Files (x86) (x86)\Lexmark 2600 Series\lxdnmsdmon.exe
MOD - [2010.02.03 05:21:48 | 000,036,864 | ---- | M] () -- C:\Program Files (x86) (x86)\Lexmark 2600 Series\app4r.monitor.core.dll
MOD - [2010.02.03 05:21:48 | 000,028,672 | ---- | M] () -- C:\Program Files (x86) (x86)\Lexmark 2600 Series\app4r.monitor.common.dll
MOD - [2010.02.03 05:20:52 | 000,065,536 | ---- | M] () -- C:\Program Files (x86) (x86)\Lexmark 2600 Series\app4r.devmons.mcmdevmon.dll
MOD - [2009.06.26 08:17:08 | 000,012,288 | ---- | M] () -- C:\Program Files (x86) (x86)\Lexmark 2600 Series\app4r.devmons.mcmdevmon.autoplayutil.dll
MOD - [2007.10.12 13:24:46 | 000,364,544 | ---- | M] () -- C:\Program Files (x86) (x86)\Lexmark 2600 Series\iptk.dll


========== Services (SafeList) ==========

SRV:64bit: - [2018.02.10 09:06:41 | 000,116,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2016.11.14 22:14:42 | 000,361,816 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV:64bit: - [2016.11.14 22:14:42 | 000,119,864 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV:64bit: - [2016.08.22 18:19:43 | 001,386,496 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
SRV:64bit: - [2013.05.27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2011.10.19 16:19:30 | 000,395,136 | R--- | M] (cFos Software GmbH) [Auto | Running] -- C:\Program Files\ASRock\XFast LAN\spd.exe -- (cFosSpeedS)
SRV:64bit: - [2011.02.17 16:51:10 | 000,027,760 | ---- | M] (VIA Technologies, Inc.) [Auto | Running] -- C:\Windows\SysNative\ViakaraokeSrv.exe -- (VIAKaraokeService)
SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2018.03.27 21:27:15 | 000,194,512 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2018.03.13 18:50:44 | 000,272,384 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2018.02.09 19:02:50 | 000,083,984 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2017.10.04 02:21:36 | 000,107,624 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2016.09.20 13:54:54 | 000,324,224 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2014.03.21 00:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009.07.20 12:51:52 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2007.07.24 12:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2018.04.02 22:47:36 | 000,015,936 | ---- | M] (FNet Co., Ltd.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\FNETURPX.SYS -- (FNETURPX)
DRV:64bit: - [2017.08.13 23:45:21 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2016.08.25 10:46:12 | 000,135,928 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2015.02.03 20:28:48 | 000,023,048 | ---- | M] (ASRock Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AsrVDrive.sys -- (AsrVDrive)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.07.04 15:19:34 | 001,632,128 | ---- | M] (cFos Software GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\cfosspeed6.sys -- (cFosSpeed)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.02.11 19:16:38 | 010,628,640 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.08.24 11:55:43 | 000,076,912 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
DRV:64bit: - [2010.06.11 14:37:14 | 000,015,368 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\AsrAppCharger.sys -- (AsrAppCharger)
DRV:64bit: - [2009.11.25 22:06:02 | 001,276,928 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2018.04.04 00:36:00 | 000,049,968 | ---- | M] (CPUID) [Kernel | On_Demand | Stopped] -- C:\Windows\Temp\cpuz145\cpuz145_x64.sys -- (cpuz145)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-832870467-146566840-3686179043-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = 71 A0 0F 51 C5 BD D1 01 [binary data]
IE - HKU\S-1-5-21-832870467-146566840-3686179043-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy = Reg Error: Value error.
IE - HKU\S-1-5-21-832870467-146566840-3686179043-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-832870467-146566840-3686179043-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IESR02
IE - HKU\S-1-5-21-832870467-146566840-3686179043-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.countryCode: "CZ"
FF - prefs.js..browser.search.defaultenginename: "Ask Web Search"
FF - prefs.js..browser.search.region: "CZ"
FF - prefs.js..browser.search.reset.status: "silent"
FF - prefs.js..browser.search.selectedEngine: "Ask Web Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.search.widget.inNavBar: true
FF - prefs.js..browser.startup.homepage: "https://www.seznam.cz/"
FF - prefs.js..browser.startup.homepage: "https://www.seznam.cz/"
FF - prefs.js..browser.startup.homepage: "true"
FF - prefs.js..browser.startup.homepage: "https://hp.myway.com/fromdoctopdf/s2314 ... 0wod868Leg"
FF - prefs.js..browser.startup.homepage: "https://hp.myway.com/fromdoctopdf/s2314 ... 0wod868Leg"
FF - prefs.js..browser.startup.homepage: "true"
FF - prefs.js..browser.startup.homepage: "http://hp.myway.com/easypdfcombine/ttab ... 0wodCGEGFw"
FF - prefs.js..extensions.toolbar.mindspark._j5Members_.browser.search.defaultenginename.prev: "Google"
FF - prefs.js..extensions.toolbar.mindspark._j5Members_.browser.search.defaultenginename.savedPrev: "true"
FF - prefs.js..extensions.toolbar.mindspark._j5Members_.browser.search.defaultenginename.tb: "Ask Web Search"
FF - prefs.js..extensions.toolbar.mindspark._j5Members_.browser.search.selectedEngine.prev: "Google"
FF - prefs.js..extensions.toolbar.mindspark._j5Members_.browser.search.selectedEngine.savedPrev: "true"
FF - prefs.js..extensions.toolbar.mindspark._j5Members_.browser.search.selectedEngine.tb: "Ask Web Search"
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_29_0_0_113.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Programy\PDF Xchange\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_113.dll ()
FF - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Programy\PDF Xchange\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.161.2: C:\Program Files (x86)\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.161.2: C:\Program Files (x86)\Java\jre1.8.0_161\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Programy\PDF Xchange\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 59.0.2\extensions\\Components: C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\COMPONENTS
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 59.0.2\extensions\\Plugins: C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\PLUGINS
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 59.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 59.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2015.12.29 14:45:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Romča\AppData\Roaming\Mozilla\Extensions
[2017.11.14 18:29:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Romča\AppData\Roaming\Mozilla\SystemExtensionsDev
[2018.03.30 18:26:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Romča\AppData\Roaming\Mozilla\Firefox\Profiles\zs3pzepm.default\browser-extension-data
[2017.11.25 20:33:33 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Romča\AppData\Roaming\Mozilla\Firefox\Profiles\zs3pzepm.default\browser-extension-data\_65Members_@download.fromdoctopdf.com
[2017.11.25 20:33:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Romča\AppData\Roaming\Mozilla\Firefox\Profiles\zs3pzepm.default\browser-extension-data\_ceMembers_@free.easypdfcombine.com
[2018.04.05 21:31:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Romča\AppData\Roaming\Mozilla\Firefox\Profiles\zs3pzepm.default\browser-extension-data\_j5Members_@ext.ask.com
[2018.04.02 22:38:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Romča\AppData\Roaming\Mozilla\Firefox\Profiles\zs3pzepm.default\browser-extension-data\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}
[2017.10.08 09:04:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Romča\AppData\Roaming\Mozilla\Firefox\Profiles\zs3pzepm.default\browser-extension-data\screenshots@mozilla.org
[2018.04.03 00:21:20 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Romča\AppData\Roaming\Mozilla\Firefox\Profiles\zs3pzepm.default\extensions
[2017.09.10 11:37:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Romča\AppData\Roaming\Mozilla\Firefox\Profiles\zs3pzepm.default\searchextensionbyask_j5
[2018.03.12 18:50:34 | 000,058,237 | ---- | M] () (No name found) -- C:\Users\Romča\AppData\Roaming\Mozilla\Firefox\Profiles\zs3pzepm.default\extensions\_65Members_@download.fromdoctopdf.com.xpi
[2018.03.13 18:53:57 | 000,054,332 | ---- | M] () (No name found) -- C:\Users\Romča\AppData\Roaming\Mozilla\Firefox\Profiles\zs3pzepm.default\extensions\_ceMembers_@free.easypdfcombine.com.xpi
[2018.03.30 18:26:07 | 000,040,372 | ---- | M] () (No name found) -- C:\Users\Romča\AppData\Roaming\Mozilla\Firefox\Profiles\zs3pzepm.default\extensions\_j5Members_@ext.ask.com.xpi
[2018.04.03 23:22:09 | 000,006,212 | ---- | M] () (No name found) -- C:\Users\Romča\AppData\Roaming\Mozilla\Firefox\Profiles\zs3pzepm.default\features\{5c2c2dd1-abf4-4db9-bede-e743b00b2ff0}\tls13-rollout-bug1442042@mozilla.org.xpi
[2018.03.27 21:27:26 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
File not found (No name found) -- C:\PROGRAM FILES (X86)\MCAFEE\SITEADVISOR\E10SSAFFPLG.XPI

========== Chrome ==========

CHR - Extension: No name found = C:\Users\Romča\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.10_0\
CHR - Extension: No name found = C:\Users\Romča\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\
CHR - Extension: No name found = C:\Users\Romča\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\
CHR - Extension: No name found = C:\Users\Romča\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\
CHR - Extension: No name found = C:\Users\Romča\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\5.1.0.636_0\
CHR - Extension: No name found = C:\Users\Romča\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_0\
CHR - Extension: No name found = C:\Users\Romča\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.3_0\
CHR - Extension: No name found = C:\Users\Romča\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\
CHR - Extension: No name found = C:\Users\Romča\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\6518.129.0.1_0\

