Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Kontrola PC - viry

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
Rostislav89
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 02 lis 2020 20:13
Bydliště: Tvrdonice, okr. Břeclav

Kontrola PC - viry

#1 Příspěvek od Rostislav89 »

Pěkně zdravím,

prosím o postup kontroly zda není zavirovaný PC. Než PC naběhne a dostal jsem se k tomuto požadavku uběhlo 30 min. Před pár dny jsem zjistil, že pamět vytěžuje služba Antimalware Service Executable. Tu jsem odepsal dle tohoto návodu "https://www.spajk.cz/zastavit-sluzbu-an ... xecutable/", ale PC stále pomalý.
Ještě mne napadlo, že zkusím reinstál ESET NOD, ale předem bych radši projel PC před viry. ESETEM jsem to už udělal...PC čistý :roll:

Může někdo pomoci?

Děkuji
Rostislav
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118275
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Kontrola PC - viry

#2 Příspěvek od Rudy »

Zdravím!
Zkusíme to. Dejte logy FRST+Addition: https://forum.viry.cz/viewtopic.php?f=13&t=154679 .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Rostislav89
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 02 lis 2020 20:13
Bydliště: Tvrdonice, okr. Břeclav

Re: Kontrola PC - viry

#3 Příspěvek od Rostislav89 »

FRST:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 01-11-2020
Ran by R (administrator) on R-PC (03-11-2020 06:28:12)
Running from C:\Users\R\Desktop
Loaded Profiles: R
Platform: Microsoft Windows 10 Pro Version 2004 19041.572 (X86) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

Addition:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 01-11-2020
Ran by R (02-11-2020 21:59:16)
Running from C:\Users\R\Desktop
Microsoft Windows 10 Pro Version 2004 19041.572 (X86) (2020-09-25 20:43:06)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2850982705-188599128-418802589-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2850982705-188599128-418802589-503 - Limited - Disabled)
Guest (S-1-5-21-2850982705-188599128-418802589-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2850982705-188599128-418802589-1003 - Limited - Enabled)
R (S-1-5-21-2850982705-188599128-418802589-1000 - Administrator - Enabled) => C:\Users\R
WDAGUtilityAccount (S-1-5-21-2850982705-188599128-418802589-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET Security (Enabled - Up to date) {89B55CC4-3881-78B2-11E2-479AE0371896}
AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Security (Enabled - Up to date) {885D845F-AF19-0124-FECE-FFF49D00F440}
AS: ESET Security (Enabled - Up to date) {333C65BB-8923-0EAA-C47E-C486E687BEFD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Firewall (Enabled) {B18EDDE1-72EE-79EA-3ABD-EEAF1EE45FED}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0405-0000-0000000FF1CE}_ENTERPRISE_{0A1FAC46-B899-421D-B1A2-470896DC45DB}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0405-0000-0000000FF1CE}_ENTERPRISE_{5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}) (Version: - Microsoft)
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0405-0000-0000000FF1CE}_ENTERPRISE_{E68DD413-B834-4923-8181-0A03B7555187}) (Version: - Microsoft)
CCleaner (HKLM\...\CCleaner) (Version: 5.63 - Piriform)
ESET Security (HKLM\...\{B89260FD-2E64-459B-B7F6-24009E730346}) (Version: 14.0.21.0 - ESET, spol. s r.o.)
Google Chrome (HKLM\...\Google Chrome) (Version: 86.0.4240.111 - Google LLC)
Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.36.31 - Google LLC) Hidden
Google Update Helper (HKLM\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.169 - Google Inc.) Hidden
Microsoft Edge (HKLM\...\Microsoft Edge) (Version: 86.0.622.58 - Microsoft Corporation)
Microsoft Edge Update (HKLM\...\Microsoft Edge Update) (Version: 1.3.137.99 - )
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Excel Viewer (HKLM\...\{95120000-003F-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2850982705-188599128-418802589-1000\...\OneDriveSetup.exe) (Version: 20.169.0823.0008 - Microsoft Corporation)
Ovládací panel NVIDIA 388.13 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 388.13 - NVIDIA Corporation) Hidden
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7572 - Realtek Semiconductor Corp.)
UltraViewer version 6.2.98 (HKLM\...\{E0FABD74-083B-47F4-AC5B-CA4237BF8913}_is1) (Version: 6.2.98 - DucFabulous)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
UpdateAssistant (HKLM\...\{A8CB3AA1-4ED7-4E95-BA0A-3DC927739A0E}) (Version: 1.24.0.0 - Microsoft Corporation) Hidden
Winamp (HKLM\...\Winamp) (Version: 5.8 - Winamp SA)
WinRAR 5.71 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.71.0 - win.rar GmbH)

Packages:
=========
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x86__8wekyb3d8bbwe [2020-04-04] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-02-11] (Microsoft Corporation) [MS Ad]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2217832 2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2020-10-26] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2020-10-26] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-10-27] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2020-10-26] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\R\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\d249d9ddd424b688\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default

==================== Loaded Modules (Whitelisted) =============

2020-09-25 21:20 - 2020-09-25 21:20 - 000096256 _____ (Microsoft Corporation) [File not signed] C:\WINDOWS\WinSxS\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.762_none_11ecb0ab9b2caf3c\ATL80.DLL

