Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Prestanú fungovať prehliadače až po čase kompletne zamrzne PC
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Prestanú fungovať prehliadače až po čase kompletne zamrzne PC
Dobrý deň prajem.
Mám dlhodobejšie problém s PC. Po každom štarte mi postupne prestane fungovať každý prehliadač (najprv Brave, Chrome, Firefox) až na koniec všetko zamrzne a pomôže iba reštart. Chvíľku potom funguje a opäť sa to opakuje.
Pokúšal som sa sa vyčistiť PC všetkým možným (Malwarebytes, DrWeb a podobne). Pri každom čistení mi nájde nejakú háveď ktorú aj napriek tomu že ju odstránim, problém pretrváva.
Ďakujem za prípadnú pomoc (už som zúfalý)
Prikladám log z FRST, Addition je ako príloha v zip formáte
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 08-07-2020 01
Ran by GIS (administrator) on GIS-MAJDAK (13-07-2020 07:32:26)
Running from C:\Users\G IS\Desktop
Loaded Profiles: GIS
Platform: Windows 10 Pro Version 1909 18363.900 (X64) Language: Slovenčina (Slovensko)
Default browser: "C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe" -- "%1"
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(AMD) [File not signed] C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(AMD) [File not signed] C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(Brave Software, Inc. -> Brave Software, Inc.) C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\1.3.295.1\DropboxCrashHandler.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Environmental Systems Research Institute Inc. -> Flexera Software LLC) C:\Program Files (x86)\ArcGIS\License10.4\bin\lmgrd.exe <2>
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
(ESRI) [File not signed] C:\Program Files (x86)\ArcGIS\License10.4\bin\ARCGIS.exe
(F.lux Software LLC -> f.lux Software LLC) C:\Users\G IS\AppData\Local\FluxSoftware\Flux\flux.exe
(FabulaTech -> ) C:\Program Files (x86)\VMware\ScannerRedirection\ftscanmgrhv.exe
(FabulaTech -> ) C:\Program Files\Common Files\VMware\DeviceRedirectionCommon\ftnlsv.exe
(FabulaTech -> VMware) C:\Program Files (x86)\Common Files\VMware\SerialPortRedirection\Client\vmwsprrdpwks.exe
(Flexera Software LLC -> Flexera Software LLC) C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
(FLIR Systems AB -> FLIR) C:\Program Files\FLIR Systems\FLIR Device Drivers\FLIR T3Srv\sysx64\T3Srv.exe
(FLIR Systems Inc.) [File not signed] C:\Program Files (x86)\FLIR Systems\ATS-US\ProtectDeviceSvc\ProtectDeviceSvc.exe
(Google Inc -> Google Inc.) C:\Users\G IS\AppData\Local\Google\Update\GoogleUpdate.exe
(Google LLC -> Google LLC) C:\Users\G IS\AppData\Local\Google\Chrome\Application\chrome.exe <2>
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(iolo technologies, LLC -> iolo technologies, LLC) [File not signed] D:\Program Files\SystemMechanic\Phoenix360\System Mechanic\ioloGovernor64.exe
(iolo technologies, LLC -> iolo technologies, LLC) D:\Program Files\SystemMechanic\Phoenix360\System Mechanic\SystemMechanic.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Users\G IS\AppData\Local\Microsoft\OneDrive\OneDrive.exe <2>
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe <2>
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2005.1191.0_x64__8wekyb3d8bbwe\LocalBridge.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(Nero AG -> Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Nitro PDF Software -> Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(PcWinTech.com) [File not signed] D:\Program Files\CleanMem\Mini_Monitor.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(SafeNet, Inc. -> SafeNet Inc.) C:\Windows\System32\hasplms.exe
(SafeNet, Inc. -> SafeNet, Inc) C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
(SafeNet, Inc. -> SafeNet, Inc.) C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
(SafeNet, Inc. -> SafeNet, Inc.) C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe
(Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c\Skype\Skype.exe <5>
(TeamViewer GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Horizon View Client\ClientService\horizon_client_service.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Horizon View Client\vmware-view-usbd.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2918656 2011-01-12] (ESET, spol. s r.o. -> ESET)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11474024 2010-10-05] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [7657984 2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [646160 2019-12-11] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Opera Browser Assistant] => D:\Program Files\Opera\assistant\browser_assistant.exe [3105304 2020-07-08] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-2114313254-837077460-3471302094-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2011-07-28] (AMD) [File not signed]
HKU\S-1-5-21-2114313254-837077460-3471302094-1000\...\Run: [Google Update] => C:\Users\G IS\AppData\Local\Google\Update\1.3.35.452\GoogleUpdateCore.exe [217544 2020-03-25] (Google LLC -> Google LLC)
HKU\S-1-5-21-2114313254-837077460-3471302094-1000\...\Run: [f.lux] => C:\Users\G IS\AppData\Local\FluxSoftware\Flux\flux.exe [1469968 2020-06-17] (F.lux Software LLC -> f.lux Software LLC)
HKU\S-1-5-21-2114313254-837077460-3471302094-1000\...\Run: [Chromium] => "c:\users\g is\appdata\local\chromium\application\chrome.exe" --auto-launch-at-startup --profile-directory="Default" --restore-last-session
HKU\S-1-5-21-2114313254-837077460-3471302094-1000\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe [2098344 2020-06-23] (Brave Software, Inc. -> Brave Software, Inc.)
HKU\S-1-5-21-2114313254-837077460-3471302094-1000\...\MountPoints2: {d6da9a06-f300-11e8-9336-38607712e7c2} - "L:\HiSuiteDownLoader.exe"
HKLM\...\Windows x64\Print Processors\hpzppWN7: C:\Windows\System32\spool\prtprocs\x64\hpzppWN7.dll [101376 2009-07-14] (Microsoft Windows -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\system32\AdobePDF.dll [51032 2008-04-07] (Adobe Systems, Incorporated -> Adobe Systems Inc)
HKLM\...\Print\Monitors\CPCA Language Monitor3: C:\Windows\system32\CNAS0MMK.DLL [66048 2007-04-18] (Microsoft Windows Hardware Compatibility Publisher -> Canon Inc.)
HKLM\...\Print\Monitors\Nitro PDF Port Monitor: C:\Windows\system32\nitrolocalmon2.dll [29712 2013-03-26] (Nitro PDF Software -> Nitro PDF Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\83.1.10.97\Installer\chrmstp.exe [2020-07-02] (Brave Software, Inc.) [File not signed]
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
Startup: C:\Users\G IS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Obrazovková spinka a spúšťač programu OneNote 2010.lnk [2019-10-24]
ShortcutTarget: Obrazovková spinka a spúšťač programu OneNote 2010.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
GroupPolicy: Restriction ? <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0326F4E2-CE4B-4A12-85EF-EC32627F9E7C} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {05CC4195-A46E-4C4E-958B-99A1972A644E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-09-02] (Google Inc -> Google Inc.)
Task: {1614F5AB-43AE-4276-A28F-123E54D33D17} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {17AF1860-1278-458F-8A57-0A4E9145AA65} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {18822412-F710-4BE2-82A2-6414373B29ED} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [159368 2019-05-16] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {1C31A47B-D799-49C6-9B69-ECB615E304BB} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43da-BFD7-FBEEA2180A1E}
Task: {30AAE43F-CD15-4C7F-A8FC-3BD4E5287ED6} - System32\Tasks\Opera scheduled Autoupdate 1485430046 => D:\Program Files\Opera\launcher.exe [1517592 2020-06-18] (Opera Software AS -> Opera Software)
Task: {339DBE9B-73D3-435C-BAC2-89A16318A0BF} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-05-03] (Dropbox, Inc -> Dropbox, Inc.)
Task: {351FB684-070E-4241-8336-66553274BC4D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-10] (Adobe Inc. -> Adobe)
Task: {3BC86805-559A-49C6-B125-C94877B6918B} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {414E17FA-0AC7-40CF-87E0-77E4CFAB3E00} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {41BC3491-4E66-4D89-8194-EA1FCD1FFCB7} - System32\Tasks\AdwCleaner_onReboot => C:\Users\G IS\Desktop\adwcleaner_8.0.6.exe [8420016 2020-07-08] (Malwarebytes Inc -> Malwarebytes)
Task: {43034876-C041-4A91-AD91-5409D4C82DDA} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-02-05] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {43A102FA-6385-4D4A-BEF7-A0BC3C671895} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {47A69DE1-ECBF-4337-AF36-2CC3999307DF} - System32\Tasks\ioloActiveCare => D:\Program Files\SystemMechanic\Phoenix360\System Mechanic\systemmechanic.exe [414968 2017-12-08] (iolo technologies, LLC -> iolo technologies, LLC)
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47c2-B62A-B7C4CED925CB}
Task: {48E35FC2-816F-4AE4-B5F8-D6763D1D8A59} - \Microsoft\Windows\Setup\EOSNotify -> No File <==== ATTENTION
Task: {51459EF7-685E-4486-A2A8-63CE02FC0964} - System32\Tasks\ioloSystemShield => D:\Program Files\SystemMechanic\Phoenix360\System Mechanic\ioloSSTray.exe [344304 2017-12-08] (iolo technologies, LLC -> iolo technologies, LLC)
Task: {5A6AF334-34D2-4E8A-85C8-DF5071ED9E80} - \Microsoft\Windows\Setup\EOSNotify2 -> No File <==== ATTENTION
Task: {5B259235-B556-4FD8-A8E8-1EAA28050E35} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2114313254-837077460-3471302094-1000Core => C:\Users\G IS\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-09-02] (Google Inc -> Google Inc.)
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {5E7F634F-7441-4648-A096-7C00D56B0A23} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {5FCD0B9D-EE69-47C8-9868-AB682EA59140} - System32\Tasks\{AEED7A02-9371-438A-B9E6-E855EBF771EF} => msiexec.exe /package "D:\MAJDAK\software\Polyworks\imview_12_0_64bit.msi"
Task: {621DC3FF-A7A6-4A3F-AD16-F2D62B99766E} - System32\Tasks\Microsoft\Windows\End Of Support\Notify2 => C:\WINDOWS\system32\sipnotify.exe
Task: {634522AF-CC1B-48EE-AD75-C440EF02EED5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2114313254-837077460-3471302094-1000UA => C:\Users\G IS\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-09-02] (Google Inc -> Google Inc.)
Task: {66272A98-4E2A-4FF9-83CE-4710FBC38518} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [14554696 2018-11-06] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {68354EA7-6FC0-479D-8289-79953A09FA6F} - System32\Tasks\ioloTUDsDownloader => C:\Program Files (x86)\Common Files\Phoenix360\ActiveCore\activesync.exe [194800 2017-12-07] (iolo technologies, LLC -> iolo technologies, LLC)
Task: {6A82CE70-005F-44CD-BB8E-0462103D0145} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {6AF2F5F5-966B-4486-9B1E-49A44F2904A5} - System32\Tasks\Opera GX scheduled Autoupdate 1582882749 => C:\Users\G IS\AppData\Local\Programs\Opera GX\launcher.exe [1459224 2020-06-26] (Opera Software AS -> Opera Software)
Task: {6EB00798-0B42-43A2-B7EB-E52D7253D53E} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {6FE989F9-680B-4686-82E9-C99AB8D0AD74} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {73312590-288F-4962-B4E0-251E07829693} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {79C72B3E-BA91-42CC-8B1A-4340DAF2A9A8} - System32\Tasks\iolo Process Governor => D:\Program Files\SystemMechanic\Phoenix360\System Mechanic\iologovernor64.exe [713648 2017-12-07] (iolo technologies, LLC -> iolo technologies, LLC) [File not signed]
Task: {7CD67172-0F12-4E17-B9CD-C837D0DC73A2} - System32\Tasks\Clean System Memory => C:\Windows\syswow64\CleanMem.exe [61440 2014-08-20] (PcWinTech.com) [File not signed]
Task: {7DB058C5-0F17-41D6-8701-0761351F195A} - System32\Tasks\{11408E3E-729C-4B9A-AE29-CFBB0C64477B} => msiexec.exe /package "D:\MAJDAK\software\Polyworks\polyworks_12_0_64bit.msi"
Task: {7F3F7FD0-B635-4581-BB12-2388CE17CD50} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [159368 2019-05-16] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {8006050C-DCF6-4ADF-9C43-43EA0C4CF204} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {91DFA0FF-F488-48F2-A11D-83C37AB2E2A4} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984 2011-06-01] (Apple Inc. -> Apple Inc.)
Task: {93047855-7BC5-428C-97E4-C05E7AB0B592} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-05-03] (Dropbox, Inc -> Dropbox, Inc.)
Task: {9DB0768F-7925-4A0A-8CAE-3624A3EB07E1} - System32\Tasks\{97730905-02B7-468F-8986-366EA02EBB56} => C:\Windows\system32\pcalua.exe -a C:\PROGRA~2\ESRI\License\arcgis9x\UNWISE32.EXE -c C:\PROGRA~2\ESRI\License\arcgis9x\ARCGIS~1.LOG "License Manager"
Task: {9EE2BA06-EE4D-4921-ABF2-11B185AC111C} - System32\Tasks\Update Manager => C:\Users\G IS\AppData\Roaming\Shadow.Tactics.Blades.of.the.Shogun.v1.1.2-ALI213\Upgrade.exe
Task: {A18B9E70-A683-4DC6-AEBA-ECA9DAC7790B} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {A96CF719-E5CE-4411-904A-E66BB02AF310} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {AA1CC6FC-FC18-4A3E-BF9D-9EEE1449CEDE} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {AAF38353-5F46-4F70-9A39-71BF4950C294} - System32\Tasks\{DA685FD9-FF48-4A8B-9A61-1796A9BD773D} => msiexec.exe /package "D:\MAJDAK\software\Polyworks\polyworks_12_0_64bit.msi"
Task: {ABEF7B1E-B072-451D-B23B-6DCC682D3C38} - System32\Tasks\CleanMem Mini Monitor => D:\Program Files\CleanMem\mini_monitor.exe [1421312 2014-08-20] (PcWinTech.com) [File not signed]
Task: {AC8653AF-8458-41BE-876F-0C8CB8E5E400} - System32\Tasks\Opera scheduled assistant Autoupdate 1582722813 => D:\Program Files\Opera\launcher.exe [1517592 2020-06-18] (Opera Software AS -> Opera Software)
Task: {AD2CDF0F-6C7A-4794-AAAD-C3BF6423199F} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4f47-879B-29A80C355D61}
Task: {AFF68475-218E-4B92-B6B3-C9E2102F46ED} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40b4-8963-D3C761B18371}
Task: {B3C36C94-EC0F-478E-9DBF-CF7F4B59F8B7} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {B9321198-96E4-4B59-8C78-04608ECF387D} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {BD45FB5A-9C4F-43A8-9042-639B0E838525} - System32\Tasks\{0363A9C4-2C35-4488-AC14-28A43E71CBA8} => C:\Windows\system32\pcalua.exe -a "C:\Users\G IS\Desktop\SAM131.exe" -d "C:\Users\G IS\Desktop"
Task: {BDF29E21-19E5-496B-8BDE-B79032E4B401} - System32\Tasks\{ACCEEF11-9072-43AA-9F52-2B162E7EF92A} => C:\Users\G IS\Desktop\Kywrdcrk\KYWRDCRK.EXE
Task: {C28DC2F8-A24B-4AE2-A891-89A63C13958F} - System32\Tasks\ActiveMessenger-SystemMechanic => C:\Program Files (x86)\Common Files\Phoenix360\ActiveCore\ActiveMessenger.exe [323328 2017-12-07] (iolo technologies, LLC -> iolo technologies, LLC)
Task: {C3D216EC-6867-4642-909B-A6E27B848FB0} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C9358191-49A4-487F-B403-B3117AD2B985} - System32\Tasks\ioloAVDefsDownloader => D:\Program Files\SystemMechanic\Phoenix360\System Mechanic\SSDefs.exe [134888 2017-12-08] (iolo technologies, LLC -> iolo technologies, LLC)
Task: {CBB1F5F1-4824-4A3B-ABF8-9A1C9B5F39D9} - System32\Tasks\ActiveSync-SystemMechanic => C:\Program Files (x86)\Common Files\Phoenix360\ActiveCore\activesync.exe [194800 2017-12-07] (iolo technologies, LLC -> iolo technologies, LLC)
Task: {CBCBCB7C-F6B6-43B3-9EF8-28478429F342} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-09-02] (Google Inc -> Google Inc.)