O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_161\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_161\bin\jp2ssv.dll (Oracle Corporation)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [VIAAUD] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VIAAUD.exe File not found
O4 - HKLM..\Run: [EzPrint] C:\Program Files (x86) (x86)\Lexmark 2600 Series\ezprint.exe (Lexmark International Inc.)
O4 - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
O4 - HKLM..\Run: [lxdnamon] C:\Program Files (x86) (x86)\Lexmark 2600 Series\lxdnamon.exe ()
O4 - HKLM..\Run: [lxdnmon.exe] C:\Program Files (x86) (x86)\Lexmark 2600 Series\lxdnmon.exe ()
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-832870467-146566840-3686179043-1000..\Run: [ASRockIES] File not found
O4 - HKU\S-1-5-21-832870467-146566840-3686179043-1000..\Run: [ASRockOCTuner] File not found
O4 - HKU\S-1-5-21-832870467-146566840-3686179043-1000..\Run: [Zoner Photo Studio Autoupdate] C:\PROGRAMY\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE (ZONER software)
O4 - HKU\.DEFAULT..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 File not found
O4 - HKU\S-1-5-18..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: E&xportovat do aplikace Microsoft Excel - C:\Programy\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - C:\Programy\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programy\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programy\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programy\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.111.128.254 10.111.128.253
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F116DD0F-51F4-4D57-B2F8-0A250879282D}: DhcpNameServer = 10.111.128.254 10.111.128.253
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{2b429f8f-a9e3-11e5-93e3-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{2b429f8f-a9e3-11e5-93e3-806e6f6e6963}\Shell\AutoRun\command - "" = D:\ASRSetup.exe
O33 - MountPoints2\{c63c2c9f-f1e0-11e5-be6a-002522e4a3f2}\Shell - "" = AutoRun
O33 - MountPoints2\{c63c2c9f-f1e0-11e5-be6a-002522e4a3f2}\Shell\AutoRun\command - "" = F:\iStudio.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.tscc - C:\Windows\SysWow64\tsccvid.dll (TechSmith Corporation)
Drivers32: VIDC.VP80 - vp8vfw.dll File not found
Drivers32: vidc.XVID - xvidvfw.dll File not found
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2018.04.04 23:24:33 | 000,000,000 | ---D | C] -- C:\FRST
[2018.04.04 23:14:56 | 002,403,328 | ---- | C] (Farbar) -- C:\Users\Romča\Desktop\FRST64.exe
[2018.04.03 00:06:09 | 001,011,712 | ---- | C] (VIA Technologies, Inc.) -- C:\Windows\SysNative\VIAPropPageExt.dll
[2018.04.03 00:06:09 | 000,601,088 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\VMAPO64.DLL
[2018.04.03 00:06:09 | 000,532,480 | ---- | C] (VIA Technologies, Inc.) -- C:\Windows\SysNative\VIASysFx.dll
[2018.04.03 00:06:09 | 000,524,288 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\VMAPO32.DLL
[2018.04.03 00:06:09 | 000,193,024 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\SysNative\ViaMicArrayAPO.dll
[2018.04.03 00:06:09 | 000,076,288 | ---- | C] (VIA Technologies,Inc.) -- C:\Windows\SysNative\ViaMicArrayPropPageExt.dll
[2018.04.03 00:06:09 | 000,072,704 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\VMWRP64.DLL
[2018.04.03 00:06:09 | 000,057,856 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\VMPPLD64.DLL
[2018.04.03 00:06:09 | 000,053,760 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\VMPPCN64.DLL
[2018.04.03 00:06:08 | 001,276,928 | ---- | C] (VIA Technologies, Inc.) -- C:\Windows\SysNative\drivers\viahduaa.sys
[2018.04.03 00:06:08 | 000,242,176 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\SysNative\Dts2APO.dll
[2018.04.03 00:06:08 | 000,084,992 | ---- | C] (VIA Technologies, Inc.) -- C:\Windows\SysNative\Dts2PropPageExt.dll
[2018.04.03 00:02:25 | 000,015,368 | ---- | C] (Windows (R) Win 7 DDK provider) -- C:\Windows\SysNative\drivers\AsrAppCharger.sys
[2018.04.03 00:01:47 | 000,023,048 | ---- | C] (ASRock Inc.) -- C:\Windows\SysNative\drivers\AsrVDrive.sys
[2018.04.03 00:01:47 | 000,000,000 | ---D | C] -- C:\Program Files\ASRock Utility
[2018.04.02 23:15:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASRock Utility
[2018.04.02 23:15:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ASRock Utility
[2018.04.02 22:58:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XFast LAN
[2018.04.02 22:58:46 | 001,632,128 | ---- | C] (cFos Software GmbH) -- C:\Windows\SysNative\drivers\cfosspeed6.sys
[2018.04.02 22:58:46 | 000,000,000 | ---D | C] -- C:\Users\Romča\AppData\Local\cFos
[2018.04.02 22:58:46 | 000,000,000 | ---D | C] -- C:\Program Files\ASRock
[2018.04.02 22:58:05 | 000,000,000 | ---D | C] -- C:\ProgramData\cFos
[2018.04.02 22:47:36 | 000,015,936 | ---- | C] (FNet Co., Ltd.) -- C:\Windows\SysNative\drivers\FNETURPX.SYS
[2018.04.02 22:47:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\XFastUSB
[2018.04.02 22:47:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XFast USB
[2018.04.02 22:24:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
[2018.04.02 22:24:45 | 000,000,000 | ---D | C] -- C:\Program Files\CPUID
[2018.04.02 15:52:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2018.04.02 15:47:24 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT
[2018.04.02 15:46:47 | 130,364,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MRT-KB890830.exe
[2018.03.30 18:40:14 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
[2018.03.30 18:40:14 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe
[2018.03.30 18:40:14 | 000,215,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2018.03.30 18:40:14 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidpolicyconverter.exe
[2018.03.30 18:40:14 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rpchttp.dll
[2018.03.30 18:40:14 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
[2018.03.30 18:40:14 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setbcdlocale.dll
[2018.03.30 18:40:14 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\auditpol.exe
[2018.03.30 18:40:14 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\appidapi.dll
[2018.03.30 18:40:14 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srclient.dll
[2018.03.30 18:40:14 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
[2018.03.30 18:40:14 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
[2018.03.30 18:40:14 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2018.03.30 18:40:14 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidcertstorecheck.exe
[2018.03.30 18:40:14 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
[2018.03.30 18:40:14 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2018.03.30 18:40:14 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2018.03.30 18:40:14 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll
[2018.03.30 18:40:14 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll
[2018.03.30 18:40:14 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2018.03.30 18:40:13 | 000,880,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\advapi32.dll
[2018.03.30 18:40:13 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
[2018.03.30 18:40:13 | 000,342,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certcli.dll
[2018.03.30 18:40:13 | 000,190,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpchttp.dll
[2018.03.30 18:40:13 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\videoprt.sys
[2018.03.30 18:40:13 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe
[2018.03.30 18:40:13 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\auditpol.exe
[2018.03.30 18:40:13 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidapi.dll
[2018.03.30 18:40:13 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
[2018.03.30 18:40:13 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
[2018.03.30 18:40:12 | 001,461,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2018.03.30 18:40:12 | 001,212,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll
[2018.03.30 18:40:12 | 000,463,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certcli.dll
[2018.03.30 18:40:12 | 000,262,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hal.dll
[2018.03.30 18:40:11 | 005,583,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2018.03.30 18:40:11 | 001,665,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2018.03.30 18:40:11 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2018.03.30 18:40:10 | 004,046,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2018.03.30 18:40:10 | 001,163,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
[2018.03.30 18:40:10 | 000,419,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
[2018.03.30 18:40:10 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
[2018.03.30 18:40:10 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2018.03.30 18:40:10 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2018.03.30 18:40:10 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2018.03.30 18:40:10 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2018.03.30 18:40:10 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2018.03.30 18:40:10 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2018.03.30 18:40:10 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2018.03.30 18:40:10 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2018.03.30 18:40:10 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2018.03.30 18:40:10 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2018.03.30 18:40:10 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2018.03.30 18:40:10 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2018.03.30 18:40:10 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2018.03.30 18:40:10 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2018.03.30 18:40:10 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2018.03.30 18:40:10 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2018.03.30 18:40:10 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2018.03.30 18:40:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2018.03.30 18:40:10 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2018.03.30 18:40:09 | 004,026,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2018.03.30 18:40:09 | 000,708,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi
[2018.03.30 18:40:09 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adtschema.dll
[2018.03.30 18:40:09 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adtschema.dll
[2018.03.30 18:40:09 | 000,634,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.exe
[2018.03.30 18:40:09 | 000,631,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi
[2018.03.30 18:40:09 | 000,312,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
[2018.03.30 18:40:09 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msaudite.dll
[2018.03.30 18:40:09 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msaudite.dll
[2018.03.30 18:40:09 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcrypt.dll
[2018.03.30 18:40:09 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptbase.dll
[2018.03.30 18:40:08 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msobjs.dll
[2018.03.30 18:40:08 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msobjs.dll
[2018.03.25 22:34:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0
[2018.03.24 23:28:37 | 004,296,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_47.dll
[2018.03.24 23:28:37 | 003,550,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_47.dll
[2018.03.24 22:13:05 | 003,229,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2018.03.24 22:13:05 | 002,972,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe
[2018.03.24 22:12:29 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
[2018.03.24 22:12:29 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
[2018.03.24 22:12:28 | 001,386,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diagtrack.dll
[2018.03.24 22:12:28 | 000,969,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
[2018.03.24 22:12:28 | 000,662,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2018.03.24 22:12:28 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
[2018.03.24 22:12:28 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll
[2018.03.24 22:12:28 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UtcResources.dll
[2018.03.24 22:12:28 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
[2018.03.24 22:12:27 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
[2018.03.24 22:12:27 | 000,476,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2018.03.24 22:12:27 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2018.03.24 22:12:26 | 005,782,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2018.03.24 22:12:26 | 001,359,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
[2018.03.24 22:12:26 | 000,814,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
[2018.03.24 22:12:26 | 000,615,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2018.03.24 22:12:26 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2018.03.24 22:12:25 | 000,417,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2018.03.24 22:12:25 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll
[2018.03.24 22:12:24 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2018.03.24 22:12:23 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll
[2018.03.24 22:12:22 | 002,058,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2018.03.24 22:12:22 | 000,807,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2018.03.24 22:12:22 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2018.03.24 22:12:21 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2018.03.24 22:12:20 | 002,134,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2018.03.24 22:12:18 | 014,635,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
[2018.03.24 22:12:18 | 000,192,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
[2018.03.24 22:12:18 | 000,174,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll
[2018.03.24 22:12:18 | 000,098,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
[2018.03.24 22:12:18 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll
[2018.03.24 22:12:18 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe
[2018.03.24 22:12:14 | 011,410,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
[2018.03.24 22:12:14 | 003,165,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
[2018.03.24 22:12:14 | 000,709,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
[2018.03.24 22:12:14 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll
[2018.03.24 22:12:14 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
[2018.03.24 22:12:14 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
[2018.03.24 22:12:11 | 001,311,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msjet40.dll
[2018.03.24 22:12:11 | 000,616,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrepl40.dll
[2018.03.24 22:12:11 | 000,343,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrd3x40.dll
[2018.03.24 22:12:11 | 000,310,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrd2x40.dll
[2018.03.24 22:12:11 | 000,290,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msjtes40.dll
[2018.03.24 22:12:10 | 001,648,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2018.03.24 22:12:08 | 004,121,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf.dll
[2018.03.24 22:12:08 | 003,203,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmcndmgr.dll
[2018.03.24 22:12:08 | 000,995,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ucrtbase.dll
[2018.03.24 22:12:08 | 000,066,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-private-l1-1-0.dll
[2018.03.24 22:12:08 | 000,063,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-private-l1-1-0.dll
[2018.03.24 22:12:08 | 000,017,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-stdio-l1-1-0.dll
[2018.03.24 22:12:08 | 000,017,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-stdio-l1-1-0.dll
[2018.03.24 22:12:08 | 000,016,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-runtime-l1-1-0.dll
[2018.03.24 22:12:08 | 000,016,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-runtime-l1-1-0.dll
[2018.03.24 22:12:08 | 000,013,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-filesystem-l1-1-0.dll
[2018.03.24 22:12:08 | 000,013,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-filesystem-l1-1-0.dll
[2018.03.24 22:12:08 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-conio-l1-1-0.dll
[2018.03.24 22:12:08 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-environment-l1-1-0.dll
[2018.03.24 22:12:08 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-2-0.dll
[2018.03.24 22:12:08 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-1.dll
[2018.03.24 22:12:07 | 000,022,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-math-l1-1-0.dll