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

HKU\S-1-5-21-2850982705-188599128-418802589-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://seznam.cz/
SearchScopes: HKU\S-1-5-21-2850982705-188599128-418802589-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2850982705-188599128-418802589-1000 -> {123925CA-187C-4C0A-B99A-DC81209B3997} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_40139
SearchScopes: HKU\S-1-5-21-2850982705-188599128-418802589-1000 -> {1E0F6EB3-6518-4218-8043-7C5099F705EF} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-2850982705-188599128-418802589-1000 -> {2053F8CB-36FB-4FA2-9F0E-2A2692F97F9C} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_40139
SearchScopes: HKU\S-1-5-21-2850982705-188599128-418802589-1000 -> {2241ACB4-0C53-4BE2-81E4-D093EE2C5B24} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_40139
SearchScopes: HKU\S-1-5-21-2850982705-188599128-418802589-1000 -> {27F52E06-5064-4F44-9FEE-DBC16DC5B6F1} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-2850982705-188599128-418802589-1000 -> {4B304E12-A2F9-4382-997F-CBFDDB4C6993} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_40139
SearchScopes: HKU\S-1-5-21-2850982705-188599128-418802589-1000 -> {AC90C6C3-041D-47DF-B899-E6DFCFB17D1F} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_40139
SearchScopes: HKU\S-1-5-21-2850982705-188599128-418802589-1000 -> {EB876890-A326-4FAB-AA2B-2428310DA6BB} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_40139
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2018-09-15 12:35 - 2020-01-13 17:16 - 000000841 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 localhost

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2850982705-188599128-418802589-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
MpsSvc => Firewall Service is not running.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\StartupFolder: => "Adobe Gamma Loader.lnk"
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKU\S-1-5-21-2850982705-188599128-418802589-1000\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-2850982705-188599128-418802589-1000\...\StartupApproved\Run: => "OneDrive"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{CC59DE3D-6E13-4F8B-A658-BF503F521A58}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{526C3715-1931-4BCE-9B74-1D68383D8390}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{288D7B43-72DC-41F8-8D64-5A01C45D16A4}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{EB72A265-D849-4A12-9EA5-024CA461A428}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{66E09584-15E1-4A4D-BC77-409DF4839B69}] => (Allow) C:\Program Files\Winamp\winamp.exe (Winamp SA -> Winamp SA)
FirewallRules: [{38B809EF-9E46-4015-99FF-0812D883DC73}] => (Allow) C:\Program Files\Winamp\winamp.exe (Winamp SA -> Winamp SA)
FirewallRules: [{4E0F2C28-6409-44AF-821E-D9C2900916CF}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{990894D1-1BE8-4930-80AB-82982407D83F}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{65B6E866-7B0B-4F87-8BEA-5117339EA8C9}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

30-10-2020 20:36:37 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (11/02/2020 09:24:22 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program YourPhone.exe verze 1.20091.84.0 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: 8e4

Čas spuštění: 01d6b1497ccbd6bd

Čas ukončení: 4294967295

Cesta k aplikaci: C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20091.84.0_x86__8wekyb3d8bbwe\YourPhone.exe

ID hlášení: e8f11d06-469f-47fa-b04e-e59f046dee87

Úplný název balíčku s chybou: Microsoft.YourPhone_1.20091.84.0_x86__8wekyb3d8bbwe

ID aplikace relativní podle balíčku s chybou: App

Typ zablokování: Quiesce

Error: (11/02/2020 09:10:10 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Sklad (F:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)

Error: (11/02/2020 09:10:09 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Rezervováno systémem, protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)

Error: (11/02/2020 08:51:26 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Sklad (F:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)

Error: (11/02/2020 08:51:25 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Rezervováno systémem, protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)

Error: (11/02/2020 08:06:38 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program TextInputHost.exe verze 2001.22012.0.31 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: 1b48

Čas spuštění: 01d6b14b20513661

Čas ukončení: 4294967295

Cesta k aplikaci: C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe

ID hlášení: 16829ae4-ecd5-4701-89a1-45dba2848fe2

Úplný název balíčku s chybou: MicrosoftWindows.Client.CBS_120.2212.31.0_x86__cw5n1h2txyewy

ID aplikace relativní podle balíčku s chybou: InputApp

Typ zablokování: Cross-thread

Error: (11/02/2020 07:52:35 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program TextInputHost.exe verze 2001.22012.0.31 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.