Task: {CFC3977B-5525-43BD-831C-B1C8816F806C} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D62ABD03-29EF-4099-862D-4E71D3760110} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {D6F5790E-9B01-4E1A-83C9-B7ACE892282E} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1660520 2020-02-27] (Avast Software s.r.o. -> Avast Software)
Task: {DF460692-E613-45A9-A578-6048FC543FFB} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {DF5CEAFE-6A55-410D-A8C7-88DD45EFC193} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E3ECC600-7CE5-43BF-98ED-D40862795BF1} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDfE067B1}
Task: {E6CA272E-8221-4B0D-8B54-11B2E98012C0} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F1EE4B50-6BA0-45F1-A50C-1D7895CDFCD6} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_387_Plugin.exe [1459256 2020-06-10] (Adobe Inc. -> Adobe)
Task: {F81A9AAA-8C82-415C-A0B7-AF314FEF433F} - System32\Tasks\Microsoft\Windows\End Of Support\Notify1 => C:\WINDOWS\system32\sipnotify.exe
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\..\Interfaces\{56D540B9-0A75-4E53-9480-492BDFEED373}: [NameServer] 147.213.240.2
Tcpip\..\Interfaces\{C070050B-5421-4F04-A3CD-C8AD8D4A354D}: [DhcpNameServer] 192.168.42.129
Internet Explorer:
==================
HKU\S-1-5-21-2114313254-837077460-3471302094-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/?clid=12454
SearchScopes: HKU\S-1-5-21-2114313254-837077460-3471302094-1000 -> {32382042-EFEC-4222-9AA6-C0641F39DB04} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_12454
SearchScopes: HKU\S-1-5-21-2114313254-837077460-3471302094-1000 -> {4F89015D-070E-41F3-8FDE-9251F8FFD66D} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-2114313254-837077460-3471302094-1000 -> {74EBA9ED-CBEC-4A68-A0ED-F1A64DB0C97E} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-2114313254-837077460-3471302094-1000 -> {7A163367-506A-4369-93CB-DAD90E605582} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_12454
SearchScopes: HKU\S-1-5-21-2114313254-837077460-3471302094-1000 -> {866A7BC3-C143-439E-BDDD-88C35329340A} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-2114313254-837077460-3471302094-1000 -> {A8A3ACBA-5F19-43DB-9BDD-64375500F65C} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_12454
SearchScopes: HKU\S-1-5-21-2114313254-837077460-3471302094-1000 -> {CC95E300-C32C-46E8-A912-4E0B0AEDF360} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-2114313254-837077460-3471302094-1000 -> {E0256928-A247-4D5F-B03E-4A51EB9B920C} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-2114313254-837077460-3471302094-1000 -> {F14A5F3D-209D-48B0-A677-32D085A183D2} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_12454
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_241\bin\ssv.dll [2020-03-13] (Oracle America, Inc. -> Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_241\bin\jp2ssv.dll [2020-03-13] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2018-03-30] (Evernote Corporation -> Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-2114313254-837077460-3471302094-1000 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
DPF: HKLM-x32 {62789780-B744-11D0-986B-00609731A21D} hxxp://195.28.70.134/kapor2/lib/mgaxctrl.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2016-07-22] (Skype Software Sarl -> Skype Technologies)
FireFox:
========
FF DefaultProfile: oaac2o18.default
FF ProfilePath: C:\Users\G IS\AppData\Roaming\Mozilla\Firefox\Profiles\oaac2o18.default [2020-07-08]
FF NewTabOverride: Mozilla\Firefox\Profiles\oaac2o18.default -> Disabled: {ea614400-e918-4741-9a97-7a972ff7c30b}
FF Extension: (Custom Search Engine) - C:\Users\G IS\AppData\Roaming\Mozilla\Firefox\Profiles\oaac2o18.default\Extensions\custom-search-engine@rsins.addons.mozilla.org.xpi [2018-12-07]
FF Extension: (Slovak (SK) Language Pack) - C:\Users\G IS\AppData\Roaming\Mozilla\Firefox\Profiles\oaac2o18.default\Extensions\langpack-sk@firefox.mozilla.org.xpi [2020-07-07]
FF Extension: (Seznam doplněk - Esko) - C:\Users\G IS\AppData\Roaming\Mozilla\Firefox\Profiles\oaac2o18.default\Extensions\sko-extension@firma.seznam.cz.xpi [2020-07-07]
FF Extension: (Scribd PDF Downloader) - C:\Users\G IS\AppData\Roaming\Mozilla\Firefox\Profiles\oaac2o18.default\Extensions\{c2921baa-9930-4d73-a203-f69db858f139}.xpi [2016-04-29] [Legacy]
FF Extension: (Greasemonkey) - C:\Users\G IS\AppData\Roaming\Mozilla\Firefox\Profiles\oaac2o18.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2018-01-15]
FF Extension: (Seznam doplněk - Email) - C:\Users\G IS\AppData\Roaming\Mozilla\Firefox\Profiles\oaac2o18.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2018-11-09]
FF Extension: (Seznam pro Firefox - Email) - C:\Users\G IS\AppData\Roaming\Mozilla\Firefox\Profiles\oaac2o18.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}.xpi [2017-11-16]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: (ESET Smart Security Extension) - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2011-11-18] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_387.dll [2020-06-10] (Adobe Inc. -> )
FF Plugin: @java.com/DTPlugin,version=11.241.2 -> C:\Program Files\Java\jre1.8.0_241\bin\dtplugin\npDeployJava1.dll [2020-03-13] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.241.2 -> C:\Program Files\Java\jre1.8.0_241\bin\plugin2\npjp2.dll [2020-03-13] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_387.dll [2020-06-10] (Adobe Inc. -> )
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1225195.dll [2016-09-20] (Adobe Systems, Inc.) [File not signed]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll [2013-03-26] (Nitro PDF Software -> Nitro PDF)
FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=3 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [2019-05-16] (Brave Software, Inc. -> BraveSoftware Inc.)
FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=9 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [2019-05-16] (Brave Software, Inc. -> BraveSoftware Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-02-16] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default [2020-07-13]
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Extension: (Prezentácie) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (SimAquarium Extension) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aihjpkojknmkmmpeceojgaeccoeeaddo [2018-06-14]
CHR Extension: (Dokumenty) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Disk Google) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (Pickemfirst Fantasy Sports) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjlbkfgmbbfgbjcfeghgbhngklkebpg [2015-05-28]
CHR Extension: (Seznam doplněk - Email) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2020-06-23]
CHR Extension: (DuckDuckGo) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkdgflcldnnnapblkhphbgpggdiikppg [2020-07-08]
CHR Extension: (YouTube) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Google Search) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Mendeley Web Importer) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\dagcmkpagjlhakfdhnbomgmjdpkdklff [2020-07-01]
CHR Extension: (FantasyRig) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\epoedgpbikpgllkmafcmelldmlckoocj [2018-04-04]
CHR Extension: (Tabuľky) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-07-01]
CHR Extension: (MagicScroll eBook Reader) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgnmgfdoiplfmhgghbmlphanpfmjble [2013-02-21]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-07-13]
CHR Extension: (TweetDeck by Twitter) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbdpomandigafcibbmofojjchbcdagbl [2015-07-27]
CHR Extension: (Fantasy Baseball Player Highlighter) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlcoggmhlbhfglincfheokmggdhcpgml [2017-03-24]
CHR Extension: (Grammarly for Chrome) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2020-07-13]
CHR Extension: (Fangraphs Search) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpblbhnonmpepcjfemdenoonpdinfkgj [2017-02-02]
CHR Extension: (Save to Pocket) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2019-07-29]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-07]
CHR Extension: (Mercury Reader) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\oknpjjbmpnndlpmnhmekjpocelpnlfdi [2019-12-06]
CHR Extension: (FantasyLink) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pghfoglbgdeknkjcmilhkidfdkgenfdi [2019-06-05]
CHR Extension: (Evernote Web Clipper) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2020-07-13]
CHR Extension: (Gmail) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-05-02]
CHR Extension: (Chrome Media Router) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-07-01]
CHR HKU\S-1-5-21-2114313254-837077460-3471302094-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bgjpfhpjcgdppjbgnpnjllokbmcdllig]
CHR HKU\S-1-5-21-2114313254-837077460-3471302094-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [olfeabkoenfaoljndfecamgilllcpiak]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl]
CHR HKLM-x32\...\Chrome\Extension: [pacgpkgadgmibnhpdidcnfafllnmeomc] - C:\Users\G IS\AppData\Local\Temp\ccex.crx <not found>
StartMenuInternet: Google Chrome - C:\Users\G IS\AppData\Local\Google\Chrome\Application\chrome.exe
Opera:
=======
OPR Extension: (SimAquarium Extension) - C:\Users\G IS\AppData\Roaming\Opera Software\Opera Stable\Extensions\ghkjjijpjamcncbchedifacdllnigdmb [2018-06-05]
StartMenuInternet: (HKLM) OperaMail - D:\Program Files\Opera Mail\OperaMail.exe
StartMenuInternet: (HKLM) OperaStable - D:\Program Files\Opera\Launcher.exe
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2012-01-16] (Adobe Systems) [File not signed]
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-10] (Adobe Inc. -> Adobe)
R2 AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [255472 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> AMD)
R2 ArcGIS License Manager; C:\Program Files (x86)\ArcGIS\License10.4\bin\lmgrd.exe [1558072 2016-04-06] (Environmental Systems Research Institute Inc. -> Flexera Software LLC)
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [159368 2019-05-16] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [159368 2019-05-16] (Brave Software, Inc. -> BraveSoftware Inc.)
R2 client_service; C:\Program Files (x86)\VMware\VMware Horizon View Client\ClientService\horizon_client_service.exe [531432 2016-11-28] (VMware, Inc. -> VMware, Inc.)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-05-03] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-05-03] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [44552 2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
S3 DgnIndexingService; C:\Program Files (x86)\Common Files\Bentley Shared\Dgn Index Service\DgnIndexServer.exe [137728 2012-04-13] (Bentley Systems Inc.) [File not signed]
S3 Disc Soft Lite Bus Service; D:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1467072 2016-05-30] (Disc Soft Ltd -> Disc Soft Ltd)
S3 EhttpSrv; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [42360 2011-01-12] (ESET, spol. s r.o. -> ESET)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [810144 2011-01-12] (ESET, spol. s r.o. -> ESET)
R2 ftnlsv3hv; C:\Program Files\Common Files\VMware\DeviceRedirectionCommon\ftnlsv.exe [234400 2016-10-03] (FabulaTech -> )
R2 ftscanmgrhv; C:\Program Files (x86)\VMware\ScannerRedirection\ftscanmgrhv.exe [6331296 2016-10-18] (FabulaTech -> )
R2 hasplms; C:\WINDOWS\system32\hasplms.exe [4665168 2015-09-24] (SafeNet, Inc. -> SafeNet Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
S2 Intergraph Licensing Service; C:\Program Files (x86)\Intergraph\Licensing\11.10.1\Program\lmgrd.exe [1413456 2012-08-03] (Flexera Software LLC -> Flexera Software LLC.)
U2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6970968 2020-07-08] (Malwarebytes Inc -> Malwarebytes)
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-03-26] (Nitro PDF Software -> Nitro PDF Software)
R2 ProtectDeviceSvc; C:\Program Files (x86)\FLIR Systems\ATS-US\ProtectDeviceSvc\ProtectDeviceSvc.exe [93184 2010-03-18] (FLIR Systems Inc.) [File not signed]
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5930136 2020-05-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 SentinelKeysServer; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe [374304 2011-09-22] (SafeNet, Inc. -> SafeNet, Inc.)
R2 SentinelProtectionServer; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe [1259040 2011-09-22] (SafeNet, Inc. -> SafeNet, Inc)
R2 SentinelSecurityRuntime; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe [292384 2011-09-22] (SafeNet, Inc. -> SafeNet, Inc.)
R2 T3Srv; C:\Program Files\FLIR Systems\FLIR Device Drivers\FLIR T3Srv\sysx64\T3Srv.exe [788256 2015-08-31] (FLIR Systems AB -> FLIR)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [12097024 2019-11-06] (TeamViewer GmbH -> TeamViewer Germany GmbH)
S2 UTSCSI; C:\Windows\SysWOW64\UTSCSI.EXE [0 2012-06-11] () <==== ATTENTION (zero byte File/Folder)
R2 vmware-view-usbd; C:\Program Files (x86)\VMware\VMware Horizon View Client\vmware-view-usbd.exe [1169896 2016-11-24] (VMware, Inc. -> VMware, Inc.)
R2 vmwsprrdpwks; C:\Program Files (x86)\Common Files\VMware\SerialPortRedirection\Client\vmwsprrdpwks.exe [275872 2016-10-18] (FabulaTech -> VMware)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4098056 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [113992 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [21648880 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [674288 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [102912 2015-05-28] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2016-06-15] (Disc Soft Ltd -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2016-06-15] (Disc Soft Ltd -> Disc Soft Ltd)
R1 dtsoftbus01; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [271424 2012-01-19] (DT Soft Ltd -> DT Soft Ltd)
R2 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [170640 2010-12-21] (ESET, spol. s r.o. -> ESET)
R1 ehdrv; C:\WINDOWS\System32\DRIVERS\ehdrv.sys [141264 2010-12-21] (ESET, spol. s r.o. -> ESET)
R2 epfwwfpr; C:\WINDOWS\System32\DRIVERS\epfwwfpr.sys [125296 2010-12-21] (ESET, spol. s r.o. -> ESET)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-07-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S0 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-07-08] (Malwarebytes Inc -> Malwarebytes)
R2 Sentinel64; C:\WINDOWS\System32\Drivers\Sentinel64.sys [145448 2009-09-17] (SafeNet, Inc. -> SafeNet, Inc.)