[2018.03.24 22:12:07 | 000,020,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-math-l1-1-0.dll
[2018.03.24 22:12:07 | 000,017,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-string-l1-1-0.dll
[2018.03.24 22:12:07 | 000,015,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-convert-l1-1-0.dll
[2018.03.24 22:12:07 | 000,015,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-convert-l1-1-0.dll
[2018.03.24 22:12:07 | 000,014,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-time-l1-1-0.dll
[2018.03.24 22:12:07 | 000,014,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-time-l1-1-0.dll
[2018.03.24 22:12:07 | 000,014,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-2-0.dll
[2018.03.24 22:12:07 | 000,014,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-2-0.dll
[2018.03.24 22:12:07 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-process-l1-1-0.dll
[2018.03.24 22:12:07 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-process-l1-1-0.dll
[2018.03.24 22:12:07 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-heap-l1-1-0.dll
[2018.03.24 22:12:07 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-heap-l1-1-0.dll
[2018.03.24 22:12:07 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-utility-l1-1-0.dll
[2018.03.24 22:12:07 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-utility-l1-1-0.dll
[2018.03.24 22:12:07 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-locale-l1-1-0.dll
[2018.03.24 22:12:07 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-locale-l1-1-0.dll
[2018.03.24 22:12:07 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-environment-l1-1-0.dll
[2018.03.24 22:12:07 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-2-0.dll
[2018.03.24 22:12:07 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-1.dll
[2018.03.24 22:12:07 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l2-1-0.dll
[2018.03.24 22:12:07 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l2-1-0.dll
[2018.03.24 22:12:07 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-timezone-l1-1-0.dll
[2018.03.24 22:12:07 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-timezone-l1-1-0.dll
[2018.03.24 22:12:07 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l2-1-0.dll
[2018.03.24 22:12:07 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l2-1-0.dll
[2018.03.24 22:12:07 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-2-0.dll
[2018.03.24 22:12:07 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-2-0.dll
[2018.03.24 22:12:06 | 003,209,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mf.dll
[2018.03.24 22:12:06 | 002,319,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tquery.dll
[2018.03.24 22:12:06 | 002,222,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssrch.dll
[2018.03.24 22:12:06 | 002,066,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll
[2018.03.24 22:12:06 | 000,922,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ucrtbase.dll
[2018.03.24 22:12:06 | 000,842,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\blackbox.dll
[2018.03.24 22:12:06 | 000,019,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-multibyte-l1-1-0.dll
[2018.03.24 22:12:06 | 000,019,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-multibyte-l1-1-0.dll
[2018.03.24 22:12:06 | 000,017,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-string-l1-1-0.dll
[2018.03.24 22:12:06 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-conio-l1-1-0.dll
[2018.03.24 22:12:05 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2018.03.24 22:12:05 | 000,577,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2018.03.24 22:12:04 | 000,744,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\blackbox.dll
[2018.03.24 22:12:04 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2018.03.24 22:12:04 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2018.03.24 22:12:04 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
[2018.03.24 22:12:04 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
[2018.03.24 22:12:04 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
[2018.03.24 22:12:03 | 002,144,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmc.exe
[2018.03.24 22:12:03 | 001,202,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drmv2clt.dll
[2018.03.24 22:12:02 | 000,988,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drmv2clt.dll
[2018.03.24 22:12:00 | 003,244,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msi.dll
[2018.03.24 22:12:00 | 002,058,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Query.dll
[2018.03.24 22:12:00 | 001,549,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tquery.dll
[2018.03.24 22:12:00 | 001,143,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DXPTaskRingtone.dll
[2018.03.24 22:11:59 | 002,150,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmcndmgr.dll
[2018.03.24 22:11:59 | 001,867,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ExplorerFrame.dll
[2018.03.24 22:11:58 | 001,400,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssrch.dll
[2018.03.24 22:11:57 | 000,973,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DXPTaskRingtone.dll
[2018.03.24 22:11:57 | 000,475,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxbde40.dll
[2018.03.24 22:11:57 | 000,375,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mspbde40.dll
[2018.03.24 22:11:57 | 000,339,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msexcl40.dll
[2018.03.24 22:11:57 | 000,240,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msltus40.dll
[2018.03.24 22:11:56 | 004,834,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xpsrchvw.exe
[2018.03.24 22:11:55 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
[2018.03.24 22:11:55 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2018.03.24 22:11:54 | 001,484,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
[2018.03.24 22:11:54 | 001,401,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmc.exe
[2018.03.24 22:11:54 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2018.03.24 22:11:53 | 001,574,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll
[2018.03.24 22:11:53 | 001,499,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ExplorerFrame.dll
[2018.03.24 22:11:52 | 001,112,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorets.dll
[2018.03.24 22:11:52 | 000,489,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2018.03.24 22:11:52 | 000,461,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scavengeui.dll
[2018.03.24 22:11:52 | 000,315,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2018.03.24 22:11:51 | 000,782,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmsdk.dll
[2018.03.24 22:11:50 | 001,329,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll
[2018.03.24 22:11:50 | 000,971,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll
[2018.03.24 22:11:50 | 000,876,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll
[2018.03.24 22:11:50 | 000,617,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmsdk.dll
[2018.03.24 22:11:50 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSetupUI.dll
[2018.03.24 22:11:49 | 001,068,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msctf.dll
[2018.03.24 22:11:49 | 001,032,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcore.dll
[2018.03.24 22:11:49 | 000,749,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FirewallAPI.dll
[2018.03.24 22:11:48 | 000,769,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samsrv.dll
[2018.03.24 22:11:48 | 000,757,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll
[2018.03.24 22:11:46 | 001,942,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll
[2018.03.24 22:11:46 | 000,827,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpcore.dll
[2018.03.24 22:11:46 | 000,455,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe
[2018.03.24 22:11:45 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\actxprxy.dll
[2018.03.24 22:11:45 | 000,733,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\HelpPane.exe
[2018.03.24 22:11:45 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
[2018.03.24 22:11:44 | 001,806,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll
[2018.03.24 22:11:44 | 000,806,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usp10.dll
[2018.03.24 22:11:44 | 000,499,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AUDIOKSE.dll
[2018.03.24 22:11:44 | 000,497,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll
[2018.03.24 22:11:44 | 000,489,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\evr.dll
[2018.03.24 22:11:44 | 000,486,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wer.dll
[2018.03.24 22:11:44 | 000,383,720 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2018.03.24 22:11:44 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIAnimation.dll
[2018.03.24 22:11:44 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAnimation.dll
[2018.03.24 22:11:43 | 000,878,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IMJP10K.DLL
[2018.03.24 22:11:43 | 000,632,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\evr.dll
[2018.03.24 22:11:43 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskcomp.dll
[2018.03.24 22:11:43 | 000,448,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlansec.dll
[2018.03.24 22:11:43 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2018.03.24 22:11:43 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2018.03.24 22:11:42 | 003,405,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xpsrchvw.exe
[2018.03.24 22:11:42 | 001,363,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wdc.dll
[2018.03.24 22:11:42 | 000,701,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IMJP10K.DLL
[2018.03.24 22:11:42 | 000,519,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll
[2018.03.24 22:11:42 | 000,497,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drmmgrtn.dll
[2018.03.24 22:11:42 | 000,406,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drmmgrtn.dll
[2018.03.24 22:11:42 | 000,382,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wer.dll
[2018.03.24 22:11:42 | 000,347,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSManMigrationPlugin.dll
[2018.03.24 22:11:42 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssph.dll
[2018.03.24 22:11:42 | 000,313,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Wldap32.dll
[2018.03.24 22:11:42 | 000,309,480 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2018.03.24 22:11:42 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncsi.dll
[2018.03.24 22:11:41 | 001,227,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wdc.dll
[2018.03.24 22:11:41 | 001,009,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\user32.dll
[2018.03.24 22:11:41 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nshwfp.dll
[2018.03.24 22:11:41 | 000,475,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sysmon.ocx
[2018.03.24 22:11:41 | 000,405,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll
[2018.03.24 22:11:41 | 000,310,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WsmWmiPl.dll
[2018.03.24 22:11:41 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchProtocolHost.exe
[2018.03.24 22:11:41 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll
[2018.03.24 22:11:40 | 001,068,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptui.dll
[2018.03.24 22:11:40 | 001,001,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gpedit.dll
[2018.03.24 22:11:40 | 000,953,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gpedit.dll
[2018.03.24 22:11:40 | 000,842,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nshwfp.dll
[2018.03.24 22:11:40 | 000,640,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mswstr10.dll
[2018.03.24 22:11:40 | 000,442,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AUDIOKSE.dll
[2018.03.24 22:11:40 | 000,392,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlansec.dll
[2018.03.24 22:11:40 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSManHTTPConfig.exe
[2018.03.24 22:11:40 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ncsi.dll
[2018.03.24 22:11:40 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2018.03.24 22:11:40 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
[2018.03.24 22:11:40 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
[2018.03.24 22:11:40 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2018.03.24 22:11:40 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wu.upgrade.ps.dll
[2018.03.24 22:11:40 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msjint40.dll
[2018.03.24 22:11:39 | 000,866,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mswdat10.dll
[2018.03.24 22:11:39 | 000,491,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssph.dll
[2018.03.24 22:11:39 | 000,371,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll
[2018.03.24 22:11:39 | 000,249,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSManMigrationPlugin.dll
[2018.03.24 22:11:39 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2018.03.24 22:11:39 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msjter40.dll
[2018.03.24 22:11:38 | 002,755,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\themeui.dll
[2018.03.24 22:11:38 | 000,778,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssvp.dll
[2018.03.24 22:11:38 | 000,440,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioEng.dll
[2018.03.24 22:11:38 | 000,379,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msinfo32.exe
[2018.03.24 22:11:38 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSCard.dll
[2018.03.24 22:11:38 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WsmWmiPl.dll
[2018.03.24 22:11:37 | 002,851,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\themeui.dll
[2018.03.24 22:11:37 | 001,005,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptui.dll
[2018.03.24 22:11:37 | 000,433,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfplat.dll
[2018.03.24 22:11:37 | 000,265,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys
[2018.03.24 22:11:37 | 000,199,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSManHTTPConfig.exe
[2018.03.24 22:11:36 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanmsm.dll
[2018.03.24 22:11:36 | 000,404,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wisptis.exe
[2018.03.24 22:11:36 | 000,390,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sysmon.ocx
[2018.03.24 22:11:36 | 000,354,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfplat.dll
[2018.03.24 22:11:36 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msihnd.dll
[2018.03.24 22:11:36 | 000,295,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioSes.dll
[2018.03.24 22:11:36 | 000,281,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iprtrmgr.dll
[2018.03.24 22:11:36 | 000,264,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\P2P.dll
[2018.03.24 22:11:36 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WsmAuto.dll
[2018.03.24 22:11:36 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
[2018.03.24 22:11:36 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\davclnt.dll
[2018.03.24 22:11:35 | 000,324,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FWPUCLNT.DLL
[2018.03.24 22:11:35 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
[2018.03.24 22:11:34 | 000,414,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanmsm.dll
[2018.03.24 22:11:34 | 000,327,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys
[2018.03.24 22:11:34 | 000,303,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msinfo32.exe
[2018.03.24 22:11:34 | 000,217,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\P2P.dll
[2018.03.24 22:11:33 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EncDump.dll
[2018.03.24 22:11:33 | 000,244,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmicsvc.exe
[2018.03.24 22:11:33 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WsmAuto.dll
[2018.03.24 22:11:32 | 001,133,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdosys.dll
[2018.03.24 22:11:32 | 001,027,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IMJP10.IME
[2018.03.24 22:11:32 | 000,377,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys
[2018.03.24 22:11:32 | 000,304,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll
[2018.03.24 22:11:32 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssphtb.dll
[2018.03.24 22:11:32 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iprtrmgr.dll
[2018.03.24 22:11:32 | 000,211,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cic.dll
[2018.03.24 22:11:32 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetpp.dll
[2018.03.24 22:11:32 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pintlgnt.ime
[2018.03.24 22:11:31 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mscms.dll
[2018.03.24 22:11:31 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdedit.exe
[2018.03.24 22:11:31 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PeerDist.dll