ID procesu: e98

Čas spuštění: 01d6b1492e2e9f25

Čas ukončení: 4294967295

Cesta k aplikaci: C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe

ID hlášení: 98ab27e5-d111-4fc4-bc31-a19f5e63054c

Úplný název balíčku s chybou: MicrosoftWindows.Client.CBS_120.2212.31.0_x86__cw5n1h2txyewy

ID aplikace relativní podle balíčku s chybou: InputApp

Typ zablokování: Cross-thread

Error: (11/02/2020 07:36:08 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Optimalizátor úložiště nemohl dokončit opakovat operaci trim na Sklad (F:), protože: Požadovaná operace není podporována hardwarem, který zálohuje svazek. (0x8900002A)


System errors:
=============
Error: (11/02/2020 10:22:26 PM) (Source: DCOM) (EventID: 10010) (User: R-PC)
Description: Server Microsoft.Windows.Photos_2020.20090.1002.0_x86__8wekyb3d8bbwe!App.AppXy9rh3t8m2jfpvhhxp6y2ksgeq77vymbq.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (11/02/2020 08:37:36 PM) (Source: DCOM) (EventID: 10010) (User: R-PC)
Description: Server Microsoft.Windows.Photos_2020.20090.1002.0_x86__8wekyb3d8bbwe!App.AppXy9rh3t8m2jfpvhhxp6y2ksgeq77vymbq.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (11/02/2020 07:31:29 PM) (Source: DCOM) (EventID: 10010) (User: R-PC)
Description: Server Microsoft.YourPhone_1.20091.84.0_x86__8wekyb3d8bbwe!App.AppXvctmff39365zg14pgmystcwtys462fpa.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (11/02/2020 05:14:44 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Služba Windows Search přestala během spouštění reagovat.

Error: (11/02/2020 05:11:28 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: Server {E60687F7-01A1-40AA-86AC-DB1CBF673334} se v daném časovém limitu neregistroval u služby DCOM.

Error: (11/02/2020 05:09:41 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Služba AppX Deployment Service (AppXSVC) závisí na službě Služba State Repository, která neuspěla při spuštění v důsledku následující chyby:
Při spouštění služba uvízla ve spouštěcím stavu.

Error: (11/02/2020 05:09:35 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Služba Služba State Repository přestala během spouštění reagovat.

Error: (11/02/2020 05:09:35 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Služba Služba State Repository přestala během spouštění reagovat.


Windows Defender:
===================================
Date: 2020-10-27 19:36:42.1740000Z
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {808A276A-A3F9-4273-9074-C3DBD0040C2B}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\NETWORK SERVICE

Date: 2020-10-31 15:45:23.5120000Z
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.307.2162.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.17600.5
Kód chyby: 0x800705b4
Popis chyby: Daná operace se vrátila, protože vypršel časový limit.

Date: 2020-10-31 15:45:23.5120000Z
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.307.2162.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.17600.5
Kód chyby: 0x800705b4
Popis chyby: Daná operace se vrátila, protože vypršel časový limit.

Date: 2020-10-31 15:45:23.5120000Z
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.307.2162.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.17600.5
Kód chyby: 0x800705b4
Popis chyby: Daná operace se vrátila, protože vypršel časový limit.

Date: 2020-10-31 15:07:50.5190000Z
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.307.2162.0
Zdroj aktualizace: Server Microsoft Update
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.17600.5
Kód chyby: 0x80070643
Popis chyby: Při instalaci došlo k závažné chybě.

Date: 2020-10-31 00:00:23.0090000Z
Description:
Antivirová ochrana v programu Microsoft Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.307.2162.0
Zdroj aktualizace: Server Microsoft Update
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.17600.5
Kód chyby: 0x80070643
Popis chyby: Při instalaci došlo k závažné chybě.

CodeIntegrity:
===================================

Date: 2020-11-02 20:53:31.7360000Z
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-11-02 20:53:31.7240000Z
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-11-02 20:53:31.6390000Z
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-11-02 19:38:25.0440000Z
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-11-02 19:38:25.0310000Z
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-11-02 19:38:24.5830000Z
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-11-02 17:17:53.8540000Z
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-11-02 17:17:53.7360000Z
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

==================== Memory info ===========================

BIOS: Award Software International, Inc. GBT - 42302e31 06/12/2007
Motherboard: Gigabyte Technology Co., Ltd. M55S-S3
Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 6000+
Percentage of memory in use: 65%
Total physical RAM: 2047.55 MB
Available physical RAM: 697.1 MB
Total Virtual: 3455.55 MB
Available Virtual: 1799.49 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:232.3 GB) (Free:60.45 GB) NTFS
Drive f: (Sklad) (Fixed) (Total:149.05 GB) (Free:43.81 GB) NTFS

\\?\Volume{2453fe55-dce9-11e2-a75e-806e6f6e6963}\ (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS
\\?\Volume{2b892b88-0000-0000-0000-40193a000000}\ () (Fixed) (Total:0.49 GB) (Free:0.15 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 232.9 GB) (Disk ID: 2B892B88)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=232.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=501 MB) - (Type=27)

==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 149 GB) (Disk ID: 2B3B2B3A)
Partition 1: (Not Active) - (Size=149 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118275
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Kontrola PC - viry

#4 Příspěvek od Rudy »

Additional OK, ale FRST není kompletní. Měl by vypadat asi takto: https://forum.viry.cz/viewtopic.php?p=1536153#p1536153 .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Rostislav89
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 02 lis 2020 20:13
Bydliště: Tvrdonice, okr. Břeclav

Re: Kontrola PC - viry

#5 Příspěvek od Rostislav89 »