R3 VBAudioVACMME; C:\WINDOWS\System32\drivers\vbaudio_cable64_win7.sys [41192 2014-09-02] (Vincent Burel -> Windows (R) Win 7 DDK provider)
R1 veracrypt; C:\WINDOWS\System32\drivers\veracrypt.sys [828256 2019-11-07] (IDRIX SARL -> IDRIX)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46472 2019-03-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [333784 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [62432 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
U3 avgbdisk; no ImagePath
U4 idsvc; no ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ===================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-07-13 07:32 - 2020-07-13 07:34 - 000045206 _____ C:\Users\G IS\Desktop\FRST.txt
2020-07-13 07:31 - 2020-07-13 07:33 - 000000000 ____D C:\FRST
2020-07-13 07:03 - 2020-07-13 07:03 - 002292736 _____ (Farbar) C:\Users\G IS\Desktop\FRST64.exe
2020-07-09 08:11 - 2020-07-09 08:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2020-07-08 15:22 - 2020-07-08 15:22 - 000000000 ____D C:\Users\G IS\Doctor Web
2020-07-08 15:22 - 2020-07-08 15:22 - 000000000 ____D C:\ProgramData\Doctor Web
2020-07-08 15:10 - 2020-07-08 15:10 - 000003168 _____ C:\WINDOWS\system32\Tasks\AdwCleaner_onReboot
2020-07-08 15:08 - 2020-07-08 15:10 - 000000000 ____D C:\AdwCleaner
2020-07-08 14:20 - 2020-07-08 14:20 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2020-07-08 14:20 - 2020-07-08 14:20 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2020-07-08 14:20 - 2020-07-08 14:20 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2020-07-08 14:20 - 2020-07-08 14:20 - 000044552 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2020-07-08 14:15 - 2020-07-13 07:01 - 000000000 ____D C:\Users\G IS\AppData\LocalLow\IGDump
2020-07-08 14:14 - 2020-07-08 14:14 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2020-07-08 14:14 - 2020-07-08 14:14 - 000001993 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2020-07-08 14:14 - 2020-07-08 14:14 - 000001981 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2020-07-08 14:14 - 2020-07-08 14:14 - 000001981 _____ C:\ProgramData\Desktop\Malwarebytes.lnk
2020-07-08 14:14 - 2020-07-08 14:14 - 000000000 ____D C:\Users\G IS\AppData\Local\mbam
2020-07-08 14:14 - 2020-07-08 14:13 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2020-07-08 14:14 - 2020-07-08 14:13 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2020-07-08 14:13 - 2020-07-08 14:13 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-07-08 10:48 - 2020-07-08 10:48 - 221978264 _____ C:\Users\G IS\Desktop\66sxg6to.exe
2020-07-08 10:38 - 2020-07-08 10:38 - 008420016 _____ (Malwarebytes) C:\Users\G IS\Desktop\adwcleaner_8.0.6.exe
2020-07-08 07:55 - 2020-07-08 07:55 - 000000000 ____D C:\Program Files\Malwarebytes
2020-07-06 13:57 - 2020-07-06 13:57 - 002182432 _____ C:\Users\G IS\Desktop\TSAF-D-20-00029_R3.pdf
2020-07-06 10:40 - 2020-07-06 10:41 - 000000000 ____D C:\Users\G IS\Desktop\Hive
2020-07-06 07:45 - 2020-07-06 07:45 - 000000000 ____D C:\Users\Public\Documents\Steam
2020-07-06 07:45 - 2020-07-06 07:45 - 000000000 ____D C:\Users\G IS\AppData\Local\Desperados III
2020-07-06 07:45 - 2020-07-06 07:45 - 000000000 ____D C:\ProgramData\Documents\Steam
2020-07-06 07:44 - 2020-07-06 07:44 - 000000000 ____D C:\Users\G IS\AppData\LocalLow\Mimimi
2020-07-06 07:42 - 2020-07-06 07:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Desperados III
2020-07-03 09:45 - 2020-07-03 10:35 - 000061759 _____ C:\Users\G IS\Desktop\19_temp.xlsx
2020-07-02 10:21 - 2020-07-02 10:31 - 000457343 _____ C:\Users\G IS\Desktop\English_Editing_Invoice_MDPI_english-20199_172.98EUR (1).pdf
2020-07-01 13:32 - 2020-07-01 13:32 - 000415838 _____ C:\Users\G IS\Desktop\Eticky kodex SAV 2018.pdf
2020-07-01 13:26 - 2020-07-01 13:26 - 000525738 _____ C:\Users\G IS\Desktop\Zap. c.15 RR_Pokyn c.1_priloha.pdf
2020-07-01 13:26 - 2020-07-01 13:26 - 000254867 _____ C:\Users\G IS\Desktop\prezencka_RR jun2020.pdf
2020-07-01 11:37 - 2020-07-01 11:37 - 001110455 _____ C:\Users\G IS\Desktop\Project-Uprava1_APVV-19-0606.pdf
2020-07-01 07:22 - 2020-07-01 07:22 - 014690863 _____ C:\Users\G IS\Desktop\DIPLOMOVA PRACE_Landa.pdf
2020-06-23 12:05 - 2020-06-23 12:05 - 000270287 _____ C:\Users\G IS\Desktop\Usmernenie riaditelky_COVID-19_jun2020.pdf
2020-06-23 08:59 - 2020-06-23 08:59 - 003203166 _____ C:\Users\G IS\Desktop\Authorship+form_imprints various - predpripravene.pdf
2020-06-22 10:12 - 2020-07-06 07:43 - 000000000 ____D C:\Users\G IS\Desktop\plocha
2020-06-22 10:00 - 2020-06-23 09:28 - 000000000 ____D C:\Users\G IS\Desktop\rev2
2020-06-18 14:11 - 2020-06-18 14:11 - 000003888 _____ C:\Users\G IS\AppData\Local\recently-used.xbel
2020-06-17 06:52 - 2020-06-05 23:03 - 000835480 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-06-17 06:52 - 2020-06-05 23:03 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-06-16 15:30 - 2020-06-16 15:30 - 000000000 ____D C:\Users\G IS\AppData\Roaming\StatSoft
2020-06-16 13:29 - 2020-06-22 12:56 - 000000000 ____D C:\Users\G IS\Desktop\TSAF-D-20-00029
2020-06-16 13:29 - 2020-06-16 13:29 - 004336245 _____ C:\Users\G IS\Desktop\TSAF-D-20-00029.zip
2020-06-16 08:13 - 2020-06-16 08:13 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 019851776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 019812864 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 018029056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 011608064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 009712640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 007012864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 006292480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 005909504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 004470272 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2020-06-16 08:13 - 2020-06-16 08:13 - 004129416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 003822592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 003525608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 003515392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 003365376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2020-06-16 08:13 - 2020-06-16 08:13 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2020-06-16 08:13 - 2020-06-16 08:13 - 002494744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 002230240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 002204160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 002190648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001704448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcndmgr.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001539072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2020-06-16 08:13 - 2020-06-16 08:13 - 001497400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001410048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmc.exe
2020-06-16 08:13 - 2020-06-16 08:13 - 001344512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMNetMgr.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001316352 _____ (Microsoft Corporation) C:\WINDOWS\system32\srmclient.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001272160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001151824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001112576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMNetMgr.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001099608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000940544 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srmclient.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000868352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2fs.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapi3.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000832512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdosys.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000747832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000740352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000739840 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscsvc.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000694784 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000686080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\srmscan.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msra.exe
2020-06-16 08:13 - 2020-06-16 08:13 - 000571904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaaut.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2020-06-16 08:13 - 2020-06-16 08:13 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpprefcl.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000555520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000549376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSCOMEX.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2020-06-16 08:13 - 2020-06-16 08:13 - 000484864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psisdecd.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000478208 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\SysWOW64\wvc.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000466944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srmscan.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2020-06-16 08:13 - 2020-06-16 08:13 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\WalletService.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswmdm.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000420352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000361472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\termmgr.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassdo.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswmdm.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Feedback.Analog.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000338944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WlanMM.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000267776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000248320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VAN.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wavemsp.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpg2splt.ax
2020-06-16 08:13 - 2020-06-16 08:13 - 000199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmidx.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cic.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000146944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmidx.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000133120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasrecst.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasnap.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkspbrokerAx.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000083600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2020-06-16 08:13 - 2020-06-16 08:13 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasads.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeUISrv.exe
2020-06-16 08:13 - 2020-06-16 08:13 - 000028368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SecurityCenterBrokerPS.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 025902080 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 008015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 007760384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 007268864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 005765144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 004858880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 004610560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 003398656 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-06-16 08:12 - 2020-06-16 08:12 - 002281472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcndmgr.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 002184504 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 001803776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 001637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 001416224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 001397560 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 001314304 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagperf.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 001284608 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 001215488 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 001193984 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 001138688 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 001077048 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 001066496 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdosys.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000994304 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000992256 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2fs.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapi3.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 000897536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000893952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windowsperformancerecordercontrol.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000783496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000740664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DismApi.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000692224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000684856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000674304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaaut.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000651776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000632320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000619008 _____ (Microsoft Corporation) C:\WINDOWS\system32\azroles.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\psisdecd.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000593424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000575488 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\system32\wvc.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\msTextPrediction.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 000513536 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\azroles.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000498176 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedRealitySvc.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassdo.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000453944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 000426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\termmgr.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000423424 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000407864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwizeng.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000405936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000398336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMM.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000398336 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000384512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\CXHProvisioningServer.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000271360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpviewerax.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000260096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wavemsp.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg2splt.ax
2020-06-16 08:12 - 2020-06-16 08:12 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\FileHistory.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpRelayTransport.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000223544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Dism.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 000211256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\cic.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000204008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityCenterBroker.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000199992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 000196096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000193592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasrecst.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprofm.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000150328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasnap.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000130112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkspbrokerAx.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000121856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaatext.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFolders.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 000099712 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000093448 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwanRadioManager.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2020-06-16 08:12 - 2020-06-16 08:12 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasads.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000041864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityCenterBrokerPS.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DMAlertListener.ProxyStub.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-06-16 08:11 - 2020-06-16 08:12 - 000380728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 009931576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 007604592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 006526448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 006435840 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 006091048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 005195432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 005111808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 005004344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 004565248 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 003368104 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 002831872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 002798592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2020-06-16 08:11 - 2020-06-16 08:11 - 002583496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001743680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001654960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001649152 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001393952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001283072 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001261568 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001260744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001250816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001153024 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowsperformancerecordercontrol.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001100288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001055184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001003832 _____ (Microsoft Corporation) C:\WINDOWS\system32\DismApi.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000932256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000929280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000899584 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnostics.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000894024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000892416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000892048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000797464 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000782336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000777216 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000760296 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BTAGService.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000696832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000690176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkObjCore.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000666624 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000628408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000614400 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000572200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000564496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StateRepository.Core.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000561464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2020-06-16 08:11 - 2020-06-16 08:11 - 000557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000522240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000518456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000508720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000508216 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizeng.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000467952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000461112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000451864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000440832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprt.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000357176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpr.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpviewerax.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-06-16 08:11 - 2020-06-16 08:11 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2020-06-16 08:11 - 2020-06-16 08:11 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\RASMM.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000287232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Preview.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000280376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dism.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000259776 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkEd.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000221496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000194560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psr.