[2018.03.24 22:11:31 | 000,114,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe
[2018.03.24 22:11:30 | 012,574,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL
[2018.03.24 22:11:30 | 012,574,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL
[2018.03.24 22:11:29 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PeerDist.dll
[2018.03.24 22:11:28 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cdosys.dll
[2018.03.24 22:11:28 | 000,355,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmcbase.dll
[2018.03.24 22:11:28 | 000,300,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pdh.dll
[2018.03.24 22:11:28 | 000,299,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntprint.dll
[2018.03.24 22:11:28 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shdocvw.dll
[2018.03.24 22:11:28 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tintlgnt.ime
[2018.03.24 22:11:28 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quick.ime
[2018.03.24 22:11:28 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qintlgnt.ime
[2018.03.24 22:11:28 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\phon.ime
[2018.03.24 22:11:28 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\chajei.ime
[2018.03.24 22:11:28 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cintlgnt.ime
[2018.03.24 22:11:28 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll
[2018.03.24 22:11:28 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pintlgnt.ime
[2018.03.24 22:11:28 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tintlgnt.ime
[2018.03.24 22:11:28 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\audiodg.exe
[2018.03.24 22:11:28 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WcnApi.dll
[2018.03.24 22:11:28 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchFilterHost.exe
[2018.03.24 22:11:28 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2018.03.24 22:11:28 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2018.03.24 22:11:28 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll
[2018.03.24 22:11:27 | 001,148,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IMJP10.IME
[2018.03.24 22:11:27 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntprint.dll
[2018.03.24 22:11:27 | 000,250,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icm32.dll
[2018.03.24 22:11:27 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pdh.dll
[2018.03.24 22:11:27 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IcCoinstall.dll
[2018.03.24 22:11:27 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll
[2018.03.24 22:11:27 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptsp.dll
[2018.03.24 22:11:27 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pdhui.dll
[2018.03.24 22:11:26 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imkr80.ime
[2018.03.24 22:11:26 | 000,287,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS
[2018.03.24 22:11:26 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FWPUCLNT.DLL
[2018.03.24 22:11:26 | 000,131,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmcshext.dll
[2018.03.24 22:11:26 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quick.ime
[2018.03.24 22:11:26 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qintlgnt.ime
[2018.03.24 22:11:26 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\phon.ime
[2018.03.24 22:11:26 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\chajei.ime
[2018.03.24 22:11:26 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cintlgnt.ime
[2018.03.24 22:11:26 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adsmsext.dll
[2018.03.24 22:11:26 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fdWCN.dll
[2018.03.24 22:11:26 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adsmsext.dll
[2018.03.24 22:11:26 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msscntrs.dll
[2018.03.24 22:11:25 | 000,484,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StructuredQuery.dll
[2018.03.24 22:11:25 | 000,303,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmcbase.dll
[2018.03.24 22:11:25 | 000,246,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\input.dll
[2018.03.24 22:11:25 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfps.dll
[2018.03.24 22:11:25 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cic.dll
[2018.03.24 22:11:25 | 000,162,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpudd.dll
[2018.03.24 22:11:25 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanhlp.dll
[2018.03.24 22:11:25 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icfupgd.dll
[2018.03.24 22:11:25 | 000,091,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MigAutoPlay.exe
[2018.03.24 22:11:25 | 000,091,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MigAutoPlay.exe
[2018.03.24 22:11:25 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pdhui.dll
[2018.03.24 22:11:24 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssvp.dll
[2018.03.24 22:11:24 | 000,641,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msscp.dll
[2018.03.24 22:11:24 | 000,594,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wvc.dll
[2018.03.24 22:11:24 | 000,457,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imkr80.ime
[2018.03.24 22:11:24 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\input.dll
[2018.03.24 22:11:24 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmcshext.dll
[2018.03.24 22:11:24 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanapi.dll
[2018.03.24 22:11:24 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hlink.dll
[2018.03.24 22:11:24 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samlib.dll
[2018.03.24 22:11:24 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfps.dll
[2018.03.24 22:11:24 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfmjpegdec.dll
[2018.03.24 22:11:24 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WcnApi.dll
[2018.03.24 22:11:24 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanhlp.dll
[2018.03.24 22:11:24 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanapi.dll
[2018.03.24 22:11:24 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfmjpegdec.dll
[2018.03.24 22:11:24 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidclass.sys
[2018.03.24 22:11:24 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wermgr.exe
[2018.03.24 22:11:24 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rundll32.exe
[2018.03.24 22:11:24 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\werdiagcontroller.dll
[2018.03.24 22:11:24 | 000,032,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidparse.sys
[2018.03.24 22:11:24 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\werdiagcontroller.dll
[2018.03.24 22:11:24 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netbtugc.exe
[2018.03.24 22:11:23 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msscp.dll
[2018.03.24 22:11:23 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msihnd.dll
[2018.03.24 22:11:23 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msnetobj.dll
[2018.03.24 22:11:23 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\itircl.dll
[2018.03.24 22:11:23 | 000,138,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rtm.dll
[2018.03.24 22:11:23 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rtm.dll
[2018.03.24 22:11:23 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll
[2018.03.24 22:11:23 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rascfg.dll
[2018.03.24 22:11:23 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rascfg.dll
[2018.03.24 22:11:23 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasdiag.dll
[2018.03.24 22:11:23 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
[2018.03.24 22:11:23 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nlsbres.dll
[2018.03.24 22:11:23 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nlsbres.dll
[2018.03.24 22:11:23 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rasdiag.dll
[2018.03.24 22:11:23 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msscntrs.dll
[2018.03.24 22:11:23 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wermgr.exe
[2018.03.24 22:11:23 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\oleres.dll
[2018.03.24 22:11:23 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleres.dll
[2018.03.24 22:11:23 | 000,007,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbd.sys
[2018.03.24 22:11:22 | 000,444,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wvc.dll
[2018.03.24 22:11:22 | 000,265,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msnetobj.dll
[2018.03.24 22:11:22 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\perfmon.exe
[2018.03.24 22:11:22 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\itircl.dll
[2018.03.24 22:11:22 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\perfmon.exe
[2018.03.24 22:11:22 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PeerDistWSDDiscoProv.dll
[2018.03.24 22:11:22 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssitlb.dll
[2018.03.24 22:11:22 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssitlb.dll
[2018.03.24 22:11:22 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ndptsp.tsp
[2018.03.24 22:11:22 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rrinstaller.exe
[2018.03.24 22:11:22 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmictimeprovider.dll
[2018.03.24 22:11:22 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PeerDistHttpTrans.dll
[2018.03.24 22:11:22 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ndptsp.tsp
[2018.03.24 22:11:22 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rrinstaller.exe
[2018.03.24 22:11:22 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpnpinst.exe
[2018.03.24 22:11:22 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kmddsp.tsp
[2018.03.24 22:11:22 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasmxs.dll
[2018.03.24 22:11:22 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\kmddsp.tsp
[2018.03.24 22:11:22 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pcadm.dll
[2018.03.24 22:11:22 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2018.03.24 22:11:22 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasser.dll
[2018.03.24 22:11:22 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netbtugc.exe
[2018.03.24 22:11:22 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfpmp.exe
[2018.03.24 22:11:22 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfpmp.exe
[2018.03.24 22:11:22 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wfapigp.dll
[2018.03.24 22:11:22 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetppui.dll
[2018.03.24 22:11:22 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wfapigp.dll
[2018.03.24 22:11:21 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll
[2018.03.24 22:11:21 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\resmon.exe
[2018.03.24 22:11:21 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\resmon.exe
[2018.03.24 22:11:21 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssprxy.dll
[2018.03.24 22:11:21 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntprint.exe
[2018.03.24 22:11:21 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntprint.exe
[2018.03.24 22:11:21 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmicres.dll
[2018.03.24 22:11:21 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2018.03.24 22:11:21 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lpk.dll
[2018.03.24 22:11:21 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\traffic.dll
[2018.03.24 22:11:21 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\traffic.dll
[2018.03.24 22:11:21 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rasmxs.dll
[2018.03.24 22:11:21 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winnsi.dll
[2018.03.24 22:11:21 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WcnEapPeerProxy.dll
[2018.03.24 22:11:21 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WcnEapAuthProxy.dll
[2018.03.24 22:11:21 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rasser.dll
[2018.03.24 22:11:21 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icaapi.dll
[2018.03.24 22:11:21 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys
[2018.03.24 22:11:21 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WcnEapPeerProxy.dll
[2018.03.24 22:11:21 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WcnEapAuthProxy.dll
[2018.03.24 22:11:21 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshqos.dll
[2018.03.24 22:11:21 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msshooks.dll
[2018.03.24 22:11:21 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dciman32.dll
[2018.03.24 22:11:21 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsmprovhost.exe
[2018.03.24 22:11:21 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wshqos.dll
[2018.03.24 22:11:21 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshnetbs.dll
[2018.03.24 22:11:21 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nsi.dll
[2018.03.24 22:11:21 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsmplpxy.dll
[2018.03.24 22:11:21 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wsmprovhost.exe
[2018.03.24 22:11:21 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pcawrk.exe
[2018.03.24 22:11:21 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msmmsp.dll
[2018.03.24 22:11:21 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wsmplpxy.dll
[2018.03.24 22:11:21 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwmp.dll
[2018.03.24 22:11:21 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pcalua.exe
[2018.03.24 22:11:21 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msshooks.dll
[2018.03.24 22:11:21 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iprtprio.dll
[2018.03.24 22:11:21 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\plasrv.exe
[2018.03.24 22:11:21 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comcat.dll
[2018.03.24 22:11:21 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwmp.dll
[2018.03.24 22:11:21 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iprtprio.dll
[2018.03.24 22:11:21 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comcat.dll
[2018.03.24 22:11:21 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdxm.ocx
[2018.03.24 22:11:21 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxmasf.dll
[2018.03.24 22:11:20 | 000,409,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msexch40.dll
[2018.03.24 22:11:20 | 000,282,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstext40.dll
[2018.03.24 22:11:20 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\INETRES.dll
[2018.03.24 22:11:20 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WsmRes.dll
[2018.03.24 22:11:20 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WsmRes.dll
[2018.03.24 22:11:20 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msimsg.dll
[2018.03.24 22:11:20 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msimsg.dll
[2018.03.24 22:11:20 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pcaevts.dll
[2018.03.24 22:11:20 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdxm.ocx
[2018.03.24 22:11:20 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxmasf.dll
[2018.03.24 22:11:20 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml6r.dll
[2018.03.24 22:11:20 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml6r.dll
[2018.03.24 22:11:20 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll
[2018.03.24 22:11:20 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll
[2018.03.24 22:11:20 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mferror.dll
[2018.03.24 22:11:20 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mferror.dll
[2018.03.24 22:08:45 | 001,994,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aitstatic.exe
[2018.03.24 22:08:45 | 000,740,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\generaltel.dll
[2018.03.24 22:08:45 | 000,451,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\centel.dll
[2018.03.24 22:08:45 | 000,380,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\invagent.dll
[2018.03.24 22:08:45 | 000,237,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepic.dll
[2018.03.24 22:08:45 | 000,136,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CompatTelRunner.exe
[2018.03.24 22:08:44 | 001,560,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appraiser.dll
[2018.03.24 22:08:44 | 000,655,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
[2018.03.24 22:08:44 | 000,600,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\devinv.dll
[2018.03.24 22:08:44 | 000,262,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\acmigration.dll
[2018.03.24 22:08:40 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe
[2018.03.24 22:08:40 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe
[2018.03.24 19:48:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java