Omlouvám se, ale v průběhu skenování se asi něco podělalo. Níže náprava:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 02-11-2020
Ran by R (administrator) on R-PC (03-11-2020 18:06:45)
Running from C:\Users\R\Desktop
Loaded Profiles: R
Platform: Microsoft Windows 10 Pro Version 2004 19041.572 (X86) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(DUC FABULOUS CO.,LTD -> ) C:\Program Files\UltraViewer\UltraViewer_Service.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <6>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(Piriform Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe <2>
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [14476032 2015-09-28] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmdS.exe [165160 2020-10-26] (ESET, spol. s r.o. -> ESET)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2850982705-188599128-418802589-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [13594584 2018-06-24] (Piriform Ltd -> Piriform Ltd)
HKU\S-1-5-18\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [13594584 2018-06-24] (Piriform Ltd -> Piriform Ltd)
HKLM\...\Windows NT x86\Print Processors\OneNotePrint2007: C:\Windows\System32\spool\prtprocs\W32X86\msonpppr.dll [33104 2006-10-26] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Print\Monitors\HP E111 Status Monitor: C:\WINDOWS\system32\hpinkstsE111LM.dll [316040 2017-04-14] (Hewlett Packard -> HP Inc.)
HKLM\...\Print\Monitors\Send To Microsoft OneNote Monitor: C:\WINDOWS\system32\msonpmon.dll [31640 2009-02-27] (Microsoft Corporation -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\86.0.4240.111\Installer\chrmstp.exe [2020-10-22] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk [2016-10-21]
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (No File)
GroupPolicy: Restriction ? <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {23E3EC6B-F681-4F18-BBDB-2C1A6B85D527} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [153168 2018-09-15] (Google Inc -> Google Inc.)
Task: {479E4B9F-EAF8-40DE-BEB3-B66BD14A483E} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [608384 2019-10-14] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {67B82AEA-B7FB-4D30-8AA5-65A774B62815} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [13594584 2018-06-24] (Piriform Ltd -> Piriform Ltd)
Task: {A63C6EBF-39AA-4459-A78D-D41F027C22B9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [153168 2018-09-15] (Google Inc -> Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{df3e0d2a-a653-4e6a-9dc3-72f7cc3a9f88}: [DhcpNameServer] 192.168.1.1

Edge:
======
Edge Profile: C:\Users\R\AppData\Local\Microsoft\Edge\User Data\Default [2020-09-29]