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000190048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000186368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdigest.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000179512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2020-06-16 08:11 - 2020-06-16 08:11 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaatext.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000165832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000165296 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000165192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSM.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000132424 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000129600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkStatus.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMM.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleprn.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000108856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000090952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000089344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcEpMap.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000063288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollCtrl.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlthunk.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryCore.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 007911176 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 007266080 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 006066808 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 005283264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 004012032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Service.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 003726848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-06-16 08:10 - 2020-06-16 08:10 - 003712000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 003581240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-06-16 08:10 - 2020-06-16 08:10 - 003187200 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 002716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-06-16 08:10 - 2020-06-16 08:10 - 002656256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 002289664 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 002235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001942528 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001919488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001751040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001683968 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskFlowDataEngine.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001583104 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001486336 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2020-06-16 08:10 - 2020-06-16 08:10 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001447424 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2020-06-16 08:10 - 2020-06-16 08:10 - 001274128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryPS.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001158144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001155944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2020-06-16 08:10 - 2020-06-16 08:10 - 001073664 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001007104 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000931840 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkObjCore.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-06-16 08:10 - 2020-06-16 08:10 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000826368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2020-06-16 08:10 - 2020-06-16 08:10 - 000736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000722072 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000716320 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000648192 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-06-16 08:10 - 2020-06-16 08:10 - 000548984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000531768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2020-06-16 08:10 - 2020-06-16 08:10 - 000472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-06-16 08:10 - 2020-06-16 08:10 - 000427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000425056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000394752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000242688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\psr.exe
2020-06-16 08:10 - 2020-06-16 08:10 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpdMtp.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000209216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSM.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000201528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SIUF.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3mm.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpdMtpUS.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleprn.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2020-06-16 08:10 - 2020-06-16 08:10 - 000128312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2020-06-16 08:10 - 2020-06-16 08:10 - 000127064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000104248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanRadioManager.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxGipRadioManager.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollCtrl.exe
2020-06-16 08:10 - 2020-06-16 08:10 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\NfcRadioMedia.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnosticsTool.exe
2020-06-16 08:10 - 2020-06-16 08:10 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\atlthunk.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2020-06-16 07:31 - 2020-06-16 07:32 - 000000000 ____D C:\Users\G IS\Desktop\turnedontimesview
2020-06-16 07:21 - 2020-05-15 06:29 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-06-16 07:21 - 2020-05-15 06:10 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-06-16 07:05 - 2020-07-03 08:27 - 000000000 ____D C:\Users\G IS\Desktop\HomeOffice
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-07-13 07:29 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-07-13 06:58 - 2016-04-21 08:40 - 000000000 ____D C:\Users\G IS\AppData\Local\CrashDumps
2020-07-13 06:56 - 2012-08-13 09:48 - 000000000 ____D C:\Users\G IS\AppData\Roaming\Skype
2020-07-10 11:29 - 2020-05-18 13:48 - 000000000 ____D C:\Users\G IS
2020-07-10 11:08 - 2020-05-18 13:30 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-07-10 10:18 - 2020-05-20 08:50 - 000000000 ____D C:\Users\G IS\AppData\Local\Deployment
2020-07-10 08:42 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-07-10 07:55 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-07-10 06:58 - 2020-05-18 14:12 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2020-07-09 12:42 - 2020-05-18 13:48 - 000940136 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-07-09 12:42 - 2019-03-19 06:50 - 000000000 ____D C:\WINDOWS\INF
2020-07-09 12:36 - 2020-05-18 14:12 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-07-09 12:36 - 2017-01-03 09:02 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2020-07-09 12:20 - 2017-01-03 11:56 - 000000000 ____D C:\Program Files (x86)\Auslogics
2020-07-09 08:13 - 2017-05-03 08:56 - 000000000 ____D C:\Program Files (x86)\Dropbox
2020-07-09 07:20 - 2020-05-18 14:12 - 000004156 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1582722813
2020-07-08 15:11 - 2019-03-19 06:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2020-07-08 14:52 - 2020-05-18 13:48 - 000000000 ____D C:\Users\Administrator
2020-07-08 14:52 - 2017-01-03 11:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2020-07-08 14:52 - 2013-05-23 14:14 - 000000000 ____D C:\Program Files\ExpertGPS 4.84-Patch
2020-07-08 14:52 - 2013-02-21 10:49 - 000000000 ____D C:\Program Files (x86)\AddLyrics
2020-07-08 14:51 - 2020-05-18 14:12 - 000000000 ____D C:\WINDOWS\system32\Tasks\Auslogics
2020-07-08 14:14 - 2019-03-19 06:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-07-08 14:03 - 2019-06-14 14:31 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-07-08 14:03 - 2015-11-11 15:23 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-07-08 06:53 - 2012-01-02 13:43 - 000001117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-07-07 14:29 - 2017-11-16 08:58 - 000000000 ____D C:\Users\G IS\AppData\LocalLow\Mozilla
2020-07-06 14:12 - 2020-06-10 13:53 - 000002497 _____ C:\Users\G IS\Desktop\Boardpace Login.lnk
2020-07-03 14:28 - 2017-06-07 09:06 - 000000000 ____D C:\Users\G IS\AppData\Roaming\Messenger for Desktop
2020-07-03 12:15 - 2014-06-10 13:50 - 000000000 ____D C:\Users\G IS\AppData\Roaming\RStudio
2020-07-03 12:15 - 2014-06-10 09:30 - 000000000 ____D C:\Users\G IS\AppData\Local\RStudio-Desktop
2020-07-03 11:17 - 2017-02-02 11:10 - 001324032 _____ C:\Users\G IS\AppData\Local\WebpageIcons.db
2020-07-03 08:42 - 2020-01-23 10:12 - 000000000 ____D C:\Users\G IS\Desktop\SPME_2019
2020-07-03 08:27 - 2020-01-30 14:50 - 000000000 ____D C:\Users\G IS\Desktop\sprava
2020-07-02 13:45 - 2019-05-16 12:23 - 000000000 ____D C:\Users\G IS\AppData\Local\BraveSoftware
2020-07-02 07:05 - 2019-05-16 12:23 - 000002430 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2020-07-01 11:37 - 2013-03-07 15:56 - 000000000 ____D C:\Users\G IS\AppData\Roaming\Nitro PDF
2020-07-01 07:30 - 2020-05-18 14:12 - 000004190 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled Autoupdate 1582882749
2020-07-01 07:30 - 2020-02-28 11:39 - 000001481 _____ C:\Users\G IS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prehliadač Opera GX.lnk
2020-07-01 07:30 - 2011-11-21 20:27 - 000002505 _____ C:\Users\G IS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-07-01 06:50 - 2017-01-13 09:17 - 000002151 _____ C:\Users\G IS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\f.lux.lnk
2020-06-23 13:46 - 2012-01-04 10:47 - 000000000 ____D C:\Users\G IS\Documents\Lexicon
2020-06-23 07:24 - 2020-05-18 14:12 - 000003956 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1485430046
2020-06-23 07:24 - 2017-01-26 13:27 - 000000873 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prehliadač Opera.lnk
2020-06-23 06:57 - 2020-05-18 14:45 - 000003364 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2114313254-837077460-3471302094-1000
2020-06-23 06:56 - 2020-05-18 14:45 - 000000000 ___RD C:\Users\G IS\OneDrive
2020-06-23 06:56 - 2020-05-18 13:48 - 000002348 _____ C:\Users\G IS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-06-19 12:04 - 2014-06-10 12:57 - 000000000 ____D C:\Users\G IS\Documents\Knižnica Calibre
2020-06-19 08:23 - 2020-06-03 07:37 - 000000000 ____D C:\Users\G IS\.katrain
2020-06-18 14:04 - 2020-05-26 13:19 - 000000000 ____D C:\Users\G IS\.dbus-keyrings
2020-06-17 11:21 - 2020-06-02 08:01 - 000000000 ____D C:\Users\G IS\AppData\Roaming\Sabaki
2020-06-17 06:53 - 2020-05-18 14:35 - 000000000 ___RD C:\Users\G IS\3D Objects
2020-06-17 06:53 - 2020-05-18 14:17 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-06-17 06:53 - 2012-01-24 11:59 - 000000000 ___RD C:\Users\G IS\Virtual Machines
2020-06-17 06:52 - 2020-05-18 13:30 - 000723688 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-06-16 15:37 - 2019-03-19 06:52 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2020-06-16 15:37 - 2019-03-19 06:52 - 000000000 ___SD C:\WINDOWS\system32\F12
2020-06-16 15:37 - 2019-03-19 06:52 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2020-06-16 15:37 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-06-16 15:37 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2020-06-16 15:37 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2020-06-16 15:37 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SystemResources
2020-06-16 15:37 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-06-16 15:37 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-06-16 15:37 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\Com
2020-06-16 15:37 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2020-06-16 15:36 - 2019-03-19 12:56 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2020-06-16 15:36 - 2019-03-19 12:56 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2020-06-16 15:36 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-06-16 15:36 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-06-16 15:30 - 2012-02-22 15:29 - 000002794 _____ C:\Users\G IS\AppData\Roaming\WWB7_32.DAT
2020-06-16 08:27 - 2019-03-19 06:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-06-16 08:10 - 2020-05-18 13:38 - 002876416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2020-06-16 06:56 - 2019-11-14 13:59 - 000000000 ____D C:\Users\G IS\Desktop\Janka_Grafy
==================== Files in the root of some directories ========
2019-02-07 12:09 - 2019-02-07 12:09 - 000000003 _____ () C:\Users\G IS\AppData\Roaming\.ptbt0
2013-04-02 15:51 - 2013-04-02 16:48 - 000000100 _____ () C:\Users\G IS\AppData\Roaming\Camdata.ini
2013-04-02 15:51 - 2013-04-02 16:48 - 000000408 _____ () C:\Users\G IS\AppData\Roaming\CamLayout.ini
2013-04-02 15:51 - 2013-04-02 16:48 - 000000408 _____ () C:\Users\G IS\AppData\Roaming\CamShapes.ini
2013-04-02 15:51 - 2013-04-02 16:48 - 000004516 _____ () C:\Users\G IS\AppData\Roaming\CamStudio.cfg
2012-02-02 09:26 - 2013-03-26 15:02 - 000000200 _____ () C:\Users\G IS\AppData\Roaming\default.rss
2012-01-16 11:22 - 2012-01-16 11:22 - 000000268 ___RH () C:\Users\G IS\AppData\Roaming\Themes
2012-01-16 11:22 - 2012-01-16 11:22 - 000000268 ___RH () C:\Users\G IS\AppData\Roaming\Track Settings
2012-01-16 11:22 - 2012-01-16 11:22 - 000000268 ___RH () C:\Users\G IS\AppData\Roaming\Trance Pad
2012-02-22 15:29 - 2020-06-16 15:30 - 000002794 _____ () C:\Users\G IS\AppData\Roaming\WWB7_32.DAT
2012-08-28 13:10 - 2012-08-28 13:10 - 000000600 _____ () C:\Users\G IS\AppData\Local\PUTTY.RND
2020-06-18 14:11 - 2020-06-18 14:11 - 000003888 _____ () C:\Users\G IS\AppData\Local\recently-used.xbel
2011-12-07 13:29 - 2020-02-27 14:36 - 000007641 _____ () C:\Users\G IS\AppData\Local\Resmon.ResmonCfg
2008-02-05 14:28 - 2008-02-05 14:28 - 000000051 _____ () C:\Users\G IS\AppData\Local\setup.txt
2017-02-02 11:10 - 2020-07-03 11:17 - 001324032 _____ () C:\Users\G IS\AppData\Local\WebpageIcons.db
==================== FCheck ================================
(If an entry is included in the fixlist, the file/folder will be moved.)
FCheck: C:\WINDOWS\SysWOW64\UTSCSI.EXE [2012-06-11] <==== ATTENTION (zero byte File/Folder)
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Mám dlhodobejšie problém s PC. Po každom štarte mi postupne prestane fungovať každý prehliadač (najprv Brave, Chrome, Firefox) až na koniec všetko zamrzne a pomôže iba reštart. Chvíľku potom funguje a opäť sa to opakuje.
Pokúšal som sa sa vyčistiť PC všetkým možným (Malwarebytes, DrWeb a podobne). Pri každom čistení mi nájde nejakú háveď ktorú aj napriek tomu že ju odstránim, problém pretrváva.
Ďakujem za prípadnú pomoc (už som zúfalý)
Prikladám log z FRST, Addition je ako príloha v zip formáte
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 08-07-2020 01
Ran by GIS (administrator) on GIS-MAJDAK (13-07-2020 07:32:26)
Running from C:\Users\G IS\Desktop
Loaded Profiles: GIS
Platform: Windows 10 Pro Version 1909 18363.900 (X64) Language: Slovenčina (Slovensko)
Default browser: "C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe" -- "%1"
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(AMD) [File not signed] C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(AMD) [File not signed] C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(Brave Software, Inc. -> Brave Software, Inc.) C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\1.3.295.1\DropboxCrashHandler.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Environmental Systems Research Institute Inc. -> Flexera Software LLC) C:\Program Files (x86)\ArcGIS\License10.4\bin\lmgrd.exe <2>
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
(ESRI) [File not signed] C:\Program Files (x86)\ArcGIS\License10.4\bin\ARCGIS.exe
(F.lux Software LLC -> f.lux Software LLC) C:\Users\G IS\AppData\Local\FluxSoftware\Flux\flux.exe
(FabulaTech -> ) C:\Program Files (x86)\VMware\ScannerRedirection\ftscanmgrhv.exe
(FabulaTech -> ) C:\Program Files\Common Files\VMware\DeviceRedirectionCommon\ftnlsv.exe
(FabulaTech -> VMware) C:\Program Files (x86)\Common Files\VMware\SerialPortRedirection\Client\vmwsprrdpwks.exe
(Flexera Software LLC -> Flexera Software LLC) C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
(FLIR Systems AB -> FLIR) C:\Program Files\FLIR Systems\FLIR Device Drivers\FLIR T3Srv\sysx64\T3Srv.exe
(FLIR Systems Inc.) [File not signed] C:\Program Files (x86)\FLIR Systems\ATS-US\ProtectDeviceSvc\ProtectDeviceSvc.exe
(Google Inc -> Google Inc.) C:\Users\G IS\AppData\Local\Google\Update\GoogleUpdate.exe
(Google LLC -> Google LLC) C:\Users\G IS\AppData\Local\Google\Chrome\Application\chrome.exe <2>
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(iolo technologies, LLC -> iolo technologies, LLC) [File not signed] D:\Program Files\SystemMechanic\Phoenix360\System Mechanic\ioloGovernor64.exe
(iolo technologies, LLC -> iolo technologies, LLC) D:\Program Files\SystemMechanic\Phoenix360\System Mechanic\SystemMechanic.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Users\G IS\AppData\Local\Microsoft\OneDrive\OneDrive.exe <2>
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe <2>
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2005.1191.0_x64__8wekyb3d8bbwe\LocalBridge.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(Nero AG -> Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Nitro PDF Software -> Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(PcWinTech.com) [File not signed] D:\Program Files\CleanMem\Mini_Monitor.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(SafeNet, Inc. -> SafeNet Inc.) C:\Windows\System32\hasplms.exe
(SafeNet, Inc. -> SafeNet, Inc) C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
(SafeNet, Inc. -> SafeNet, Inc.) C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
(SafeNet, Inc. -> SafeNet, Inc.) C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe
(Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c\Skype\Skype.exe <5>
(TeamViewer GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Horizon View Client\ClientService\horizon_client_service.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Horizon View Client\vmware-view-usbd.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2918656 2011-01-12] (ESET, spol. s r.o. -> ESET)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11474024 2010-10-05] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [7657984 2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [646160 2019-12-11] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Opera Browser Assistant] => D:\Program Files\Opera\assistant\browser_assistant.exe [3105304 2020-07-08] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-2114313254-837077460-3471302094-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2011-07-28] (AMD) [File not signed]
HKU\S-1-5-21-2114313254-837077460-3471302094-1000\...\Run: [Google Update] => C:\Users\G IS\AppData\Local\Google\Update\1.3.35.452\GoogleUpdateCore.exe [217544 2020-03-25] (Google LLC -> Google LLC)
HKU\S-1-5-21-2114313254-837077460-3471302094-1000\...\Run: [f.lux] => C:\Users\G IS\AppData\Local\FluxSoftware\Flux\flux.exe [1469968 2020-06-17] (F.lux Software LLC -> f.lux Software LLC)
HKU\S-1-5-21-2114313254-837077460-3471302094-1000\...\Run: [Chromium] => "c:\users\g is\appdata\local\chromium\application\chrome.exe" --auto-launch-at-startup --profile-directory="Default" --restore-last-session
HKU\S-1-5-21-2114313254-837077460-3471302094-1000\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe [2098344 2020-06-23] (Brave Software, Inc. -> Brave Software, Inc.)
HKU\S-1-5-21-2114313254-837077460-3471302094-1000\...\MountPoints2: {d6da9a06-f300-11e8-9336-38607712e7c2} - "L:\HiSuiteDownLoader.exe"
HKLM\...\Windows x64\Print Processors\hpzppWN7: C:\Windows\System32\spool\prtprocs\x64\hpzppWN7.dll [101376 2009-07-14] (Microsoft Windows -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\system32\AdobePDF.dll [51032 2008-04-07] (Adobe Systems, Incorporated -> Adobe Systems Inc)
HKLM\...\Print\Monitors\CPCA Language Monitor3: C:\Windows\system32\CNAS0MMK.DLL [66048 2007-04-18] (Microsoft Windows Hardware Compatibility Publisher -> Canon Inc.)
HKLM\...\Print\Monitors\Nitro PDF Port Monitor: C:\Windows\system32\nitrolocalmon2.dll [29712 2013-03-26] (Nitro PDF Software -> Nitro PDF Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\83.1.10.97\Installer\chrmstp.exe [2020-07-02] (Brave Software, Inc.) [File not signed]
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
Startup: C:\Users\G IS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Obrazovková spinka a spúšťač programu OneNote 2010.lnk [2019-10-24]
ShortcutTarget: Obrazovková spinka a spúšťač programu OneNote 2010.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
GroupPolicy: Restriction ? <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0326F4E2-CE4B-4A12-85EF-EC32627F9E7C} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {05CC4195-A46E-4C4E-958B-99A1972A644E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-09-02] (Google Inc -> Google Inc.)
Task: {1614F5AB-43AE-4276-A28F-123E54D33D17} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {17AF1860-1278-458F-8A57-0A4E9145AA65} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {18822412-F710-4BE2-82A2-6414373B29ED} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [159368 2019-05-16] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {1C31A47B-D799-49C6-9B69-ECB615E304BB} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43da-BFD7-FBEEA2180A1E}
Task: {30AAE43F-CD15-4C7F-A8FC-3BD4E5287ED6} - System32\Tasks\Opera scheduled Autoupdate 1485430046 => D:\Program Files\Opera\launcher.exe [1517592 2020-06-18] (Opera Software AS -> Opera Software)
Task: {339DBE9B-73D3-435C-BAC2-89A16318A0BF} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-05-03] (Dropbox, Inc -> Dropbox, Inc.)