========== Files - Modified Within 30 Days ==========

[2018.04.05 22:11:36 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2018.04.05 21:38:06 | 000,014,416 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2018.04.05 21:38:06 | 000,014,416 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2018.04.05 21:24:29 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2018.04.05 21:24:19 | 3017,605,120 | -HS- | M] () -- C:\hiberfil.sys
[2018.04.04 23:29:38 | 000,009,299 | ---- | M] () -- C:\Users\Romča\Desktop\Addition.rar
[2018.04.04 23:16:29 | 000,000,000 | ---- | M] () -- C:\Users\Romča\Desktop\FRSTLauncher.exe
[2018.04.04 23:15:05 | 002,403,328 | ---- | M] (Farbar) -- C:\Users\Romča\Desktop\FRST64.exe
[2018.04.03 00:15:06 | 000,354,416 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2018.04.02 23:52:02 | 432,801,635 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2018.04.02 22:58:47 | 000,000,003 | ---- | M] () -- C:\Users\Romča\AppData\Local\user_data.ini
[2018.04.02 22:47:36 | 000,015,936 | ---- | M] (FNet Co., Ltd.) -- C:\Windows\SysNative\drivers\FNETURPX.SYS
[2018.04.02 22:24:48 | 000,000,930 | ---- | M] () -- C:\Users\Public\Desktop\CPUID HWMonitor.lnk
[2018.04.02 17:38:22 | 000,001,702 | ---- | M] () -- C:\Users\Romča\Desktop\CrystalDiskInfo.lnk
[2018.04.02 16:49:07 | 000,000,274 | ---- | M] () -- C:\Windows\tasks\WinThruster_DEFAULT.job
[2018.04.02 15:46:51 | 130,364,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MRT-KB890830.exe
[2018.04.02 12:52:30 | 001,583,226 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2018.04.02 12:52:30 | 000,668,542 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2018.04.02 12:52:30 | 000,653,930 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2018.04.02 12:52:30 | 000,141,202 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2018.04.02 12:52:30 | 000,121,802 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2018.03.28 10:31:43 | 005,583,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2018.03.28 10:09:33 | 004,046,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2018.03.28 10:09:33 | 004,026,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2018.03.26 20:27:26 | 000,001,188 | ---- | M] () -- C:\Users\Romča\Documents\cc_20180326_202718.reg
[2018.03.25 22:33:41 | 001,557,940 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2018.03.25 22:11:26 | 000,002,516 | -HS- | M] () -- C:\ProgramData\KGyGaAvL.sys
[2018.03.25 09:03:50 | 000,000,000 | ---- | M] () -- C:\Users\Romča\AppData\Local\{0AF759A8-0FB5-43FB-8356-57866F4996F2}
[2018.03.25 00:19:10 | 000,001,912 | ---- | M] () -- C:\Windows\epplauncher.mif
[2018.03.24 21:02:02 | 000,002,183 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2018.03.24 19:47:28 | 000,097,344 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
[2018.03.20 20:56:07 | 000,035,246 | ---- | M] () -- C:\Users\Romča\Documents\cc_20180320_195533.reg
[2018.03.13 18:50:43 | 000,804,352 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2018.03.13 18:50:43 | 000,144,896 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2018.03.09 05:39:08 | 000,708,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi
[2018.03.09 05:39:06 | 000,262,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\hal.dll
[2018.03.09 05:18:13 | 000,631,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi
[2018.03.09 05:09:10 | 001,665,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2018.03.09 05:06:27 | 000,361,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
[2018.03.09 05:06:27 | 000,243,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2018.03.09 05:06:27 | 000,215,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2018.03.09 05:06:27 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
[2018.03.09 05:06:26 | 000,503,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
[2018.03.09 05:06:26 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
[2018.03.09 05:06:26 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\srclient.dll
[2018.03.09 05:06:26 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
[2018.03.09 05:06:25 | 000,063,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\setbcdlocale.dll
[2018.03.09 05:06:25 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
[2018.03.09 05:06:24 | 001,212,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll
[2018.03.09 05:06:24 | 000,190,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\rpchttp.dll
[2018.03.09 05:06:24 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
[2018.03.09 05:06:23 | 000,312,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
[2018.03.09 05:06:23 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msobjs.dll
[2018.03.09 05:06:22 | 001,461,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2018.03.09 05:06:22 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msaudite.dll
[2018.03.09 05:06:21 | 001,163,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
[2018.03.09 05:06:21 | 000,419,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
[2018.03.09 05:06:19 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
[2018.03.09 05:06:18 | 000,463,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\certcli.dll
[2018.03.09 05:06:18 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\cryptbase.dll
[2018.03.09 05:06:17 | 000,123,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\bcrypt.dll
[2018.03.09 05:06:17 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\appidapi.dll
[2018.03.09 05:06:16 | 000,880,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\advapi32.dll
[2018.03.09 05:06:16 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\adtschema.dll
[2018.03.09 05:06:16 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll
[2018.03.09 05:06:16 | 000,006,144 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2018.03.09 05:06:16 | 000,005,120 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2018.03.09 05:06:16 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2018.03.09 05:06:16 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2018.03.09 05:06:16 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2018.03.09 05:06:16 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2018.03.09 05:06:16 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2018.03.09 05:06:16 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2018.03.09 05:06:16 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2018.03.09 05:06:16 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2018.03.09 05:06:16 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2018.03.09 05:06:16 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2018.03.09 05:06:16 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2018.03.09 05:06:16 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2018.03.09 05:06:16 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2018.03.09 05:06:16 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2018.03.09 05:06:16 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2018.03.09 05:06:16 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2018.03.09 05:06:16 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2018.03.09 05:06:16 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2018.03.09 05:06:16 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2018.03.09 05:06:16 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2018.03.09 05:06:16 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2018.03.09 05:06:16 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2018.03.09 05:06:16 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2018.03.09 05:06:16 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2018.03.09 05:06:16 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2018.03.09 05:06:16 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2018.03.09 04:43:46 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2018.03.09 04:43:44 | 000,141,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\rpchttp.dll
[2018.03.09 04:43:43 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msaudite.dll
[2018.03.09 04:43:43 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msobjs.dll
[2018.03.09 04:43:39 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\adtschema.dll
[2018.03.09 04:43:39 | 000,342,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\certcli.dll
[2018.03.09 04:43:39 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\appidapi.dll
[2018.03.09 04:43:39 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll
[2018.03.09 04:43:39 | 000,005,120 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2018.03.09 04:43:39 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2018.03.09 04:43:39 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2018.03.09 04:43:39 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2018.03.09 04:43:39 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2018.03.09 04:43:39 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2018.03.09 04:43:39 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2018.03.09 04:43:39 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2018.03.09 04:43:39 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2018.03.09 04:43:39 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2018.03.09 04:43:39 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2018.03.09 04:43:39 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2018.03.09 04:43:39 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2018.03.09 04:43:39 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2018.03.09 04:43:39 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2018.03.09 04:43:39 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2018.03.09 04:43:39 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2018.03.09 04:43:39 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2018.03.09 04:43:39 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2018.03.09 04:43:39 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2018.03.09 04:43:39 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2018.03.09 04:43:39 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2018.03.09 04:43:39 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2018.03.09 04:43:39 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2018.03.09 04:38:24 | 000,148,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\appidpolicyconverter.exe
[2018.03.09 04:38:19 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\appidcertstorecheck.exe
[2018.03.09 04:37:37 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\auditpol.exe
[2018.03.09 04:34:38 | 000,338,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
[2018.03.09 04:34:09 | 000,129,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\videoprt.sys
[2018.03.09 04:33:50 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe
[2018.03.09 04:29:45 | 000,112,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe
[2018.03.09 04:26:09 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\auditpol.exe
[2018.03.09 04:22:48 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2018.03.09 04:22:47 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2018.03.09 04:22:47 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2018.03.09 04:22:46 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2018.03.09 04:21:55 | 000,006,144 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2018.03.09 04:21:55 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2018.03.09 04:21:55 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2018.03.09 04:21:55 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll

========== Files Created - No Company Name ==========

[2018.04.05 22:11:36 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2018.04.04 23:29:38 | 000,009,299 | ---- | C] () -- C:\Users\Romča\Desktop\Addition.rar
[2018.04.04 23:16:29 | 000,000,000 | ---- | C] () -- C:\Users\Romča\Desktop\FRSTLauncher.exe
[2018.04.02 22:58:47 | 000,000,003 | ---- | C] () -- C:\Users\Romča\AppData\Local\user_data.ini
[2018.04.02 22:24:47 | 000,000,930 | ---- | C] () -- C:\Users\Public\Desktop\CPUID HWMonitor.lnk
[2018.04.02 17:38:22 | 000,001,702 | ---- | C] () -- C:\Users\Romča\Desktop\CrystalDiskInfo.lnk
[2018.04.02 17:31:20 | 432,801,635 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2018.03.26 20:27:22 | 000,001,188 | ---- | C] () -- C:\Users\Romča\Documents\cc_20180326_202718.reg
[2018.03.25 17:55:19 | 000,280,651 | ---- | C] () -- C:\Windows6.1-KB2719594-x64.msu
[2018.03.25 09:03:50 | 000,000,000 | ---- | C] () -- C:\Users\Romča\AppData\Local\{0AF759A8-0FB5-43FB-8356-57866F4996F2}
[2018.03.24 22:12:11 | 000,518,144 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2018.03.24 22:11:24 | 000,071,680 | ---- | C] () -- C:\Windows\SysNative\PrintBrmUi.exe
[2018.03.20 20:55:39 | 000,035,246 | ---- | C] () -- C:\Users\Romča\Documents\cc_20180320_195533.reg
[2018.01.11 21:02:40 | 000,240,640 | ---- | C] () -- C:\Windows\SysWow64\NMOCOD.DLL
[2016.09.11 11:13:26 | 000,348,160 | ---- | C] () -- C:\Windows\SysWow64\LXDNinst.dll
[2016.09.11 11:13:26 | 000,335,872 | ---- | C] () -- C:\Windows\SysWow64\lxdncomx.dll
[2016.09.11 11:13:25 | 000,364,544 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdninpa.dll
[2016.09.11 11:13:25 | 000,339,968 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdniesc.dll
[2016.09.11 11:13:22 | 000,647,168 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdnpmui.dll
[2016.09.11 11:13:19 | 000,843,776 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdnusb1.dll
[2016.09.11 11:13:18 | 001,101,824 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdnserv.dll
[2016.09.11 11:13:18 | 000,053,248 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdnprox.dll
[2016.09.11 11:13:17 | 000,569,344 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdnlmpm.dll
[2016.09.11 11:13:17 | 000,315,392 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdnih.exe
[2016.09.11 11:13:15 | 000,663,552 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdnhbn3.dll
[2016.09.11 11:13:14 | 000,589,824 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdncoms.exe
[2016.09.11 11:13:12 | 000,376,832 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdncomm.dll
[2016.09.11 11:13:10 | 000,851,968 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdncomc.dll
[2016.09.11 11:13:09 | 000,360,448 | ---- | C] ( ) -- C:\Windows\SysWow64\lxdncfg.exe
[2016.03.02 16:27:07 | 000,005,120 | ---- | C] () -- C:\Users\Romča\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2015.12.29 15:13:27 | 000,002,516 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys
[2015.12.29 15:13:27 | 000,000,008 | RHS- | C] () -- C:\ProgramData\1A6D8BE1F8.sys