Chrome:
=======
CHR Profile: C:\Users\R\AppData\Local\Google\Chrome\User Data\Default [2020-11-03]
CHR Extension: (Prezentace) - C:\Users\R\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-01-13]
CHR Extension: (Dokumenty) - C:\Users\R\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-01-13]
CHR Extension: (Disk Google) - C:\Users\R\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-25]
CHR Extension: (YouTube) - C:\Users\R\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-01-13]
CHR Extension: (Tabulky) - C:\Users\R\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-01-13]
CHR Extension: (Dokumenty Google offline) - C:\Users\R\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-10-22]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\R\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-01-13]
CHR Extension: (Gmail) - C:\Users\R\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-25]
CHR Extension: (Chrome Media Router) - C:\Users\R\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-10-19]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2180584 2020-10-26] (ESET, spol. s r.o. -> ESET)
S3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [2180584 2020-10-26] (ESET, spol. s r.o. -> ESET)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [425408 2017-10-27] (NVIDIA Corporation -> NVIDIA Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3921224 2020-10-21] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 UltraViewService; C:\Program Files\UltraViewer\UltraViewer_Service.exe [151840 2020-08-17] (DUC FABULOUS CO.,LTD -> )
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\NisSrv.exe [2250992 2019-12-12] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MsMpEng.exe [85240 2019-12-12] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [200192 2019-12-07] (Microsoft Corporation) [File not signed]
S3 dg_ssudbus; C:\WINDOWS\System32\drivers\ssudbus.sys [109184 2016-09-05] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [135136 2020-10-26] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [90672 2020-10-26] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [14776 2020-09-15] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [150568 2020-10-26] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\WINDOWS\System32\drivers\ekbdflt.sys [36480 2020-10-26] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [62296 2020-10-26] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [90712 2020-10-26] (ESET, spol. s r.o. -> ESET)
S3 eusk3usb; C:\WINDOWS\System32\Drivers\eusk3usb.sys [43968 2005-08-22] (Microsoft Windows Hardware Compatibility Publisher -> Eutron)
S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [15360 2019-12-27] (Huawei Technologies Co., Ltd.) [File not signed]
S3 HWHandSet; C:\WINDOWS\System32\drivers\hw_quusbmdm.sys [199680 2019-12-27] (Huawei Technologies Co., Ltd.) [File not signed]
S3 hwusb_cdcacm; C:\WINDOWS\System32\drivers\hw_cdcacm.sys [113792 2019-12-27] (Huawei Technologies Co., Ltd.) [File not signed]
S3 hw_usbdev; C:\WINDOWS\System32\drivers\hw_usbdev.sys [102272 2019-12-27] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_ref_pubwu.inf_x86_f75c0b1bb78ca832\nvlddmkm.sys [14774384 2017-11-09] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvStUSB; C:\WINDOWS\System32\drivers\nvstusb.sys [487848 2017-11-09] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NVSWCFilter; C:\WINDOWS\System32\drivers\nvswcfilter.sys [24760 2016-05-09] (Nvidia Corporation -> Windows (R) Win 7 DDK provider)
S3 ssudcdf; C:\WINDOWS\System32\drivers\ssudcdf.sys [30848 2014-01-22] (DEVGURU CO LTD -> DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ssuddmgr; C:\WINDOWS\System32\drivers\ssuddmgr.sys [184192 2014-01-22] (DEVGURU CO LTD -> DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ssudobex; C:\WINDOWS\System32\drivers\ssudobex.sys [184192 2014-01-22] (DEVGURU CO LTD -> DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [55424 2016-09-05] (Samsung Electronics CO., LTD. -> QUALCOMM Incorporated)
S3 ssudrmnet; C:\WINDOWS\System32\drivers\ssudrmnet.sys [61696 2014-01-22] (DEVGURU CO LTD -> DEVGURU Co., LTD.)
S3 ssudserd; C:\WINDOWS\System32\drivers\ssudserd.sys [184192 2014-01-22] (DEVGURU CO LTD -> DEVGURU Co., LTD.(www.devguru.co.kr))
S3 ss_conn_usb_driver; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver.sys [23296 2014-01-22] (DEVGURU CO LTD -> DEVGURU Co., LTD.)
S3 UsbserFilt; C:\WINDOWS\System32\drivers\usbser_lowerfltj.sys [8192 2011-08-17] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [37472 2019-12-12] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [278456 2019-12-12] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [39368 2019-12-12] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-11-03 18:06 - 2020-11-03 18:08 - 000011699 _____ C:\Users\R\Desktop\FRST.txt
2020-11-03 18:06 - 2020-11-03 18:06 - 000000000 ____D C:\Users\R\Desktop\FRST-OlderVersion
2020-11-02 21:26 - 2020-11-03 18:07 - 000000000 ____D C:\FRST
2020-11-02 21:12 - 2020-11-03 18:06 - 002012672 _____ (Farbar) C:\Users\R\Desktop\FRST.exe
2020-11-02 20:42 - 2020-11-02 20:42 - 000002912 _____ C:\Users\R\Documents\cc_20201102_204215.reg
2020-11-01 15:55 - 2020-11-02 20:38 - 000000000 ____D C:\WINDOWS\Minidump
2020-10-31 16:37 - 2020-10-31 16:37 - 000000422 __RSH C:\ProgramData\ntuser.pol
2020-10-27 19:58 - 2020-10-27 19:58 - 000002016 _____ C:\Users\Public\Desktop\ESET Ochrana bankovnictví a online plateb.lnk
2020-10-26 20:33 - 2020-10-26 21:55 - 1714439692 _____ C:\Users\R\Downloads\Rebecca cz 5.1.mkv
2020-10-26 20:33 - 2020-10-26 20:50 - 1145200046 _____ C:\Users\R\Downloads\Unhinged (2020) CZ titulky NOVINKA.avi
2020-10-26 20:12 - 2020-10-26 20:31 - 1895640888 _____ C:\Users\R\Downloads\Nabit a zabit - 2006cz.avi
2020-10-24 20:59 - 2020-10-25 00:53 - 2545361346 _____ C:\Users\R\Downloads\dotamersec1.mkv
2020-10-24 20:56 - 2020-10-24 22:04 - 2009500779 _____ C:\Users\R\Downloads\Vivarium.2019.1080p.BluRay.CZ.dabing.mkv
2020-10-21 15:22 - 2020-10-21 15:22 - 009499136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2020-10-21 15:22 - 2020-10-21 15:22 - 000784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2020-10-21 15:22 - 2020-10-21 15:22 - 000750592 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2020-10-21 15:22 - 2020-10-21 15:22 - 000652080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2020-10-21 15:22 - 2020-10-21 15:22 - 000460288 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2020-10-21 15:22 - 2020-10-21 15:22 - 000390144 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdechangepin.exe
2020-10-21 15:22 - 2020-10-21 15:22 - 000363008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2020-10-21 15:22 - 2020-10-21 15:22 - 000313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
2020-10-21 15:22 - 2020-10-21 15:22 - 000075992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys
2020-10-21 15:22 - 2020-10-21 15:22 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Management.Infrastructure.Native.Unmanaged.dll
2020-10-21 15:21 - 2020-10-21 15:22 - 004275712 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2020-10-21 15:21 - 2020-10-21 15:21 - 000557568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 031598928 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecsRaw.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 005337504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 003664896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 001541632 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistSvc.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 001541224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 001502536 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems32.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 001185864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 000919360 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 000797696 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 000747312 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 000607336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 000578424 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 000465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrptadm.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\csc.sys
2020-10-21 15:20 - 2020-10-21 15:20 - 000428544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdmTmpl.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 000370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpshell.exe
2020-10-21 15:20 - 2020-10-21 15:20 - 000258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinit.exe
2020-10-21 15:20 - 2020-10-21 15:20 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\tscfgwmi.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 000189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistCleaner.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDist.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\appmgmts.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 000147272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mavinject.exe
2020-10-21 15:20 - 2020-10-21 15:20 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistWSDDiscoProv.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 000117568 _____ (Microsoft Corporation) C:\WINDOWS\system32\CscMig.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\dggpext.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistHttpTrans.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpscript.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 000037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpscript.exe
2020-10-21 15:20 - 2020-10-21 15:20 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistAD.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 000026944 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClientPS.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 000018232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVTerminator.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 000013624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVSentinel.dll