Task: {351FB684-070E-4241-8336-66553274BC4D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-10] (Adobe Inc. -> Adobe)
Task: {3BC86805-559A-49C6-B125-C94877B6918B} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {414E17FA-0AC7-40CF-87E0-77E4CFAB3E00} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {41BC3491-4E66-4D89-8194-EA1FCD1FFCB7} - System32\Tasks\AdwCleaner_onReboot => C:\Users\G IS\Desktop\adwcleaner_8.0.6.exe [8420016 2020-07-08] (Malwarebytes Inc -> Malwarebytes)
Task: {43034876-C041-4A91-AD91-5409D4C82DDA} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-02-05] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {43A102FA-6385-4D4A-BEF7-A0BC3C671895} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {47A69DE1-ECBF-4337-AF36-2CC3999307DF} - System32\Tasks\ioloActiveCare => D:\Program Files\SystemMechanic\Phoenix360\System Mechanic\systemmechanic.exe [414968 2017-12-08] (iolo technologies, LLC -> iolo technologies, LLC)
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47c2-B62A-B7C4CED925CB}
Task: {48E35FC2-816F-4AE4-B5F8-D6763D1D8A59} - \Microsoft\Windows\Setup\EOSNotify -> No File <==== ATTENTION
Task: {51459EF7-685E-4486-A2A8-63CE02FC0964} - System32\Tasks\ioloSystemShield => D:\Program Files\SystemMechanic\Phoenix360\System Mechanic\ioloSSTray.exe [344304 2017-12-08] (iolo technologies, LLC -> iolo technologies, LLC)
Task: {5A6AF334-34D2-4E8A-85C8-DF5071ED9E80} - \Microsoft\Windows\Setup\EOSNotify2 -> No File <==== ATTENTION
Task: {5B259235-B556-4FD8-A8E8-1EAA28050E35} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2114313254-837077460-3471302094-1000Core => C:\Users\G IS\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-09-02] (Google Inc -> Google Inc.)
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {5E7F634F-7441-4648-A096-7C00D56B0A23} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {5FCD0B9D-EE69-47C8-9868-AB682EA59140} - System32\Tasks\{AEED7A02-9371-438A-B9E6-E855EBF771EF} => msiexec.exe /package "D:\MAJDAK\software\Polyworks\imview_12_0_64bit.msi"
Task: {621DC3FF-A7A6-4A3F-AD16-F2D62B99766E} - System32\Tasks\Microsoft\Windows\End Of Support\Notify2 => C:\WINDOWS\system32\sipnotify.exe
Task: {634522AF-CC1B-48EE-AD75-C440EF02EED5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2114313254-837077460-3471302094-1000UA => C:\Users\G IS\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-09-02] (Google Inc -> Google Inc.)
Task: {66272A98-4E2A-4FF9-83CE-4710FBC38518} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [14554696 2018-11-06] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {68354EA7-6FC0-479D-8289-79953A09FA6F} - System32\Tasks\ioloTUDsDownloader => C:\Program Files (x86)\Common Files\Phoenix360\ActiveCore\activesync.exe [194800 2017-12-07] (iolo technologies, LLC -> iolo technologies, LLC)
Task: {6A82CE70-005F-44CD-BB8E-0462103D0145} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {6AF2F5F5-966B-4486-9B1E-49A44F2904A5} - System32\Tasks\Opera GX scheduled Autoupdate 1582882749 => C:\Users\G IS\AppData\Local\Programs\Opera GX\launcher.exe [1459224 2020-06-26] (Opera Software AS -> Opera Software)
Task: {6EB00798-0B42-43A2-B7EB-E52D7253D53E} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {6FE989F9-680B-4686-82E9-C99AB8D0AD74} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {73312590-288F-4962-B4E0-251E07829693} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {79C72B3E-BA91-42CC-8B1A-4340DAF2A9A8} - System32\Tasks\iolo Process Governor => D:\Program Files\SystemMechanic\Phoenix360\System Mechanic\iologovernor64.exe [713648 2017-12-07] (iolo technologies, LLC -> iolo technologies, LLC) [File not signed]
Task: {7CD67172-0F12-4E17-B9CD-C837D0DC73A2} - System32\Tasks\Clean System Memory => C:\Windows\syswow64\CleanMem.exe [61440 2014-08-20] (PcWinTech.com) [File not signed]
Task: {7DB058C5-0F17-41D6-8701-0761351F195A} - System32\Tasks\{11408E3E-729C-4B9A-AE29-CFBB0C64477B} => msiexec.exe /package "D:\MAJDAK\software\Polyworks\polyworks_12_0_64bit.msi"
Task: {7F3F7FD0-B635-4581-BB12-2388CE17CD50} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [159368 2019-05-16] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {8006050C-DCF6-4ADF-9C43-43EA0C4CF204} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {91DFA0FF-F488-48F2-A11D-83C37AB2E2A4} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984 2011-06-01] (Apple Inc. -> Apple Inc.)
Task: {93047855-7BC5-428C-97E4-C05E7AB0B592} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-05-03] (Dropbox, Inc -> Dropbox, Inc.)
Task: {9DB0768F-7925-4A0A-8CAE-3624A3EB07E1} - System32\Tasks\{97730905-02B7-468F-8986-366EA02EBB56} => C:\Windows\system32\pcalua.exe -a C:\PROGRA~2\ESRI\License\arcgis9x\UNWISE32.EXE -c C:\PROGRA~2\ESRI\License\arcgis9x\ARCGIS~1.LOG "License Manager"
Task: {9EE2BA06-EE4D-4921-ABF2-11B185AC111C} - System32\Tasks\Update Manager => C:\Users\G IS\AppData\Roaming\Shadow.Tactics.Blades.of.the.Shogun.v1.1.2-ALI213\Upgrade.exe
Task: {A18B9E70-A683-4DC6-AEBA-ECA9DAC7790B} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {A96CF719-E5CE-4411-904A-E66BB02AF310} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {AA1CC6FC-FC18-4A3E-BF9D-9EEE1449CEDE} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {AAF38353-5F46-4F70-9A39-71BF4950C294} - System32\Tasks\{DA685FD9-FF48-4A8B-9A61-1796A9BD773D} => msiexec.exe /package "D:\MAJDAK\software\Polyworks\polyworks_12_0_64bit.msi"
Task: {ABEF7B1E-B072-451D-B23B-6DCC682D3C38} - System32\Tasks\CleanMem Mini Monitor => D:\Program Files\CleanMem\mini_monitor.exe [1421312 2014-08-20] (PcWinTech.com) [File not signed]
Task: {AC8653AF-8458-41BE-876F-0C8CB8E5E400} - System32\Tasks\Opera scheduled assistant Autoupdate 1582722813 => D:\Program Files\Opera\launcher.exe [1517592 2020-06-18] (Opera Software AS -> Opera Software)
Task: {AD2CDF0F-6C7A-4794-AAAD-C3BF6423199F} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4f47-879B-29A80C355D61}
Task: {AFF68475-218E-4B92-B6B3-C9E2102F46ED} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40b4-8963-D3C761B18371}
Task: {B3C36C94-EC0F-478E-9DBF-CF7F4B59F8B7} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {B9321198-96E4-4B59-8C78-04608ECF387D} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {BD45FB5A-9C4F-43A8-9042-639B0E838525} - System32\Tasks\{0363A9C4-2C35-4488-AC14-28A43E71CBA8} => C:\Windows\system32\pcalua.exe -a "C:\Users\G IS\Desktop\SAM131.exe" -d "C:\Users\G IS\Desktop"
Task: {BDF29E21-19E5-496B-8BDE-B79032E4B401} - System32\Tasks\{ACCEEF11-9072-43AA-9F52-2B162E7EF92A} => C:\Users\G IS\Desktop\Kywrdcrk\KYWRDCRK.EXE
Task: {C28DC2F8-A24B-4AE2-A891-89A63C13958F} - System32\Tasks\ActiveMessenger-SystemMechanic => C:\Program Files (x86)\Common Files\Phoenix360\ActiveCore\ActiveMessenger.exe [323328 2017-12-07] (iolo technologies, LLC -> iolo technologies, LLC)
Task: {C3D216EC-6867-4642-909B-A6E27B848FB0} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C9358191-49A4-487F-B403-B3117AD2B985} - System32\Tasks\ioloAVDefsDownloader => D:\Program Files\SystemMechanic\Phoenix360\System Mechanic\SSDefs.exe [134888 2017-12-08] (iolo technologies, LLC -> iolo technologies, LLC)
Task: {CBB1F5F1-4824-4A3B-ABF8-9A1C9B5F39D9} - System32\Tasks\ActiveSync-SystemMechanic => C:\Program Files (x86)\Common Files\Phoenix360\ActiveCore\activesync.exe [194800 2017-12-07] (iolo technologies, LLC -> iolo technologies, LLC)
Task: {CBCBCB7C-F6B6-43B3-9EF8-28478429F342} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-09-02] (Google Inc -> Google Inc.)
Task: {CFC3977B-5525-43BD-831C-B1C8816F806C} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D62ABD03-29EF-4099-862D-4E71D3760110} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {D6F5790E-9B01-4E1A-83C9-B7ACE892282E} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1660520 2020-02-27] (Avast Software s.r.o. -> Avast Software)
Task: {DF460692-E613-45A9-A578-6048FC543FFB} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {DF5CEAFE-6A55-410D-A8C7-88DD45EFC193} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E3ECC600-7CE5-43BF-98ED-D40862795BF1} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDfE067B1}
Task: {E6CA272E-8221-4B0D-8B54-11B2E98012C0} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F1EE4B50-6BA0-45F1-A50C-1D7895CDFCD6} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_387_Plugin.exe [1459256 2020-06-10] (Adobe Inc. -> Adobe)
Task: {F81A9AAA-8C82-415C-A0B7-AF314FEF433F} - System32\Tasks\Microsoft\Windows\End Of Support\Notify1 => C:\WINDOWS\system32\sipnotify.exe
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\..\Interfaces\{56D540B9-0A75-4E53-9480-492BDFEED373}: [NameServer] 147.213.240.2
Tcpip\..\Interfaces\{C070050B-5421-4F04-A3CD-C8AD8D4A354D}: [DhcpNameServer] 192.168.42.129
Internet Explorer:
==================
HKU\S-1-5-21-2114313254-837077460-3471302094-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/?clid=12454
SearchScopes: HKU\S-1-5-21-2114313254-837077460-3471302094-1000 -> {32382042-EFEC-4222-9AA6-C0641F39DB04} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_12454
SearchScopes: HKU\S-1-5-21-2114313254-837077460-3471302094-1000 -> {4F89015D-070E-41F3-8FDE-9251F8FFD66D} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-2114313254-837077460-3471302094-1000 -> {74EBA9ED-CBEC-4A68-A0ED-F1A64DB0C97E} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-2114313254-837077460-3471302094-1000 -> {7A163367-506A-4369-93CB-DAD90E605582} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_12454
SearchScopes: HKU\S-1-5-21-2114313254-837077460-3471302094-1000 -> {866A7BC3-C143-439E-BDDD-88C35329340A} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-2114313254-837077460-3471302094-1000 -> {A8A3ACBA-5F19-43DB-9BDD-64375500F65C} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_12454
SearchScopes: HKU\S-1-5-21-2114313254-837077460-3471302094-1000 -> {CC95E300-C32C-46E8-A912-4E0B0AEDF360} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-2114313254-837077460-3471302094-1000 -> {E0256928-A247-4D5F-B03E-4A51EB9B920C} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-2114313254-837077460-3471302094-1000 -> {F14A5F3D-209D-48B0-A677-32D085A183D2} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_12454
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_241\bin\ssv.dll [2020-03-13] (Oracle America, Inc. -> Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_241\bin\jp2ssv.dll [2020-03-13] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2018-03-30] (Evernote Corporation -> Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-2114313254-837077460-3471302094-1000 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
DPF: HKLM-x32 {62789780-B744-11D0-986B-00609731A21D} hxxp://195.28.70.134/kapor2/lib/mgaxctrl.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2016-07-22] (Skype Software Sarl -> Skype Technologies)
FireFox:
========
FF DefaultProfile: oaac2o18.default
FF ProfilePath: C:\Users\G IS\AppData\Roaming\Mozilla\Firefox\Profiles\oaac2o18.default [2020-07-08]
FF NewTabOverride: Mozilla\Firefox\Profiles\oaac2o18.default -> Disabled: {ea614400-e918-4741-9a97-7a972ff7c30b}
FF Extension: (Custom Search Engine) - C:\Users\G IS\AppData\Roaming\Mozilla\Firefox\Profiles\oaac2o18.default\Extensions\custom-search-engine@rsins.addons.mozilla.org.xpi [2018-12-07]
FF Extension: (Slovak (SK) Language Pack) - C:\Users\G IS\AppData\Roaming\Mozilla\Firefox\Profiles\oaac2o18.default\Extensions\langpack-sk@firefox.mozilla.org.xpi [2020-07-07]
FF Extension: (Seznam doplněk - Esko) - C:\Users\G IS\AppData\Roaming\Mozilla\Firefox\Profiles\oaac2o18.default\Extensions\sko-extension@firma.seznam.cz.xpi [2020-07-07]
FF Extension: (Scribd PDF Downloader) - C:\Users\G IS\AppData\Roaming\Mozilla\Firefox\Profiles\oaac2o18.default\Extensions\{c2921baa-9930-4d73-a203-f69db858f139}.xpi [2016-04-29] [Legacy]
FF Extension: (Greasemonkey) - C:\Users\G IS\AppData\Roaming\Mozilla\Firefox\Profiles\oaac2o18.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2018-01-15]
FF Extension: (Seznam doplněk - Email) - C:\Users\G IS\AppData\Roaming\Mozilla\Firefox\Profiles\oaac2o18.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2018-11-09]
FF Extension: (Seznam pro Firefox - Email) - C:\Users\G IS\AppData\Roaming\Mozilla\Firefox\Profiles\oaac2o18.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}.xpi [2017-11-16]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: (ESET Smart Security Extension) - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2011-11-18] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_387.dll [2020-06-10] (Adobe Inc. -> )
FF Plugin: @java.com/DTPlugin,version=11.241.2 -> C:\Program Files\Java\jre1.8.0_241\bin\dtplugin\npDeployJava1.dll [2020-03-13] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.241.2 -> C:\Program Files\Java\jre1.8.0_241\bin\plugin2\npjp2.dll [2020-03-13] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_387.dll [2020-06-10] (Adobe Inc. -> )
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1225195.dll [2016-09-20] (Adobe Systems, Inc.) [File not signed]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll [2013-03-26] (Nitro PDF Software -> Nitro PDF)
FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=3 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [2019-05-16] (Brave Software, Inc. -> BraveSoftware Inc.)
FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=9 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [2019-05-16] (Brave Software, Inc. -> BraveSoftware Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-02-16] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default [2020-07-13]
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Extension: (Prezentácie) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (SimAquarium Extension) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aihjpkojknmkmmpeceojgaeccoeeaddo [2018-06-14]
CHR Extension: (Dokumenty) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Disk Google) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (Pickemfirst Fantasy Sports) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjlbkfgmbbfgbjcfeghgbhngklkebpg [2015-05-28]
CHR Extension: (Seznam doplněk - Email) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2020-06-23]
CHR Extension: (DuckDuckGo) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkdgflcldnnnapblkhphbgpggdiikppg [2020-07-08]
CHR Extension: (YouTube) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Google Search) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Mendeley Web Importer) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\dagcmkpagjlhakfdhnbomgmjdpkdklff [2020-07-01]
CHR Extension: (FantasyRig) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\epoedgpbikpgllkmafcmelldmlckoocj [2018-04-04]
CHR Extension: (Tabuľky) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-07-01]
CHR Extension: (MagicScroll eBook Reader) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgnmgfdoiplfmhgghbmlphanpfmjble [2013-02-21]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-07-13]
CHR Extension: (TweetDeck by Twitter) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbdpomandigafcibbmofojjchbcdagbl [2015-07-27]
CHR Extension: (Fantasy Baseball Player Highlighter) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlcoggmhlbhfglincfheokmggdhcpgml [2017-03-24]
CHR Extension: (Grammarly for Chrome) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2020-07-13]
CHR Extension: (Fangraphs Search) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpblbhnonmpepcjfemdenoonpdinfkgj [2017-02-02]
CHR Extension: (Save to Pocket) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2019-07-29]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-07]
CHR Extension: (Mercury Reader) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\oknpjjbmpnndlpmnhmekjpocelpnlfdi [2019-12-06]
CHR Extension: (FantasyLink) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pghfoglbgdeknkjcmilhkidfdkgenfdi [2019-06-05]
CHR Extension: (Evernote Web Clipper) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2020-07-13]
CHR Extension: (Gmail) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-05-02]
CHR Extension: (Chrome Media Router) - C:\Users\G IS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-07-01]
CHR HKU\S-1-5-21-2114313254-837077460-3471302094-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bgjpfhpjcgdppjbgnpnjllokbmcdllig]
CHR HKU\S-1-5-21-2114313254-837077460-3471302094-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [olfeabkoenfaoljndfecamgilllcpiak]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl]
CHR HKLM-x32\...\Chrome\Extension: [pacgpkgadgmibnhpdidcnfafllnmeomc] - C:\Users\G IS\AppData\Local\Temp\ccex.crx <not found>
StartMenuInternet: Google Chrome - C:\Users\G IS\AppData\Local\Google\Chrome\Application\chrome.exe
Opera:
=======
OPR Extension: (SimAquarium Extension) - C:\Users\G IS\AppData\Roaming\Opera Software\Opera Stable\Extensions\ghkjjijpjamcncbchedifacdllnigdmb [2018-06-05]
StartMenuInternet: (HKLM) OperaMail - D:\Program Files\Opera Mail\OperaMail.exe
StartMenuInternet: (HKLM) OperaStable - D:\Program Files\Opera\Launcher.exe
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2012-01-16] (Adobe Systems) [File not signed]
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-10] (Adobe Inc. -> Adobe)
R2 AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [255472 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> AMD)
R2 ArcGIS License Manager; C:\Program Files (x86)\ArcGIS\License10.4\bin\lmgrd.exe [1558072 2016-04-06] (Environmental Systems Research Institute Inc. -> Flexera Software LLC)
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [159368 2019-05-16] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [159368 2019-05-16] (Brave Software, Inc. -> BraveSoftware Inc.)
R2 client_service; C:\Program Files (x86)\VMware\VMware Horizon View Client\ClientService\horizon_client_service.exe [531432 2016-11-28] (VMware, Inc. -> VMware, Inc.)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-05-03] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-05-03] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [44552 2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
S3 DgnIndexingService; C:\Program Files (x86)\Common Files\Bentley Shared\Dgn Index Service\DgnIndexServer.exe [137728 2012-04-13] (Bentley Systems Inc.) [File not signed]
S3 Disc Soft Lite Bus Service; D:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1467072 2016-05-30] (Disc Soft Ltd -> Disc Soft Ltd)
S3 EhttpSrv; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [42360 2011-01-12] (ESET, spol. s r.o. -> ESET)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [810144 2011-01-12] (ESET, spol. s r.o. -> ESET)
R2 ftnlsv3hv; C:\Program Files\Common Files\VMware\DeviceRedirectionCommon\ftnlsv.exe [234400 2016-10-03] (FabulaTech -> )
R2 ftscanmgrhv; C:\Program Files (x86)\VMware\ScannerRedirection\ftscanmgrhv.exe [6331296 2016-10-18] (FabulaTech -> )
R2 hasplms; C:\WINDOWS\system32\hasplms.exe [4665168 2015-09-24] (SafeNet, Inc. -> SafeNet Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
S2 Intergraph Licensing Service; C:\Program Files (x86)\Intergraph\Licensing\11.10.1\Program\lmgrd.exe [1413456 2012-08-03] (Flexera Software LLC -> Flexera Software LLC.)
U2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6970968 2020-07-08] (Malwarebytes Inc -> Malwarebytes)
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-03-26] (Nitro PDF Software -> Nitro PDF Software)
R2 ProtectDeviceSvc; C:\Program Files (x86)\FLIR Systems\ATS-US\ProtectDeviceSvc\ProtectDeviceSvc.exe [93184 2010-03-18] (FLIR Systems Inc.) [File not signed]
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5930136 2020-05-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 SentinelKeysServer; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe [374304 2011-09-22] (SafeNet, Inc. -> SafeNet, Inc.)
R2 SentinelProtectionServer; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe [1259040 2011-09-22] (SafeNet, Inc. -> SafeNet, Inc)
R2 SentinelSecurityRuntime; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe [292384 2011-09-22] (SafeNet, Inc. -> SafeNet, Inc.)
R2 T3Srv; C:\Program Files\FLIR Systems\FLIR Device Drivers\FLIR T3Srv\sysx64\T3Srv.exe [788256 2015-08-31] (FLIR Systems AB -> FLIR)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [12097024 2019-11-06] (TeamViewer GmbH -> TeamViewer Germany GmbH)
S2 UTSCSI; C:\Windows\SysWOW64\UTSCSI.EXE [0 2012-06-11] () <==== ATTENTION (zero byte File/Folder)
R2 vmware-view-usbd; C:\Program Files (x86)\VMware\VMware Horizon View Client\vmware-view-usbd.exe [1169896 2016-11-24] (VMware, Inc. -> VMware, Inc.)
R2 vmwsprrdpwks; C:\Program Files (x86)\Common Files\VMware\SerialPortRedirection\Client\vmwsprrdpwks.exe [275872 2016-10-18] (FabulaTech -> VMware)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4098056 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [113992 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [21648880 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [674288 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [102912 2015-05-28] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2016-06-15] (Disc Soft Ltd -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2016-06-15] (Disc Soft Ltd -> Disc Soft Ltd)
R1 dtsoftbus01; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [271424 2012-01-19] (DT Soft Ltd -> DT Soft Ltd)
R2 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [170640 2010-12-21] (ESET, spol. s r.o. -> ESET)
R1 ehdrv; C:\WINDOWS\System32\DRIVERS\ehdrv.sys [141264 2010-12-21] (ESET, spol. s r.o. -> ESET)
R2 epfwwfpr; C:\WINDOWS\System32\DRIVERS\epfwwfpr.sys [125296 2010-12-21] (ESET, spol. s r.o. -> ESET)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-07-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S0 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-07-08] (Malwarebytes Inc -> Malwarebytes)
R2 Sentinel64; C:\WINDOWS\System32\Drivers\Sentinel64.sys [145448 2009-09-17] (SafeNet, Inc. -> SafeNet, Inc.)
R3 VBAudioVACMME; C:\WINDOWS\System32\drivers\vbaudio_cable64_win7.sys [41192 2014-09-02] (Vincent Burel -> Windows (R) Win 7 DDK provider)
R1 veracrypt; C:\WINDOWS\System32\drivers\veracrypt.sys [828256 2019-11-07] (IDRIX SARL -> IDRIX)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46472 2019-03-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [333784 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [62432 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
U3 avgbdisk; no ImagePath
U4 idsvc; no ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ===================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-07-13 07:32 - 2020-07-13 07:34 - 000045206 _____ C:\Users\G IS\Desktop\FRST.txt
2020-07-13 07:31 - 2020-07-13 07:33 - 000000000 ____D C:\FRST
2020-07-13 07:03 - 2020-07-13 07:03 - 002292736 _____ (Farbar) C:\Users\G IS\Desktop\FRST64.exe
2020-07-09 08:11 - 2020-07-09 08:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2020-07-08 15:22 - 2020-07-08 15:22 - 000000000 ____D C:\Users\G IS\Doctor Web
2020-07-08 15:22 - 2020-07-08 15:22 - 000000000 ____D C:\ProgramData\Doctor Web
2020-07-08 15:10 - 2020-07-08 15:10 - 000003168 _____ C:\WINDOWS\system32\Tasks\AdwCleaner_onReboot
2020-07-08 15:08 - 2020-07-08 15:10 - 000000000 ____D C:\AdwCleaner
2020-07-08 14:20 - 2020-07-08 14:20 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2020-07-08 14:20 - 2020-07-08 14:20 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2020-07-08 14:20 - 2020-07-08 14:20 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2020-07-08 14:20 - 2020-07-08 14:20 - 000044552 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2020-07-08 14:15 - 2020-07-13 07:01 - 000000000 ____D C:\Users\G IS\AppData\LocalLow\IGDump
2020-07-08 14:14 - 2020-07-08 14:14 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2020-07-08 14:14 - 2020-07-08 14:14 - 000001993 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2020-07-08 14:14 - 2020-07-08 14:14 - 000001981 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2020-07-08 14:14 - 2020-07-08 14:14 - 000001981 _____ C:\ProgramData\Desktop\Malwarebytes.lnk
2020-07-08 14:14 - 2020-07-08 14:14 - 000000000 ____D C:\Users\G IS\AppData\Local\mbam
2020-07-08 14:14 - 2020-07-08 14:13 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2020-07-08 14:14 - 2020-07-08 14:13 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2020-07-08 14:13 - 2020-07-08 14:13 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-07-08 10:48 - 2020-07-08 10:48 - 221978264 _____ C:\Users\G IS\Desktop\66sxg6to.exe
2020-07-08 10:38 - 2020-07-08 10:38 - 008420016 _____ (Malwarebytes) C:\Users\G IS\Desktop\adwcleaner_8.0.6.exe
2020-07-08 07:55 - 2020-07-08 07:55 - 000000000 ____D C:\Program Files\Malwarebytes
2020-07-06 13:57 - 2020-07-06 13:57 - 002182432 _____ C:\Users\G IS\Desktop\TSAF-D-20-00029_R3.pdf
2020-07-06 10:40 - 2020-07-06 10:41 - 000000000 ____D C:\Users\G IS\Desktop\Hive
2020-07-06 07:45 - 2020-07-06 07:45 - 000000000 ____D C:\Users\Public\Documents\Steam
2020-07-06 07:45 - 2020-07-06 07:45 - 000000000 ____D C:\Users\G IS\AppData\Local\Desperados III
2020-07-06 07:45 - 2020-07-06 07:45 - 000000000 ____D C:\ProgramData\Documents\Steam
2020-07-06 07:44 - 2020-07-06 07:44 - 000000000 ____D C:\Users\G IS\AppData\LocalLow\Mimimi
2020-07-06 07:42 - 2020-07-06 07:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Desperados III
2020-07-03 09:45 - 2020-07-03 10:35 - 000061759 _____ C:\Users\G IS\Desktop\19_temp.xlsx
2020-07-02 10:21 - 2020-07-02 10:31 - 000457343 _____ C:\Users\G IS\Desktop\English_Editing_Invoice_MDPI_english-20199_172.98EUR (1).pdf
2020-07-01 13:32 - 2020-07-01 13:32 - 000415838 _____ C:\Users\G IS\Desktop\Eticky kodex SAV 2018.pdf
2020-07-01 13:26 - 2020-07-01 13:26 - 000525738 _____ C:\Users\G IS\Desktop\Zap. c.15 RR_Pokyn c.1_priloha.pdf
2020-07-01 13:26 - 2020-07-01 13:26 - 000254867 _____ C:\Users\G IS\Desktop\prezencka_RR jun2020.pdf
2020-07-01 11:37 - 2020-07-01 11:37 - 001110455 _____ C:\Users\G IS\Desktop\Project-Uprava1_APVV-19-0606.pdf
2020-07-01 07:22 - 2020-07-01 07:22 - 014690863 _____ C:\Users\G IS\Desktop\DIPLOMOVA PRACE_Landa.pdf
2020-06-23 12:05 - 2020-06-23 12:05 - 000270287 _____ C:\Users\G IS\Desktop\Usmernenie riaditelky_COVID-19_jun2020.pdf
2020-06-23 08:59 - 2020-06-23 08:59 - 003203166 _____ C:\Users\G IS\Desktop\Authorship+form_imprints various - predpripravene.pdf
2020-06-22 10:12 - 2020-07-06 07:43 - 000000000 ____D C:\Users\G IS\Desktop\plocha
2020-06-22 10:00 - 2020-06-23 09:28 - 000000000 ____D C:\Users\G IS\Desktop\rev2
2020-06-18 14:11 - 2020-06-18 14:11 - 000003888 _____ C:\Users\G IS\AppData\Local\recently-used.xbel
2020-06-17 06:52 - 2020-06-05 23:03 - 000835480 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-06-17 06:52 - 2020-06-05 23:03 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-06-16 15:30 - 2020-06-16 15:30 - 000000000 ____D C:\Users\G IS\AppData\Roaming\StatSoft
2020-06-16 13:29 - 2020-06-22 12:56 - 000000000 ____D C:\Users\G IS\Desktop\TSAF-D-20-00029
2020-06-16 13:29 - 2020-06-16 13:29 - 004336245 _____ C:\Users\G IS\Desktop\TSAF-D-20-00029.zip
2020-06-16 08:13 - 2020-06-16 08:13 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 019851776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 019812864 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 018029056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 011608064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 009712640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 007012864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 006292480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 005909504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 004470272 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2020-06-16 08:13 - 2020-06-16 08:13 - 004129416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 003822592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 003525608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 003515392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 003365376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2020-06-16 08:13 - 2020-06-16 08:13 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2020-06-16 08:13 - 2020-06-16 08:13 - 002494744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 002230240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 002204160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 002190648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001704448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcndmgr.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001539072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2020-06-16 08:13 - 2020-06-16 08:13 - 001497400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001410048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmc.exe
2020-06-16 08:13 - 2020-06-16 08:13 - 001344512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMNetMgr.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001316352 _____ (Microsoft Corporation) C:\WINDOWS\system32\srmclient.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001272160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001151824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001112576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMNetMgr.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001099608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 001012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000940544 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srmclient.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000868352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2fs.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapi3.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000832512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdosys.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000747832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000740352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000739840 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscsvc.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000694784 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000686080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\srmscan.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msra.exe
2020-06-16 08:13 - 2020-06-16 08:13 - 000571904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaaut.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2020-06-16 08:13 - 2020-06-16 08:13 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpprefcl.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000555520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000549376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSCOMEX.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2020-06-16 08:13 - 2020-06-16 08:13 - 000484864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psisdecd.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000478208 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\SysWOW64\wvc.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000466944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srmscan.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2020-06-16 08:13 - 2020-06-16 08:13 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\WalletService.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswmdm.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000420352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000361472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\termmgr.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassdo.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswmdm.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Feedback.Analog.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000338944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WlanMM.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000267776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000248320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VAN.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wavemsp.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpg2splt.ax
2020-06-16 08:13 - 2020-06-16 08:13 - 000199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmidx.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cic.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000146944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmidx.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000133120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasrecst.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasnap.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkspbrokerAx.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000083600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2020-06-16 08:13 - 2020-06-16 08:13 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasads.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeUISrv.exe
2020-06-16 08:13 - 2020-06-16 08:13 - 000028368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SecurityCenterBrokerPS.dll
2020-06-16 08:13 - 2020-06-16 08:13 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 025902080 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 008015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 007760384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 007268864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 005765144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 004858880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 004610560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 003398656 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-06-16 08:12 - 2020-06-16 08:12 - 002281472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcndmgr.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 002184504 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 001803776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 001637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 001416224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 001397560 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 001314304 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagperf.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 001284608 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 001215488 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 001193984 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 001138688 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 001077048 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 001066496 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdosys.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000994304 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000992256 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2fs.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapi3.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 000897536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000893952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windowsperformancerecordercontrol.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000783496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000740664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DismApi.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000692224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000684856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000674304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaaut.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000651776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000632320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000619008 _____ (Microsoft Corporation) C:\WINDOWS\system32\azroles.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\psisdecd.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000593424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000575488 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\system32\wvc.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\msTextPrediction.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 000513536 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\azroles.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000498176 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedRealitySvc.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassdo.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000453944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 000426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\termmgr.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000423424 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000407864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwizeng.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000405936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000398336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMM.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000398336 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000384512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\CXHProvisioningServer.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000271360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpviewerax.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000260096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wavemsp.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg2splt.ax