========== ZeroAccess Check ==========

[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2018.01.01 04:18:30 | 014,183,936 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2018.01.01 04:00:12 | 012,880,384 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2017.12.19 17:13:58 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Audacity
[2016.11.04 23:02:26 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Canneverbe Limited
[2016.02.14 09:55:41 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\IsolatedStorage
[2016.09.11 12:23:46 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Lexmark Productivity Studio
[2017.10.31 15:48:15 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\LibreOffice
[2018.02.25 14:45:29 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Opera Software
[2015.12.29 15:36:50 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Promethean
[2016.12.03 08:11:26 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\RBotPlus
[2016.09.12 19:53:57 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Seznam Browser
[2015.12.29 16:49:30 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Zoner

========== Purity Check ==========



========== Custom Scans ==========

< >
[2009.07.14 07:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009.07.14 07:08:49 | 000,032,606 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2016.02.14 09:55:20 | 000,000,282 | ---- | C] () -- C:\Windows\Tasks\WinThruster_UPDATES.job
[2016.02.14 09:55:21 | 000,000,274 | ---- | C] () -- C:\Windows\Tasks\WinThruster_DEFAULT.job

< >

< MD5 for: ATAPI.SYS >
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_552ea5111ec825a6\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.18231_none_3b457059383c66e6\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.22414_none_3be7afc0514717fa\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010.11.20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010.11.20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2009.07.14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2009.07.14 03:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe
[2010.11.20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010.11.20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009.07.14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: EXPLORER.EXE >
[2009.07.14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2016.08.29 17:04:37 | 003,229,696 | ---- | M] (Microsoft Corporation) MD5=38AE1B3C38FAEF56FE4907922F0385BA -- C:\Windows\explorer.exe
[2016.08.29 17:04:37 | 003,229,696 | ---- | M] (Microsoft Corporation) MD5=38AE1B3C38FAEF56FE4907922F0385BA -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.23537_none_b0517adca98752cc\explorer.exe
[2010.11.20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2016.08.29 16:55:07 | 002,972,672 | ---- | M] (Microsoft Corporation) MD5=6DDCA324434FFA506CF7DC4E51DB7935 -- C:\Windows\SysWOW64\explorer.exe
[2016.08.29 16:55:07 | 002,972,672 | ---- | M] (Microsoft Corporation) MD5=6DDCA324434FFA506CF7DC4E51DB7935 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.23537_none_baa6252edde814c7\explorer.exe
[2010.11.20 15:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2009.07.14 03:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe

< MD5 for: HAL.DLL >
[2018.01.12 18:44:04 | 000,262,376 | ---- | M] (Microsoft Corporation) MD5=862CD07636A225974281366106BA7EE6 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.24024_none_09cd7536896fdb4a\hal.dll
[2009.07.14 03:47:48 | 000,263,232 | ---- | M] (Microsoft Corporation) MD5=C0A6F6E05E14FBCAEDE7796C8590B7AC -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_071de44b735b3dfc\hal.dll
[2018.03.09 05:39:06 | 000,262,336 | ---- | M] (Microsoft Corporation) MD5=C7B3F42BE42D1B880397A2C1A2FBB450 -- C:\Windows\SysNative\hal.dll
[2018.03.09 05:39:06 | 000,262,336 | ---- | M] (Microsoft Corporation) MD5=C7B3F42BE42D1B880397A2C1A2FBB450 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.24059_none_09b206e48983add0\hal.dll
[2010.11.20 15:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: SCECLI.DLL >
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SERVICES.EXE >
[2009.07.14 03:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe
[2015.04.11 06:31:36 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=43DCEC23557C32F7702C8D5BC729738F -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7601.23033_none_2df8898bfd178df8\services.exe
[2015.04.13 05:28:33 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=71C85477DF9347FE8E7BC55768473FCA -- C:\Windows\SysNative\services.exe
[2015.04.13 05:28:33 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=71C85477DF9347FE8E7BC55768473FCA -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7601.18829_none_2d7fe646e3ec3705\services.exe

< MD5 for: SVCHOST.EXE >
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2014.04.05 04:47:20 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=04ADD18EE5CC9FBEDAEC1DD1CD0CB45E -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18438_none_113260637d1284ef\tcpip.sys
[2012.10.03 19:56:54 | 001,914,248 | ---- | M] (Microsoft Corporation) MD5=37608401DFDB388CAF66917F6B2D6FB0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_110e0fbd7d2e4b88\tcpip.sys
[2013.09.08 04:30:37 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=40AF23633D197905F03AB5628C558C51 -- C:\Windows\SoftwareDistribution\Download\1c012f0794cde3759c755dcc871d67ef\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18254_none_1118bb977d265d27\tcpip.sys
[2016.01.01 08:32:48 | 001,903,552 | ---- | M] (Microsoft Corporation) MD5=40AF23633D197905F03AB5628C558C51 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18254_none_1118bb977d265d27\tcpip.sys
[2014.04.05 04:37:43 | 001,897,408 | ---- | M] (Microsoft Corporation) MD5=4F80944B03112F486212DC20BE166079 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22648_none_11b12f2896383dd1\tcpip.sys
[2010.11.20 15:33:57 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2013.09.07 04:27:48 | 001,896,896 | ---- | M] (Microsoft Corporation) MD5=75F9106B74585D38C8FF6BB5CAD262D7 -- C:\Windows\SoftwareDistribution\Download\1c012f0794cde3759c755dcc871d67ef\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22444_none_11ad2a34963bde27\tcpip.sys
[2016.01.01 08:32:47 | 001,896,896 | ---- | M] (Microsoft Corporation) MD5=75F9106B74585D38C8FF6BB5CAD262D7 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22444_none_11ad2a34963bde27\tcpip.sys
[2010.04.09 13:06:28 | 001,898,376 | ---- | M] (Microsoft Corporation) MD5=7FC877A25796D8ADF539E64703FCA7E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16569_none_0f2ca8c580036f65\tcpip.sys
[2018.01.12 18:44:05 | 001,894,120 | ---- | M] (Microsoft Corporation) MD5=8A54B9C4206FBAB2CEE3525CFD365241 -- C:\Windows\SysNative\drivers\tcpip.sys
[2018.01.12 18:44:05 | 001,894,120 | ---- | M] (Microsoft Corporation) MD5=8A54B9C4206FBAB2CEE3525CFD365241 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.24024_none_11c294e4962be4eb\tcpip.sys
[2009.07.14 03:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys
[2010.04.09 09:56:29 | 001,892,232 | ---- | M] (Microsoft Corporation) MD5=A9C0F786AC1F736891D05CE0A1D29DEB -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20687_none_0f9ea52499331463\tcpip.sys
[2016.07.07 17:36:20 | 001,896,168 | ---- | M] (Microsoft Corporation) MD5=B2875D7ABB82867DC3AA03D991940201 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.23496_none_117904649662b62b\tcpip.sys
[2012.10.03 19:44:29 | 001,902,472 | ---- | M] (Microsoft Corporation) MD5=D5707FC2300AA5B04B7BFE86D40C0133 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_11c2c45a962baed0\tcpip.sys

[kabu.kabu]

< MD5 for: USERINIT.EXE >
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010.11.20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2018.01.01 03:50:14 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=11D6A262B617130F7C16E308C12E0D41 -- C:\Windows\SysNative\winlogon.exe
[2018.01.01 03:50:14 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=11D6A262B617130F7C16E308C12E0D41 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.24000_none_ce79225904aa82ac\winlogon.exe
[2009.07.14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2014.03.04 13:08:14 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=6CE2AE073BD21C542FC2C707CAE944CC -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_ce748d1d04acf24f\winlogon.exe
[2014.03.04 11:43:50 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=88AB9B72B4BF3963A0DE0820B4B0B06C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_cdf8bf35eb848572\winlogon.exe
[2014.07.17 04:07:24 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=8CEBD9D0A0A879CDE9F36F4383B7CAEA -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_cdc47ed1ebad0e4e\winlogon.exe
[2014.07.16 05:23:23 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=98AA0BFEE089C7E5DADB94190D93456C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_ce434d9704d2c730\winlogon.exe

< >

< %systemroot%*.* /U /s >
[5 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[11 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[12 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2016.03.05 15:20:51 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Adobe
[2017.12.19 17:13:58 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Audacity
[2016.11.04 23:02:26 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Canneverbe Limited
[2015.12.29 15:13:28 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Corel
[2017.05.20 12:00:53 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Google
[2015.12.23 22:16:38 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Identities
[2016.02.14 09:55:41 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\IsolatedStorage
[2016.09.11 12:23:46 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Lexmark Productivity Studio
[2017.10.31 15:48:15 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\LibreOffice
[2015.12.29 15:43:27 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Macromedia
[2009.07.14 17:36:38 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Media Center Programs
[2018.04.02 18:25:00 | 000,000,000 | --SD | M] -- C:\Users\Romča\AppData\Roaming\Microsoft
[2017.11.14 18:29:23 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Mozilla
[2016.11.04 23:39:09 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Nero
[2018.02.25 14:45:29 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Opera Software
[2015.12.29 15:36:50 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Promethean
[2016.12.03 08:11:26 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\RBotPlus
[2016.09.12 19:53:57 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Seznam Browser
[2018.04.05 21:26:38 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Skype
[2016.01.17 03:03:34 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Sun
[2015.12.29 15:20:33 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\WinRAR
[2015.12.29 16:49:30 | 000,000,000 | ---D | M] -- C:\Users\Romča\AppData\Roaming\Zoner