2020-10-21 15:20 - 2020-10-21 15:20 - 000009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSErrRedir.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 018080768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 007099904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 006421504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 005820416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 003376840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-10-21 15:19 - 2020-10-21 15:19 - 002689024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 002398720 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 001916728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 001030144 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 000922112 _____ (Microsoft Corporation) C:\WINDOWS\system32\opengl32.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 000837120 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 000804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 000717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2020-10-21 15:19 - 2020-10-21 15:19 - 000626688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2020-10-21 15:19 - 2020-10-21 15:19 - 000579584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 000450320 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2020-10-21 15:19 - 2020-10-21 15:19 - 000431104 _____ (Microsoft Corporation) C:\WINDOWS\system32\IESettingSync.exe
2020-10-21 15:19 - 2020-10-21 15:19 - 000377344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 000376320 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe
2020-10-21 15:19 - 2020-10-21 15:19 - 000372224 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrd3x40.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 000260408 _____ (Microsoft Corporation) C:\WINDOWS\system32\PktMon.exe
2020-10-21 15:19 - 2020-10-21 15:19 - 000245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\glu32.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 000183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.HardwareId.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 000176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 000114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\logman.exe
2020-10-21 15:19 - 2020-10-21 15:19 - 000087352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PktMon.sys
2020-10-21 15:19 - 2020-10-21 15:19 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\provmigrate.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpnsp.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\relog.exe
2020-10-21 15:19 - 2020-10-21 15:19 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\typeperf.exe
2020-10-21 15:19 - 2020-10-21 15:19 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.SecurityMitigationsBroker.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 000036160 _____ C:\WINDOWS\system32\HvSocket.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msisip.dll
2020-10-21 15:19 - 2020-10-21 15:19 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\diskperf.exe
2020-10-21 15:19 - 2020-10-21 15:19 - 000020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\drprov.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 019870208 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 001721856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe
2020-10-21 15:18 - 2020-10-21 15:18 - 001015296 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000940544 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2020-10-21 15:18 - 2020-10-21 15:18 - 000819200 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000782848 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000742400 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000688128 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000686080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpedit.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000482304 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiagn.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000407872 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizeng.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\DispBroker.Desktop.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000275288 _____ (Microsoft Corporation) C:\WINDOWS\system32\shlwapi.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2020-10-21 15:18 - 2020-10-21 15:18 - 000166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcln.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000161080 _____ (Microsoft Corporation) C:\WINDOWS\system32\unattend.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000150848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionQueue.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\net1.exe
2020-10-21 15:18 - 2020-10-21 15:18 - 000135496 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxlib.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdSSDP.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\auditpolcore.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmapi.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\auditpol.exe
2020-10-21 15:18 - 2020-10-21 15:18 - 000027320 _____ (Microsoft Corporation) C:\WINDOWS\system32\version.dll
2020-10-21 15:18 - 2020-10-21 15:18 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpupdate.exe
2020-10-21 15:17 - 2020-10-21 15:17 - 005998616 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 004877232 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2020-10-21 15:17 - 2020-10-21 15:17 - 004433640 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 001472464 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 001344512 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 001003336 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000866816 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000813568 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000634696 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000548544 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxs.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000535552 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000508720 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000491008 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmdial32.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000446200 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ninput.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.FileExplorer.Common.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000207168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdscore.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasman.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\raschap.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000118584 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasauto.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\spinf.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000075888 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostw.exe
2020-10-21 15:17 - 2020-10-21 15:17 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\spopk.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\MitigationConfiguration.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
2020-10-21 15:17 - 2020-10-21 15:17 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2020-10-21 15:17 - 2020-10-21 15:17 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapprovp.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscapi.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxstrace.exe
2020-10-21 15:17 - 2020-10-21 15:17 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\linkinfo.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscdll.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\davhlpr.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys
2020-10-21 15:17 - 2020-10-21 15:17 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasautou.exe
2020-10-21 15:17 - 2020-10-21 15:17 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasadhlp.dll
2020-10-21 15:17 - 2020-10-21 15:17 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasacd.sys
2020-10-21 15:16 - 2020-10-21 15:17 - 002810368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2020-10-21 15:16 - 2020-10-21 15:16 - 002092032 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2020-10-21 15:16 - 2020-10-21 15:16 - 001222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2020-10-21 15:16 - 2020-10-21 15:16 - 000690176 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2020-10-21 15:16 - 2020-10-21 15:16 - 000644952 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2020-10-21 15:16 - 2020-10-21 15:16 - 000413696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2020-10-21 15:16 - 2020-10-21 15:16 - 000400384 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2020-10-21 15:16 - 2020-10-21 15:16 - 000321024 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacc.dll
2020-10-21 15:16 - 2020-10-21 15:16 - 000300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2020-10-21 15:16 - 2020-10-21 15:16 - 000248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2020-10-21 15:16 - 2020-10-21 15:16 - 000198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mlang.dll
2020-10-21 15:16 - 2020-10-21 15:16 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Gpu.dll
2020-10-21 15:16 - 2020-10-21 15:16 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2020-10-21 15:16 - 2020-10-21 15:16 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2020-10-21 15:16 - 2020-10-21 15:16 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\NdisImPlatform.sys
2020-10-21 15:16 - 2020-10-21 15:16 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncpa.cpl
2020-10-21 15:16 - 2020-10-21 15:16 - 000098112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2020-10-21 15:16 - 2020-10-21 15:16 - 000071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2020-10-21 15:16 - 2020-10-21 15:16 - 000050104 _____ (Microsoft Corporation) C:\WINDOWS\system32\sfc_os.dll
2020-10-21 15:16 - 2020-10-21 15:16 - 000034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2020-10-21 15:16 - 2020-10-21 15:16 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2020-10-21 15:16 - 2020-10-21 15:16 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiougc.exe
2020-10-21 15:16 - 2020-10-21 15:16 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\secur32.dll