2020-06-16 08:12 - 2020-06-16 08:12 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\FileHistory.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpRelayTransport.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000223544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Dism.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 000211256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\cic.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000204008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityCenterBroker.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000199992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 000196096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000193592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasrecst.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprofm.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000150328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasnap.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000130112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkspbrokerAx.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000121856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaatext.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFolders.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 000099712 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe
2020-06-16 08:12 - 2020-06-16 08:12 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000093448 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwanRadioManager.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2020-06-16 08:12 - 2020-06-16 08:12 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasads.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000041864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityCenterBrokerPS.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DMAlertListener.ProxyStub.dll
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-06-16 08:12 - 2020-06-16 08:12 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-06-16 08:11 - 2020-06-16 08:12 - 000380728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 009931576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 007604592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 006526448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 006435840 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 006091048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 005195432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 005111808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 005004344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 004565248 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 003368104 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 002831872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 002798592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2020-06-16 08:11 - 2020-06-16 08:11 - 002583496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001743680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001654960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001649152 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001393952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001283072 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001261568 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001260744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001250816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001153024 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowsperformancerecordercontrol.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001100288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001055184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 001003832 _____ (Microsoft Corporation) C:\WINDOWS\system32\DismApi.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000932256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000929280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000899584 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnostics.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000894024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000892416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000892048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000797464 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000782336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000777216 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000760296 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BTAGService.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000696832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000690176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkObjCore.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000666624 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000628408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000614400 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000572200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000564496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StateRepository.Core.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000561464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2020-06-16 08:11 - 2020-06-16 08:11 - 000557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000522240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000518456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000508720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000508216 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizeng.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000467952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000461112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000451864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000440832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprt.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000357176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpr.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpviewerax.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-06-16 08:11 - 2020-06-16 08:11 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2020-06-16 08:11 - 2020-06-16 08:11 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\RASMM.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000287232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Preview.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000280376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dism.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000259776 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkEd.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000221496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000194560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psr.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000190048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000186368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdigest.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000179512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2020-06-16 08:11 - 2020-06-16 08:11 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaatext.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000165832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000165296 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000165192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSM.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000132424 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000129600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkStatus.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMM.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleprn.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000108856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000090952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000089344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcEpMap.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000063288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollCtrl.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlthunk.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2020-06-16 08:11 - 2020-06-16 08:11 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryCore.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2020-06-16 08:11 - 2020-06-16 08:11 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 007911176 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 007266080 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 006066808 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 005283264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 004012032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Service.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 003726848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-06-16 08:10 - 2020-06-16 08:10 - 003712000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 003581240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-06-16 08:10 - 2020-06-16 08:10 - 003187200 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 002716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-06-16 08:10 - 2020-06-16 08:10 - 002656256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 002289664 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 002235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001942528 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001919488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001751040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001683968 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskFlowDataEngine.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001583104 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001486336 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2020-06-16 08:10 - 2020-06-16 08:10 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001447424 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2020-06-16 08:10 - 2020-06-16 08:10 - 001274128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryPS.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001158144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001155944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2020-06-16 08:10 - 2020-06-16 08:10 - 001073664 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 001007104 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000931840 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkObjCore.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-06-16 08:10 - 2020-06-16 08:10 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000826368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2020-06-16 08:10 - 2020-06-16 08:10 - 000736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000722072 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000716320 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000648192 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-06-16 08:10 - 2020-06-16 08:10 - 000548984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000531768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2020-06-16 08:10 - 2020-06-16 08:10 - 000472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-06-16 08:10 - 2020-06-16 08:10 - 000427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000425056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000394752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000242688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\psr.exe
2020-06-16 08:10 - 2020-06-16 08:10 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpdMtp.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000209216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSM.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000201528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SIUF.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3mm.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpdMtpUS.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleprn.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2020-06-16 08:10 - 2020-06-16 08:10 - 000128312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2020-06-16 08:10 - 2020-06-16 08:10 - 000127064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000104248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanRadioManager.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxGipRadioManager.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollCtrl.exe
2020-06-16 08:10 - 2020-06-16 08:10 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\NfcRadioMedia.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnosticsTool.exe
2020-06-16 08:10 - 2020-06-16 08:10 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\atlthunk.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2020-06-16 08:10 - 2020-06-16 08:10 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2020-06-16 07:31 - 2020-06-16 07:32 - 000000000 ____D C:\Users\G IS\Desktop\turnedontimesview
2020-06-16 07:21 - 2020-05-15 06:29 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-06-16 07:21 - 2020-05-15 06:10 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-06-16 07:05 - 2020-07-03 08:27 - 000000000 ____D C:\Users\G IS\Desktop\HomeOffice
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-07-13 07:29 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-07-13 06:58 - 2016-04-21 08:40 - 000000000 ____D C:\Users\G IS\AppData\Local\CrashDumps
2020-07-13 06:56 - 2012-08-13 09:48 - 000000000 ____D C:\Users\G IS\AppData\Roaming\Skype
2020-07-10 11:29 - 2020-05-18 13:48 - 000000000 ____D C:\Users\G IS
2020-07-10 11:08 - 2020-05-18 13:30 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-07-10 10:18 - 2020-05-20 08:50 - 000000000 ____D C:\Users\G IS\AppData\Local\Deployment
2020-07-10 08:42 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-07-10 07:55 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-07-10 06:58 - 2020-05-18 14:12 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2020-07-09 12:42 - 2020-05-18 13:48 - 000940136 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-07-09 12:42 - 2019-03-19 06:50 - 000000000 ____D C:\WINDOWS\INF
2020-07-09 12:36 - 2020-05-18 14:12 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-07-09 12:36 - 2017-01-03 09:02 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2020-07-09 12:20 - 2017-01-03 11:56 - 000000000 ____D C:\Program Files (x86)\Auslogics
2020-07-09 08:13 - 2017-05-03 08:56 - 000000000 ____D C:\Program Files (x86)\Dropbox
2020-07-09 07:20 - 2020-05-18 14:12 - 000004156 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1582722813
2020-07-08 15:11 - 2019-03-19 06:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2020-07-08 14:52 - 2020-05-18 13:48 - 000000000 ____D C:\Users\Administrator
2020-07-08 14:52 - 2017-01-03 11:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2020-07-08 14:52 - 2013-05-23 14:14 - 000000000 ____D C:\Program Files\ExpertGPS 4.84-Patch
2020-07-08 14:52 - 2013-02-21 10:49 - 000000000 ____D C:\Program Files (x86)\AddLyrics
2020-07-08 14:51 - 2020-05-18 14:12 - 000000000 ____D C:\WINDOWS\system32\Tasks\Auslogics
2020-07-08 14:14 - 2019-03-19 06:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-07-08 14:03 - 2019-06-14 14:31 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-07-08 14:03 - 2015-11-11 15:23 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-07-08 06:53 - 2012-01-02 13:43 - 000001117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-07-07 14:29 - 2017-11-16 08:58 - 000000000 ____D C:\Users\G IS\AppData\LocalLow\Mozilla
2020-07-06 14:12 - 2020-06-10 13:53 - 000002497 _____ C:\Users\G IS\Desktop\Boardpace Login.lnk
2020-07-03 14:28 - 2017-06-07 09:06 - 000000000 ____D C:\Users\G IS\AppData\Roaming\Messenger for Desktop
2020-07-03 12:15 - 2014-06-10 13:50 - 000000000 ____D C:\Users\G IS\AppData\Roaming\RStudio
2020-07-03 12:15 - 2014-06-10 09:30 - 000000000 ____D C:\Users\G IS\AppData\Local\RStudio-Desktop
2020-07-03 11:17 - 2017-02-02 11:10 - 001324032 _____ C:\Users\G IS\AppData\Local\WebpageIcons.db
2020-07-03 08:42 - 2020-01-23 10:12 - 000000000 ____D C:\Users\G IS\Desktop\SPME_2019
2020-07-03 08:27 - 2020-01-30 14:50 - 000000000 ____D C:\Users\G IS\Desktop\sprava
2020-07-02 13:45 - 2019-05-16 12:23 - 000000000 ____D C:\Users\G IS\AppData\Local\BraveSoftware
2020-07-02 07:05 - 2019-05-16 12:23 - 000002430 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2020-07-01 11:37 - 2013-03-07 15:56 - 000000000 ____D C:\Users\G IS\AppData\Roaming\Nitro PDF
2020-07-01 07:30 - 2020-05-18 14:12 - 000004190 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled Autoupdate 1582882749
2020-07-01 07:30 - 2020-02-28 11:39 - 000001481 _____ C:\Users\G IS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prehliadač Opera GX.lnk
2020-07-01 07:30 - 2011-11-21 20:27 - 000002505 _____ C:\Users\G IS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-07-01 06:50 - 2017-01-13 09:17 - 000002151 _____ C:\Users\G IS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\f.lux.lnk
2020-06-23 13:46 - 2012-01-04 10:47 - 000000000 ____D C:\Users\G IS\Documents\Lexicon
2020-06-23 07:24 - 2020-05-18 14:12 - 000003956 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1485430046
2020-06-23 07:24 - 2017-01-26 13:27 - 000000873 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prehliadač Opera.lnk
2020-06-23 06:57 - 2020-05-18 14:45 - 000003364 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2114313254-837077460-3471302094-1000
2020-06-23 06:56 - 2020-05-18 14:45 - 000000000 ___RD C:\Users\G IS\OneDrive
2020-06-23 06:56 - 2020-05-18 13:48 - 000002348 _____ C:\Users\G IS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-06-19 12:04 - 2014-06-10 12:57 - 000000000 ____D C:\Users\G IS\Documents\Knižnica Calibre
2020-06-19 08:23 - 2020-06-03 07:37 - 000000000 ____D C:\Users\G IS\.katrain
2020-06-18 14:04 - 2020-05-26 13:19 - 000000000 ____D C:\Users\G IS\.dbus-keyrings
2020-06-17 11:21 - 2020-06-02 08:01 - 000000000 ____D C:\Users\G IS\AppData\Roaming\Sabaki
2020-06-17 06:53 - 2020-05-18 14:35 - 000000000 ___RD C:\Users\G IS\3D Objects
2020-06-17 06:53 - 2020-05-18 14:17 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-06-17 06:53 - 2012-01-24 11:59 - 000000000 ___RD C:\Users\G IS\Virtual Machines
2020-06-17 06:52 - 2020-05-18 13:30 - 000723688 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-06-16 15:37 - 2019-03-19 06:52 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2020-06-16 15:37 - 2019-03-19 06:52 - 000000000 ___SD C:\WINDOWS\system32\F12
2020-06-16 15:37 - 2019-03-19 06:52 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2020-06-16 15:37 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-06-16 15:37 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2020-06-16 15:37 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2020-06-16 15:37 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SystemResources
2020-06-16 15:37 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-06-16 15:37 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-06-16 15:37 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\Com
2020-06-16 15:37 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2020-06-16 15:36 - 2019-03-19 12:56 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2020-06-16 15:36 - 2019-03-19 12:56 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2020-06-16 15:36 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-06-16 15:36 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-06-16 15:30 - 2012-02-22 15:29 - 000002794 _____ C:\Users\G IS\AppData\Roaming\WWB7_32.DAT
2020-06-16 08:27 - 2019-03-19 06:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-06-16 08:10 - 2020-05-18 13:38 - 002876416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2020-06-16 06:56 - 2019-11-14 13:59 - 000000000 ____D C:\Users\G IS\Desktop\Janka_Grafy
==================== Files in the root of some directories ========
2019-02-07 12:09 - 2019-02-07 12:09 - 000000003 _____ () C:\Users\G IS\AppData\Roaming\.ptbt0
2013-04-02 15:51 - 2013-04-02 16:48 - 000000100 _____ () C:\Users\G IS\AppData\Roaming\Camdata.ini
2013-04-02 15:51 - 2013-04-02 16:48 - 000000408 _____ () C:\Users\G IS\AppData\Roaming\CamLayout.ini
2013-04-02 15:51 - 2013-04-02 16:48 - 000000408 _____ () C:\Users\G IS\AppData\Roaming\CamShapes.ini
2013-04-02 15:51 - 2013-04-02 16:48 - 000004516 _____ () C:\Users\G IS\AppData\Roaming\CamStudio.cfg
2012-02-02 09:26 - 2013-03-26 15:02 - 000000200 _____ () C:\Users\G IS\AppData\Roaming\default.rss
2012-01-16 11:22 - 2012-01-16 11:22 - 000000268 ___RH () C:\Users\G IS\AppData\Roaming\Themes
2012-01-16 11:22 - 2012-01-16 11:22 - 000000268 ___RH () C:\Users\G IS\AppData\Roaming\Track Settings
2012-01-16 11:22 - 2012-01-16 11:22 - 000000268 ___RH () C:\Users\G IS\AppData\Roaming\Trance Pad
2012-02-22 15:29 - 2020-06-16 15:30 - 000002794 _____ () C:\Users\G IS\AppData\Roaming\WWB7_32.DAT
2012-08-28 13:10 - 2012-08-28 13:10 - 000000600 _____ () C:\Users\G IS\AppData\Local\PUTTY.RND
2020-06-18 14:11 - 2020-06-18 14:11 - 000003888 _____ () C:\Users\G IS\AppData\Local\recently-used.xbel
2011-12-07 13:29 - 2020-02-27 14:36 - 000007641 _____ () C:\Users\G IS\AppData\Local\Resmon.ResmonCfg
2008-02-05 14:28 - 2008-02-05 14:28 - 000000051 _____ () C:\Users\G IS\AppData\Local\setup.txt
2017-02-02 11:10 - 2020-07-03 11:17 - 001324032 _____ () C:\Users\G IS\AppData\Local\WebpageIcons.db
==================== FCheck ================================
(If an entry is included in the fixlist, the file/folder will be moved.)