< %APPDATA%\*.exe /s >
[2016.12.03 08:11:07 | 001,003,168 | ---- | M] (William Hill Casino Club) -- C:\Users\Romča\AppData\Roaming\RBotPlus\CasinoSetup.exe
[2016.12.03 08:11:27 | 000,947,840 | ---- | M] (Europa Casino) -- C:\Users\Romča\AppData\Roaming\RBotPlus\EuropaSetup.exe
[2016.07.31 17:59:52 | 000,380,534 | ---- | M] () -- C:\Users\Romča\AppData\Roaming\Seznam Browser\uninstall.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job >
[2018.04.02 16:49:07 | 000,000,274 | ---- | M] () -- C:\Windows\Tasks\WinThruster_DEFAULT.job
[2017.02.15 09:55:09 | 000,000,282 | ---- | M] () -- C:\Windows\Tasks\WinThruster_UPDATES.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"Skype" = "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun -- [2016.12.20 20:35:30 | 027,244,512 | R--- | M] (Skype Technologies S.A.)
"Zoner Photo Studio Autoupdate" = "C:\PROGRAMY\PHOTO STUDIO 17\Program32\ZPSTRAY.EXE" -- [2015.07.12 16:05:00 | 000,563,416 | ---- | M] (ZONER software)
"ASRockOCTuner" =
"ASRockIES" =

< >

< %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5 >
[2018.03.27 21:27:17 | 000,441,296 | ---- | M] (Mozilla Corporation) MD5=3E150EAE2932841C5CA934A009B1C775 -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe

< %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5 >
[2018.02.10 21:03:09 | 000,815,264 | ---- | M] (Microsoft Corporation) MD5=17287048122A982DB186C41E5D082023 -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

< %PROGRAMFILES%\Opera\opera.exe /md5 >

< %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5 >
[2018.03.20 07:59:56 | 001,589,592 | ---- | M] (Google Inc.) MD5=5D9A6230D70565DB03A428B44DE524D6 -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

< >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2018.04.05 22:11:36 | 000,000,512 | ---- | M] () MD5=0B1B886EBD813616A3FD26895418073A -- C:\PhysicalMBR.bin

< >

< *crack* /s >
[2005.03.08 12:30:58 | 000,016,068 | ---- | M] () -- \Programy\CorelDRAW Graphics Suite X4\Custom Data\Canvas\cracks2c.pcx
[2005.03.08 12:31:08 | 000,010,560 | ---- | M] () -- \Programy\CorelDRAW Graphics Suite X4\Custom Data\Tiles\CRACKS2M.CPT

< *keygen* /s >

< *loader* /s >
[2006.10.26 14:40:34 | 000,057,344 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\coloader.dll
[2006.10.26 14:40:34 | 000,005,120 | ---- | M] () -- \Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\coloader.tlb
[2018.03.24 19:47:28 | 000,018,752 | ---- | M] () -- \Program Files (x86)\Java\jre1.8.0_161\bin\api-ms-win-core-libraryloader-l1-1-0.dll
[2018.01.23 19:29:35 | 000,019,256 | ---- | M] () -- \Program Files (x86)\Mozilla Firefox\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.20 12:52:26 | 000,000,232 | ---- | M] () -- \ProgramData\Nero\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2016.01.29 10:04:48 | 000,856,064 | ---- | M] () -- \Programy\KMPlayer\ImLoader.dll
[2015.04.20 15:04:56 | 000,148,992 | ---- | M] () -- \Programy\Photo Studio 17\Plugins\Facebook\ZPSFacebookUploader.exe
[2010.04.29 16:12:40 | 000,053,640 | ---- | M] () -- \Programy\Photo Studio 17\Plugins\Facebook\ZPSPluginLoader.exe
[2014.07.11 14:19:32 | 000,446,464 | ---- | M] () -- \Programy\Photo Studio 17\Plugins\Flickr\ZPSFlickrUploader.exe
[2010.04.29 16:12:42 | 000,053,640 | ---- | M] () -- \Programy\Photo Studio 17\Plugins\Flickr\ZPSPluginLoader.exe
[2013.03.05 14:34:20 | 000,192,512 | ---- | M] () -- \Programy\Photo Studio 17\Plugins\Picasa\ZPSPicasaUploader.exe
[2010.04.29 16:12:40 | 000,053,640 | ---- | M] () -- \Programy\Photo Studio 17\Plugins\Picasa\ZPSPluginLoader.exe
[2015.07.12 16:04:48 | 000,104,152 | ---- | M] () -- \Programy\Photo Studio 17\Program32\8bfLoader.exe
[2015.07.12 16:04:54 | 000,044,248 | ---- | M] () -- \Programy\Photo Studio 17\Program32\WICLoader.exe
[2015.07.12 16:19:26 | 000,046,808 | ---- | M] () -- \Programy\Photo Studio 17\Program64\WICLoader.exe
[2015.02.15 14:01:07 | 000,061,528 | ---- | M] () -- \Programy\WinRAR\Ace32Loader.exe
[2009.07.20 12:52:26 | 000,000,232 | ---- | M] () -- \Users\All Users\Nero\OnlineServices\NOSWebConfig\MySpace\uploadError.xml
[2015.12.29 15:23:19 | 000,082,784 | ---- | M] () -- \Windows\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\IALoader.dll
[2009.07.14 14:25:34 | 002,202,645 | R--- | M] () -- \Windows\Setup\SCRIPTS\Windows7Loader.exe
[2018.03.09 10:52:58 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_da-dk_2f0563112328ec8f.manifest
[2018.03.09 10:52:08 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_de-de_2c30f84d24ff4129.manifest
[2018.03.09 10:51:17 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_el-gr_d4c725e01414a9b7.manifest
[2018.03.09 05:36:07 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_en-us_d521ce4613dd4cee.manifest
[2018.03.09 10:49:06 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_es-es_d4ed2b2a14043e93.manifest
[2018.03.09 10:50:46 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_fi-fi_74082fd7091e30bd.manifest
[2018.03.09 10:48:15 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_fr-fr_77a4a12906d654f5.manifest
[2018.03.09 10:49:05 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_hu-hu_bf152170eb362411.manifest
[2018.03.09 10:49:01 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_it-it_61cc976fde083a73.manifest
[2018.03.09 10:54:39 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_ja-jp_03f2167cd1234c4e.manifest
[2018.03.09 10:53:19 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_ko-kr_a75bf331c3941364.manifest
[2018.03.09 10:51:04 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_nb-no_8fee74669bb93f20.manifest
[2018.03.09 10:50:54 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_nl-nl_8e2dbfa49ce548f5.manifest
[2018.03.09 10:47:34 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_pl-pl_d46a1a268207b6a9.manifest
[2018.03.09 10:46:56 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_pt-br_d6be04ca80914a8d.manifest
[2018.03.09 10:49:10 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_pt-pt_d79fd4368000ba69.manifest
[2018.03.09 10:49:45 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_ru-ru_1e42e5fa64e24895.manifest
[2018.03.09 10:47:05 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_sv-se_ba3dd06f5c0b52f0.manifest
[2018.03.09 10:52:05 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_tr-tr_634b1ab64ac754e1.manifest
[2018.03.09 10:57:34 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_zh-cn_34a838b3faff2700.manifest
[2018.03.09 10:53:05 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_zh-hk_33533141fbda9990.manifest
[2018.03.09 10:56:17 | 000,004,431 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_zh-tw_38a47609f8700370.manifest
[2018.03.09 10:50:41 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_cs-cz_9fbe59d667ffa5ec.manifest
[2018.03.09 10:52:58 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_da-dk_3cf839fd5e45a1eb.manifest
[2018.03.09 10:51:58 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_de-de_3a23cf39601bf685.manifest
[2018.03.09 10:51:16 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_el-gr_e2b9fccc4f315f13.manifest
[2018.03.09 05:35:59 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_en-us_e314a5324efa024a.manifest
[2018.03.09 10:48:56 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_es-es_e2e002164f20f3ef.manifest
[2018.03.09 10:50:46 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_fi-fi_81fb06c3443ae619.manifest
[2018.03.09 10:48:06 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_fr-fr_8597781541f30a51.manifest
[2018.03.09 10:48:57 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_hu-hu_cd07f85d2652d96d.manifest
[2018.03.09 10:48:51 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_it-it_6fbf6e5c1924efcf.manifest
[2018.03.09 10:54:29 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_ja-jp_11e4ed690c4001aa.manifest
[2018.03.09 10:53:10 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_ko-kr_b54eca1dfeb0c8c0.manifest
[2018.03.09 10:51:04 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_nb-no_9de14b52d6d5f47c.manifest
[2018.03.09 10:50:45 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_nl-nl_9c209690d801fe51.manifest
[2018.03.09 10:47:26 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_pl-pl_e25cf112bd246c05.manifest
[2018.03.09 10:46:48 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_pt-br_e4b0dbb6bbadffe9.manifest
[2018.03.09 10:49:02 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_pt-pt_e592ab22bb1d6fc5.manifest
[2018.03.09 10:49:37 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_ru-ru_2c35bce69ffefdf1.manifest
[2018.03.09 10:46:57 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_sv-se_c830a75b9728084c.manifest
[2018.03.09 10:51:57 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_tr-tr_713df1a285e40a3d.manifest
[2018.03.09 10:57:26 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_zh-cn_429b0fa0361bdc5c.manifest
[2018.03.09 10:53:05 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_zh-hk_4146082e36f74eec.manifest
[2018.03.09 10:56:08 | 000,004,434 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_zh-tw_46974cf6338cb8cc.manifest
[2018.03.09 06:19:39 | 000,005,793 | ---- | M] () -- \Windows\SoftwareDistribution\Download\f367e23653825dff1b343a0bc9f6c2e8\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7601.24059_none_9e77a3229a70b3ef.manifest
[2018.03.09 04:43:39 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2018.03.09 04:43:39 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2009.07.14 03:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009.07.14 03:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.01 08:24:40 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16816_none_66f39ad995474166\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.01 08:28:41 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17107_none_66ff46fd953e6c5c\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:28:57 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_66dcd6a595588d81\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 07:41:11 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17179_none_66b5981d957562a1\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.01 08:24:40 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.20978_none_673e58b0ae93bb84\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.01 08:28:40 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21306_none_6787e564ae5ceff6\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:26:17 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_67667556ae762a72\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 07:36:06 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21386_none_67316604ae9dcf7e\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.01 08:24:41 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17617_none_68daf829926cc6a9\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.01 08:28:43 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17932_none_68c05c919281774d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:38:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_68a2edab92971725\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.01 08:35:29 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_68d8d569926ebeb2\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 04:12:19 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_68d20a7192733a4d\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.05.25 20:11:40 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18869_none_68a6d625929398fb\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.07.15 05:06:41 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18923_none_68cc15ff92788e54\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.07.15 20:00:47 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18933_none_68c146139280aa45\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.07.23 01:52:00 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18939_none_68c747cf927b424f\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.10.20 02:53:47 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.19045_none_68b84edd92872c26\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.12.30 20:54:58 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.19110_none_68d3bf15927356c7\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.16 20:54:07 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.19131_none_68bf1f879282a800\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.22 08:12:24 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.19135_none_68c320af927f0d5c\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.02.11 20:41:37 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.19160_none_689daf79929be27c\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.01 08:24:41 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21728_none_695ac552ab919bbb\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.01 08:28:42 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22091_none_6907efc6abd0db81\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:35:00 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_6957a248ab947a6d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 07:39:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_69239340abbb38d0\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.01 08:35:29 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_694dd858ab9ba72a\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.04.12 04:28:21 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22653_none_69353b6eabae8d55\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.05.25 20:14:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23072_none_691e7920abbfd697\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.07.15 05:11:33 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23126_none_69588bcaab93ad65\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.07.15 20:05:03 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23136_none_694dbbdeab9bc956\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.07.22 23:52:11 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23142_none_693eeacaaba77feb\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.10.01 19:57:33 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23226_none_69588db0ab93aa8c\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.10.20 03:01:41 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23250_none_69321c30abb16655\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.12.30 21:06:14 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23313_none_69605ea4ab8e3fbd\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.17 02:28:14 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23334_none_694bbf16ab9d90f6\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.22 08:17:41 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23338_none_694fc03eab99f652\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.02.10 20:48:13 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23349_none_6945f09caba12b9a\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.03.16 20:44:07 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23391_none_6907deb0abd0ec97\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.03.18 00:50:10 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23392_none_6908defaabd005ee\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.04.09 08:57:48 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23418_none_696561fcab89bb97\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.09.02 17:30:45 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23539_none_6950c454ab9909f7\api-ms-win-core-libraryloader-l1-1-0.dll
[2018.01.12 18:40:40 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.24024_none_69567288ab959731\api-ms-win-core-libraryloader-l1-1-0.dll
[2018.03.09 05:06:16 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.24059_none_693b0436aba969b7\api-ms-win-core-libraryloader-l1-1-0.dll
[2018.03.30 19:31:50 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_cs-cz_91cb82ea2ce2f090.manifest
[2018.03.30 19:31:50 | 000,032,960 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_cs-cz_91cb82ea2ce2f090_winload.efi.mui_35ee487d
[2018.03.30 19:31:50 | 000,034,496 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_cs-cz_91cb82ea2ce2f090_winload.exe.mui_3bc5b827
[2018.03.30 19:31:50 | 000,029,888 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_cs-cz_91cb82ea2ce2f090_winresume.efi.mui_f412814e
[2018.03.30 19:31:50 | 000,030,400 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_cs-cz_91cb82ea2ce2f090_winresume.exe.mui_ff8b5358
[2018.03.30 19:32:04 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.24059_none_b9afce729c8056c3.manifest
[2018.03.30 19:32:05 | 000,708,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.24059_none_b9afce729c8056c3_winload.efi_75834aa0
[2018.03.30 19:32:06 | 000,634,272 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.24059_none_b9afce729c8056c3_winload.exe_75835076
[2018.03.30 19:32:06 | 000,631,640 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.24059_none_b9afce729c8056c3_winresume.efi_85cd069f
[2018.03.30 19:32:07 | 000,546,656 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.24059_none_b9afce729c8056c3_winresume.exe_85cd1215
[2009.07.14 04:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 04:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2016.01.01 04:42:52 | 000,000,616 | ---- | M] () -- \Windows\winsxs\FileMaps\programdata_microsoft_diagnosis_asimovuploader_0413bca0c3dfdda4.cdf-ms
[2009.07.14 17:15:51 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2015.02.03 06:49:45 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.18741_cs-cz_9144f07b13c42013.manifest
[2015.10.01 21:47:40 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.19021_cs-cz_915a6c4113b415c1.manifest
[2015.01.13 00:17:25 | 000,004,141 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22921_cs-cz_91e42f042cd18522.manifest
[2015.01.16 08:36:46 | 000,004,141 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22923_cs-cz_91e62f982ccfb7d0.manifest
[2015.02.03 07:30:16 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.22948_cs-cz_91d591322cdb6e65.manifest
[2015.05.25 22:04:06 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23072_cs-cz_91aef7d42cf95d70.manifest
[2015.07.15 07:49:58 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23126_cs-cz_91e90a7e2ccd343e.manifest
[2015.07.15 22:47:39 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23136_cs-cz_91de3a922cd5502f.manifest
[2015.07.23 05:58:18 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23142_cs-cz_91cf697e2ce106c4.manifest
[2015.10.01 21:13:38 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23226_cs-cz_91e90c642ccd3165.manifest
[2015.10.20 04:31:26 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23250_cs-cz_91c29ae42ceaed2e.manifest
[2015.12.30 22:44:48 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23313_cs-cz_91f0dd582cc7c696.manifest
[2016.01.17 04:04:48 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23334_cs-cz_91dc3dca2cd717cf.manifest
[2016.01.22 10:02:23 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23338_cs-cz_91e03ef22cd37d2b.manifest
[2016.02.10 22:49:07 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23349_cs-cz_91d66f502cdab273.manifest
[2016.03.16 23:01:39 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23391_cs-cz_91985d642d0a7370.manifest
[2016.03.18 02:10:31 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23392_cs-cz_91995dae2d098cc7.manifest
[2016.04.09 10:12:19 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23418_cs-cz_91f5e0b02cc34270.manifest
[2016.09.02 18:34:19 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.23539_cs-cz_91e143082cd290d0.manifest
[2018.01.12 19:42:17 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24024_cs-cz_91e6f13c2ccf1e0a.manifest
[2018.03.09 10:50:49 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.24059_cs-cz_91cb82ea2ce2f090.manifest
[2009.07.14 04:13:42 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_b71babd98657e6ef.manifest
[2011.02.05 15:09:31 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_b73e23c9863dba66.manifest
[2011.02.05 15:04:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.20897_none_b79c80e49f7bc9f4.manifest
[2010.11.20 07:12:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011.02.05 19:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2015.02.03 05:51:30 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.18741_none_b9293c0383618646.manifest
[2015.10.01 20:31:17 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.19021_none_b93eb7c983517bf4.manifest
[2011.02.05 15:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2015.01.12 05:50:53 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22921_none_b9c87a8c9c6eeb55.manifest
[2015.01.16 08:37:02 | 000,005,511 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22923_none_b9ca7b209c6d1e03.manifest
[2015.02.03 06:17:47 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.22948_none_b9b9dcba9c78d498.manifest
[2015.05.25 20:45:47 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23072_none_b993435c9c96c3a3.manifest
[2015.07.15 05:48:43 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23126_none_b9cd56069c6a9a71.manifest
[2015.07.15 20:39:45 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23136_none_b9c2861a9c72b662.manifest
[2015.07.23 03:47:39 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23142_none_b9b3b5069c7e6cf7.manifest
[2015.10.01 20:34:58 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23226_none_b9cd57ec9c6a9798.manifest
[2015.10.20 03:39:39 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23250_none_b9a6e66c9c885361.manifest
[2015.12.30 21:45:21 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23313_none_b9d528e09c652cc9.manifest
[2016.01.17 02:57:33 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23334_none_b9c089529c747e02.manifest
[2016.01.22 08:51:12 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23338_none_b9c48a7a9c70e35e.manifest
[2016.02.10 21:26:17 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23349_none_b9babad89c7818a6.manifest
[2016.03.16 21:24:30 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23391_none_b97ca8ec9ca7d9a3.manifest
[2016.03.18 01:29:22 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23392_none_b97da9369ca6f2fa.manifest
[2016.04.09 09:28:05 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23418_none_b9da2c389c60a8a3.manifest
[2016.09.02 17:55:50 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.23539_none_b9c58e909c6ff703.manifest
[2018.01.12 19:05:25 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.24024_none_b9cb3cc49c6c843d.manifest
[2018.03.09 06:19:36 | 000,005,744 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.24059_none_b9afce729c8056c3.manifest
[2009.07.14 04:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2018.04.02 20:18:53 | 000,000,616 | ---- | M] () -- \Windows\winsxs\Temp\PendingRenames\ba8d3d0eafcad30150250000a80b1005.programdata_microsoft_diagnosis_asimovuploader_0413bca0c3dfdda4.cdf-ms
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 03:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.01 08:24:40 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16816_none_0ad4ff55dce9d030\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.01 08:28:41 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17107_none_0ae0ab79dce0fb26\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:45:38 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_0abe3b21dcfb1c4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:56:23 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17179_none_0a96fc99dd17f16b\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.01 08:24:40 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.20978_none_0b1fbd2cf6364a4e\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.01 08:28:40 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21306_none_0b6949e0f5ff7ec0\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:48:05 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_0b47d9d2f618b93c\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:44:10 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21386_none_0b12ca80f6405e48\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.01 08:24:42 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17617_none_0cbc5ca5da0f5573\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.01 08:28:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17932_none_0ca1c10dda240617\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:40:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.01 08:35:29 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18015_none_0cba39e5da114d7c\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 03:48:15 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_0cb36eedda15c917\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.05.25 19:55:18 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18869_none_0c883aa1da3627c5\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.07.15 04:47:54 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18923_none_0cad7a7bda1b1d1e\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.07.15 19:44:18 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18933_none_0ca2aa8fda23390f\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.07.22 19:42:39 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18939_none_0ca8ac4bda1dd119\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.10.20 02:35:03 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.19045_none_0c99b359da29baf0\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.12.30 20:37:34 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.19110_none_0cb52391da15e591\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.16 20:34:24 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.19131_none_0ca08403da2536ca\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.22 07:59:07 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.19135_none_0ca4852bda219c26\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.02.11 20:30:35 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.19160_none_0c7f13f5da3e7146\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.01 08:24:41 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21728_none_0d3c29cef3342a85\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.01 08:28:43 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22091_none_0ce95442f3736a4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:29:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.11.30 06:46:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22177_none_0d04f7bcf35dc79a\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.01 08:35:29 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22436_none_0d2f3cd4f33e35f4\api-ms-win-core-libraryloader-l1-1-0.dll
[2014.04.12 04:03:37 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22653_none_0d169feaf3511c1f\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.05.25 20:00:35 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23072_none_0cffdd9cf3626561\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.07.15 04:51:41 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23126_none_0d39f046f3363c2f\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.07.15 19:40:57 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23136_none_0d2f205af33e5820\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.07.23 01:54:11 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23142_none_0d204f46f34a0eb5\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.09.28 22:07:49 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23223_none_0d36f14ef338ed51\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.10.20 02:37:58 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23250_none_0d1380acf353f51f\api-ms-win-core-libraryloader-l1-1-0.dll
[2015.12.30 20:48:05 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23313_none_0d41c320f330ce87\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.17 02:09:50 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23334_none_0d2d2392f3401fc0\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.01.22 07:58:11 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23338_none_0d3124baf33c851c\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.02.10 20:24:05 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23349_none_0d275518f343ba64\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.03.16 20:23:40 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23391_none_0ce9432cf3737b61\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.03.18 00:24:26 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23392_none_0cea4376f37294b8\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.04.09 08:54:42 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23418_none_0d46c678f32c4a61\api-ms-win-core-libraryloader-l1-1-0.dll
[2016.09.02 17:16:23 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.23539_none_0d3228d0f33b98c1\api-ms-win-core-libraryloader-l1-1-0.dll
[2018.01.12 18:26:10 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.24024_none_0d37d704f33825fb\api-ms-win-core-libraryloader-l1-1-0.dll
[2018.03.09 04:43:39 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.24059_none_0d1c68b2f34bf881\api-ms-win-core-libraryloader-l1-1-0.dll

< End of report >