FCheck: C:\WINDOWS\SysWOW64\UTSCSI.EXE [2012-06-11] <==== ATTENTION (zero byte File/Folder)
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
- Přílohy
-
- Addition.zip
- (28.71 KiB) Staženo 71 x
Re: Prestanú fungovať prehliadače až po čase kompletne zamrzne PC
ahoj,
citat:
Tvorba fixlistu pro FRST
•Spustte poznamkovy blok (Start-spustit-notepad)
•Zkopirujte skript >>
•Ulozte vytvoreny TXT jako fixlist.txt
•Presunte vytvoreny fixlist vedle FRST
Spustte znovu FRST.exe
•Kliknete na Fix
•Probehne oprava a vytvori log Fixlog.txt
Restart PC a dejte mi sem fixlog.txt
citat:
Tvorba fixlistu pro FRST
•Spustte poznamkovy blok (Start-spustit-notepad)
•Zkopirujte skript >>
Kód: Vybrat vše
Start
GroupPolicy: Restriction ? <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
S2 UTSCSI; C:\Windows\SysWOW64\UTSCSI.EXE [0 2012-06-11] () <==== ATTENTION (zero byte File/Folder)
Task: {48E35FC2-816F-4AE4-B5F8-D6763D1D8A59} - \Microsoft\Windows\Setup\EOSNotify -> No File <==== ATTENTION
Task: {5A6AF334-34D2-4E8A-85C8-DF5071ED9E80} - \Microsoft\Windows\Setup\EOSNotify2 -> No File <==== ATTENTION
U3 avgbdisk; no ImagePath
U4 idsvc; no ImagePath
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
AlternateDataStreams: C:\ProgramData\TEMP:A85D770C [120]
AlternateDataStreams: C:\Users\G IS\Desktop\Janka_Grafy:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\G IS\Desktop\Janka_Grafy:com.dropbox.attrs [54]
FirewallRules: [{EBB400ED-B6A7-4526-B08D-9A605F3C3837}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe () [File not signed]
FirewallRules: [{CB2A1BD9-D205-4C45-93B7-F66CB55F3DAD}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe () [File not signed]
EmptyTemp:
Reboot:
End
•Presunte vytvoreny fixlist vedle FRST
Spustte znovu FRST.exe
•Kliknete na Fix
•Probehne oprava a vytvori log Fixlog.txt
Restart PC a dejte mi sem fixlog.txt
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Prestanú fungovať prehliadače až po čase kompletne zamrzne PC
Fix result of Farbar Recovery Scan Tool (x64) Version: 08-07-2020 01
Ran by GIS (13-07-2020 09:05:50) Run:1
Running from C:\Users\G IS\Desktop
Loaded Profiles: GIS
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
GroupPolicy: Restriction ? <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
S2 UTSCSI; C:\Windows\SysWOW64\UTSCSI.EXE [0 2012-06-11] () <==== ATTENTION (zero byte File/Folder)
Task: {48E35FC2-816F-4AE4-B5F8-D6763D1D8A59} - \Microsoft\Windows\Setup\EOSNotify -> No File <==== ATTENTION
Task: {5A6AF334-34D2-4E8A-85C8-DF5071ED9E80} - \Microsoft\Windows\Setup\EOSNotify2 -> No File <==== ATTENTION
U3 avgbdisk; no ImagePath
U4 idsvc; no ImagePath
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
AlternateDataStreams: C:\ProgramData\TEMP:A85D770C [120]
AlternateDataStreams: C:\Users\G IS\Desktop\Janka_Grafy:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\G IS\Desktop\Janka_Grafy:com.dropbox.attrs [54]
FirewallRules: [{EBB400ED-B6A7-4526-B08D-9A605F3C3837}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe () [File not signed]
FirewallRules: [{CB2A1BD9-D205-4C45-93B7-F66CB55F3DAD}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe () [File not signed]
EmptyTemp:
Reboot:
End
*****************
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => moved successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
HKLM\System\CurrentControlSet\Services\UTSCSI => removed successfully
UTSCSI => service removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{48E35FC2-816F-4AE4-B5F8-D6763D1D8A59}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{48E35FC2-816F-4AE4-B5F8-D6763D1D8A59}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\EOSNotify" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5A6AF334-34D2-4E8A-85C8-DF5071ED9E80}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5A6AF334-34D2-4E8A-85C8-DF5071ED9E80}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\EOSNotify2" => removed successfully
HKLM\System\CurrentControlSet\Services\avgbdisk => removed successfully
avgbdisk => service removed successfully
HKLM\System\CurrentControlSet\Services\idsvc => removed successfully
idsvc => service removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avg => removed successfully
C:\ProgramData\TEMP => ":A85D770C" ADS removed successfully
C:\Users\G IS\Desktop\Janka_Grafy => ":com.dropbox.attributes" ADS removed successfully
C:\Users\G IS\Desktop\Janka_Grafy => ":com.dropbox.attrs" ADS removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{EBB400ED-B6A7-4526-B08D-9A605F3C3837}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CB2A1BD9-D205-4C45-93B7-F66CB55F3DAD}" => removed successfully
=========== EmptyTemp: ==========
BITS transfer queue => 10248192 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 52967622 B
Java, Flash, Steam htmlcache => 245917607 B
Windows/system/drivers => 114516426 B
Edge => 1892568 B
Chrome => 119018724 B
Firefox => 146577231 B
Opera => 84149207 B
Temp, IE cache, history, cookies, recent:
Default => 9436 B
Users => 9436 B
ProgramData => 9436 B
Public => 9436 B
systemprofile => 9436 B
systemprofile32 => 9436 B
LocalService => 50698 B
NetworkService => 95542 B
G IS => 87965496 B
Administrator => 94585723 B
RecycleBin => 2081492 B
EmptyTemp: => 915.6 MB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 09:08:56 ====
Ran by GIS (13-07-2020 09:05:50) Run:1
Running from C:\Users\G IS\Desktop
Loaded Profiles: GIS
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
GroupPolicy: Restriction ? <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
S2 UTSCSI; C:\Windows\SysWOW64\UTSCSI.EXE [0 2012-06-11] () <==== ATTENTION (zero byte File/Folder)
Task: {48E35FC2-816F-4AE4-B5F8-D6763D1D8A59} - \Microsoft\Windows\Setup\EOSNotify -> No File <==== ATTENTION
Task: {5A6AF334-34D2-4E8A-85C8-DF5071ED9E80} - \Microsoft\Windows\Setup\EOSNotify2 -> No File <==== ATTENTION
U3 avgbdisk; no ImagePath
U4 idsvc; no ImagePath
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
AlternateDataStreams: C:\ProgramData\TEMP:A85D770C [120]
AlternateDataStreams: C:\Users\G IS\Desktop\Janka_Grafy:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\G IS\Desktop\Janka_Grafy:com.dropbox.attrs [54]
FirewallRules: [{EBB400ED-B6A7-4526-B08D-9A605F3C3837}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe () [File not signed]
FirewallRules: [{CB2A1BD9-D205-4C45-93B7-F66CB55F3DAD}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe () [File not signed]
EmptyTemp:
Reboot:
End
*****************
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => moved successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
HKLM\System\CurrentControlSet\Services\UTSCSI => removed successfully
UTSCSI => service removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{48E35FC2-816F-4AE4-B5F8-D6763D1D8A59}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{48E35FC2-816F-4AE4-B5F8-D6763D1D8A59}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\EOSNotify" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5A6AF334-34D2-4E8A-85C8-DF5071ED9E80}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5A6AF334-34D2-4E8A-85C8-DF5071ED9E80}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\EOSNotify2" => removed successfully
HKLM\System\CurrentControlSet\Services\avgbdisk => removed successfully
avgbdisk => service removed successfully
HKLM\System\CurrentControlSet\Services\idsvc => removed successfully
idsvc => service removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw => removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avg => removed successfully
C:\ProgramData\TEMP => ":A85D770C" ADS removed successfully
C:\Users\G IS\Desktop\Janka_Grafy => ":com.dropbox.attributes" ADS removed successfully
C:\Users\G IS\Desktop\Janka_Grafy => ":com.dropbox.attrs" ADS removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{EBB400ED-B6A7-4526-B08D-9A605F3C3837}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CB2A1BD9-D205-4C45-93B7-F66CB55F3DAD}" => removed successfully
=========== EmptyTemp: ==========
BITS transfer queue => 10248192 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 52967622 B
Java, Flash, Steam htmlcache => 245917607 B
Windows/system/drivers => 114516426 B
Edge => 1892568 B
Chrome => 119018724 B
Firefox => 146577231 B
Opera => 84149207 B
Temp, IE cache, history, cookies, recent:
Default => 9436 B
Users => 9436 B
ProgramData => 9436 B
Public => 9436 B
systemprofile => 9436 B
systemprofile32 => 9436 B
LocalService => 50698 B
NetworkService => 95542 B
G IS => 87965496 B
Administrator => 94585723 B
RecycleBin => 2081492 B
EmptyTemp: => 915.6 MB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 09:08:56 ====
Re: Prestanú fungovať prehliadače až po čase kompletne zamrzne PC
OK, restartuj PC a napis, ci to este mrzne
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Prestanú fungovať prehliadače až po čase kompletne zamrzne PC
Bohužiaľ nepomohlo zamrzla najprv Opera, aj Chrome a nakoniec aj celý PC.
Re: Prestanú fungovať prehliadače až po čase kompletne zamrzne PC
toto moze byt aj HW problem
1. skontroluj disk s príkazového riadku spust chkdsk
pozri ci najde chyby
2. pozri na teplotu CPU
1. skontroluj disk s príkazového riadku spust chkdsk
pozri ci najde chyby
2. pozri na teplotu CPU
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Prestanú fungovať prehliadače až po čase kompletne zamrzne PC
1. Tak ten sken pomocou chkdsk sa ani nedokončil a to som ho skúšal dvakrát (v prílohe posielam screenshot)
2. Teplota CPU dosť kolíše. Väčšinou je priemerná 50°C a jedno jadro miestami vyskočí nad 60°C (ale to nieje často)
2. Teplota CPU dosť kolíše. Väčšinou je priemerná 50°C a jedno jadro miestami vyskočí nad 60°C (ale to nieje často)
- Přílohy
-
- chkdsk.jpg (46.85 KiB) Zobrazeno 2006 x
Re: Prestanú fungovať prehliadače až po čase kompletne zamrzne PC
disk ma chyby - spust s príkazového riadku chkdsk/r
odsuhlas spustenie pri dalsom starte a restartuj PC
ak to bude mozne chyby opravi
odsuhlas spustenie pri dalsom starte a restartuj PC
ak to bude mozne chyby opravi
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Prestanú fungovať prehliadače až po čase kompletne zamrzne PC
Vyzerá to tak že ten problém sa neodstránil. Je to divné, lebo pri štarte mi ukazuje že všetky disky sú v poriadku (mám raid, 4 disky ktoré sa navzájom zálohujú).
Je tu ešte nejaká možnosť (software) ktorú by som mohol skúsiť?
Je tu ešte nejaká možnosť (software) ktorú by som mohol skúsiť?
Re: Prestanú fungovať prehliadače až po čase kompletne zamrzne PC
Skus disky pretestovat s HDTune free
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Prestanú fungovať prehliadače až po čase kompletne zamrzne PC
Spustil som dvakrát Error scan a ani v jednom prípade sa nenašla chyba. Je to divné, ale problém pretrváva... PC naďalej mrzne alebo sa brutálne spomalí.
Re: Prestanú fungovať prehliadače až po čase kompletne zamrzne PC
ostava len patrat
1. s príkazového riadku spust sfc/scannow
2. aka je velkost adresara plocha
3. ked PC zamrzne, da sa vyvolat taskmgr ? ctrl/alt/del
1. s príkazového riadku spust sfc/scannow
2. aka je velkost adresara plocha
3. ked PC zamrzne, da sa vyvolat taskmgr ? ctrl/alt/del
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Prestanú fungovať prehliadače až po čase kompletne zamrzne PC
1. vyhodilo mi to chybu, log sa mi nedá pripojiť ako príloha
2. 3,7GB... to je asi dosť, ale vždy som mal bordel na ploche a nikdy to nebol problém
3. nie, pomôže len tvrdý reštart
Len tak pre istotu som dal hĺbkovo kontrolovať PC s NOD32... trvalo to strašne dlho a v priebehu som si všimol že našlo 37 infiltrácií. Bohužiaľ PC to nevydržal a test sa nedokončil. Nemôžem tu mať aj nejakú háveď ktorú FRST nezdetekoval?
2. 3,7GB... to je asi dosť, ale vždy som mal bordel na ploche a nikdy to nebol problém
3. nie, pomôže len tvrdý reštart
Len tak pre istotu som dal hĺbkovo kontrolovať PC s NOD32... trvalo to strašne dlho a v priebehu som si všimol že našlo 37 infiltrácií. Bohužiaľ PC to nevydržal a test sa nedokončil. Nemôžem tu mať aj nejakú háveď ktorú FRST nezdetekoval?
Re: Prestanú fungovať prehliadače až po čase kompletne zamrzne PC
2. rozhodne plochu vycisti, aby nepresahovala 500MB - staci mat na ploche link
restartuj PC do núdzového rezimu a
1. zopakuj akciu sfc/scannow
x. prescanuj znovu PC s NOD-om
restartuj PC do núdzového rezimu a
1. zopakuj akciu sfc/scannow
x. prescanuj znovu PC s NOD-om
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Prestanú fungovať prehliadače až po čase kompletne zamrzne PC
1. zopakoval som sfc/scannow v núdzovom režime a prebehlo to bez chyby
2. plocha je úplne vyčistená
3. včera som spustil sken s NOD-om a doteraz sa nedokončil. našlo však už len 1 infiltráciu, tie predchádzajúce našťastie boli už v karanténe (prevažne išlo o nejaký update µTorrent-u, čo je divné lebo som ho už asi dva roky nepoužíval)
2. plocha je úplne vyčistená
3. včera som spustil sken s NOD-om a doteraz sa nedokončil. našlo však už len 1 infiltráciu, tie predchádzajúce našťastie boli už v karanténe (prevažne išlo o nejaký update µTorrent-u, čo je divné lebo som ho už asi dva roky nepoužíval)