2020-10-21 15:16 - 2020-10-21 15:16 - 000020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2020-10-21 15:16 - 2020-10-21 15:16 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2020-10-21 15:16 - 2020-10-21 15:16 - 000011272 _____ (Microsoft Corporation) C:\WINDOWS\system32\sfc.dll
2020-10-21 15:16 - 2020-10-21 15:16 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacchooks.dll
2020-10-21 15:15 - 2020-10-21 15:16 - 004752896 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 004523008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 002352440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2020-10-21 15:15 - 2020-10-21 15:15 - 002267424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 002169784 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 001681408 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 001618152 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 001449472 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 001418752 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 001342976 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 001210368 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 001128448 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 001073984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2020-10-21 15:15 - 2020-10-21 15:15 - 000947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000884736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000882136 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000859400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000788704 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000760640 _____ (Microsoft Corporation) C:\WINDOWS\system32\DismApi.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000705024 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000695808 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2020-10-21 15:15 - 2020-10-21 15:15 - 000688960 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2020-10-21 15:15 - 2020-10-21 15:15 - 000682784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000633344 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000578376 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000547328 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000530912 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000512512 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000475696 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000470528 _____ (Microsoft Corporation) C:\WINDOWS\system32\duser.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000410432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2020-10-21 15:15 - 2020-10-21 15:15 - 000403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000397728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000371376 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000352056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2020-10-21 15:15 - 2020-10-21 15:15 - 000304640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2020-10-21 15:15 - 2020-10-21 15:15 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000270640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsta.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000224576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dism.exe
2020-10-21 15:15 - 2020-10-21 15:15 - 000216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msutb.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\regapi.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000174032 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000171440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xmllite.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000166280 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSoftwareInstallationClient.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000147704 _____ (Microsoft Corporation) C:\WINDOWS\system32\imm32.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\NetAdapterCx.sys
2020-10-21 15:15 - 2020-10-21 15:15 - 000142152 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2020-10-21 15:15 - 2020-10-21 15:15 - 000142008 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000111024 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000110008 _____ (Microsoft Corporation) C:\WINDOWS\system32\profapi.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000109896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2020-10-21 15:15 - 2020-10-21 15:15 - 000109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000108352 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000103312 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe
2020-10-21 15:15 - 2020-10-21 15:15 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000093488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpr.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfp.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MuiUnattend.exe
2020-10-21 15:15 - 2020-10-21 15:15 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetDriverInstall.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\usp10.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsCtfMonitor.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntlanman.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\deploymentcsps.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptext.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcEpMap.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000058848 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000052664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wtsapi32.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000043920 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2020-10-21 15:15 - 2020-10-21 15:15 - 000039936 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000039720 _____ (Microsoft Corporation) C:\WINDOWS\system32\iri.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000037688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininitext.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\credui.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrnr.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000031528 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptbase.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nsiproxy.sys
2020-10-21 15:15 - 2020-10-21 15:15 - 000028360 _____ (Microsoft Corporation) C:\WINDOWS\system32\winnsi.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000027848 _____ (Microsoft Corporation) C:\WINDOWS\system32\fltLib.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\hid.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
2020-10-21 15:15 - 2020-10-21 15:15 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\fltMC.exe
2020-10-21 15:15 - 2020-10-21 15:15 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\nsisvc.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\ktmw32.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000020160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nsi.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\EsdSip.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d8thk.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmiso8601utils.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfoext.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimg32.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\normaliz.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3r.dll
2020-10-21 15:15 - 2020-10-21 15:15 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2020-10-21 15:14 - 2020-10-21 15:14 - 007198520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-10-21 15:14 - 2020-10-21 15:14 - 000557312 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2020-10-21 15:13 - 2020-10-21 15:14 - 001677080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 003043840 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 002861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 002634112 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 001711416 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 001450304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 001433312 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2020-10-21 15:13 - 2020-10-21 15:13 - 001279368 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2020-10-21 15:13 - 2020-10-21 15:13 - 001181208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 001163264 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 001128008 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2020-10-21 15:13 - 2020-10-21 15:13 - 001099776 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 001033496 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000992688 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2020-10-21 15:13 - 2020-10-21 15:13 - 000924528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000907448 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000788168 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000775256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcrt.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000725136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000716968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000698280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000696832 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000675136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000666624 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe
2020-10-21 15:13 - 2020-10-21 15:13 - 000638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000606880 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000603448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000585704 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000581440 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000528184 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000504552 _____ (Microsoft Corporation) C:\WINDOWS\system32\clbcatq.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000495840 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000482104 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-10-21 15:13 - 2020-10-21 15:13 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000474424 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000461120 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000459264 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000452408 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000410936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2020-10-21 15:13 - 2020-10-21 15:13 - 000410064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrv.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000343448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000335360 _____ (Microsoft Corporation) C:\WINDOWS\system32\es.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000334848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000326456 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000302904 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000301648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2020-10-21 15:13 - 2020-10-21 15:13 - 000297984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000272896 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppLockerCSP.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000268080 _____ (Microsoft Corporation) C:\WINDOWS\system32\powrprof.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsku.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000239416 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000236520 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgmgr32.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000225088 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000210944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000201528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2020-10-21 15:13 - 2020-10-21 15:13 - 000196784 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPHLPAPI.DLL
2020-10-21 15:13 - 2020-10-21 15:13 - 000195136 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000190040 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000185912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuceffects.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000167224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2020-10-21 15:13 - 2020-10-21 15:13 - 000161608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntasn1.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000152904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntmarta.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000151864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2020-10-21 15:13 - 2020-10-21 15:13 - 000142664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2020-10-21 15:13 - 2020-10-21 15:13 - 000141008 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000139960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000138936 _____ (Microsoft Corporation) C:\WINDOWS\system32\devobj.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000138920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgcore.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptnet.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000130128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncrypt.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000122176 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2020-10-21 15:13 - 2020-10-21 15:13 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\cabinet.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2020-10-21 15:13 - 2020-10-21 15:13 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidpolicyconverter.exe
2020-10-21 15:13 - 2020-10-21 15:13 - 000117216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000115008 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\eShims.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000107376 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000104840 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000095496 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000076952 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvcli.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000071992 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\samcli.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000068192 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsp.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\colbact.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidsvc.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000058856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkscli.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\devrtl.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000056312 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptdll.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcacli.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000054720 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000050616 _____ (Microsoft Corporation) C:\WINDOWS\system32\msasn1.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000047016 _____ (Microsoft Corporation) C:\WINDOWS\system32\svchost.exe
2020-10-21 15:13 - 2020-10-21 15:13 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe
2020-10-21 15:13 - 2020-10-21 15:13 - 000039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\tokenbinding.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000037176 _____ (Microsoft Corporation) C:\WINDOWS\system32\netutils.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Websocket.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagnosticdataquery.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000031544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2020-10-21 15:13 - 2020-10-21 15:13 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpapi.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000024288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsrole.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsparse.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdbinst.exe
2020-10-21 15:13 - 2020-10-21 15:13 - 000020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidtel.exe
2020-10-21 15:13 - 2020-10-21 15:13 - 000020640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerEnc.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000019256 _____ (Microsoft Corporation) C:\WINDOWS\system32\dllhost.exe
2020-10-21 15:13 - 2020-10-21 15:13 - 000017016 _____ (Microsoft Corporation) C:\WINDOWS\system32\psapi.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidcertstorecheck.exe
2020-10-21 15:13 - 2020-10-21 15:13 - 000016024 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrss.exe
2020-10-21 15:13 - 2020-10-21 15:13 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmsgapi.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\applockerfltr.sys
2020-10-21 15:13 - 2020-10-21 15:13 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapi.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaevts.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wship6.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSHTCPIP.DLL
2020-10-21 15:13 - 2020-10-21 15:13 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\pacjsworker.exe
2020-10-21 15:13 - 2020-10-21 15:13 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDUS.DLL
2020-10-21 15:13 - 2020-10-21 15:13 - 000005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shimeng.dll
2020-10-21 15:13 - 2020-10-21 15:13 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2020-10-21 15:12 - 2020-10-21 15:13 - 000712512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 008897752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 005431000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 004914176 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 003191808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 003015992 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2020-10-21 15:12 - 2020-10-21 15:12 - 002873344 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 002749952 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-10-21 15:12 - 2020-10-21 15:12 - 002506240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 002275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 001967944 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 001590072 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 001542792 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 001161728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MoUsoCoreWorker.exe
2020-10-21 15:12 - 2020-10-21 15:12 - 001160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 001155072 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2020-10-21 15:12 - 2020-10-21 15:12 - 001042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000979272 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000964264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe
2020-10-21 15:12 - 2020-10-21 15:12 - 000854016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000846848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000790736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2020-10-21 15:12 - 2020-10-21 15:12 - 000775480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000742400 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2020-10-21 15:12 - 2020-10-21 15:12 - 000721920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2020-10-21 15:12 - 2020-10-21 15:12 - 000602192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryPS.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Language.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000549376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2020-10-21 15:12 - 2020-10-21 15:12 - 000546976 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000544384 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2020-10-21 15:12 - 2020-10-21 15:12 - 000515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2020-10-21 15:12 - 2020-10-21 15:12 - 000509440 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000454016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000453120 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000376032 _____ (Microsoft Corporation) C:\WINDOWS\system32\coml2.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2020-10-21 15:12 - 2020-10-21 15:12 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-10-21 15:12 - 2020-10-21 15:12 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000309048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.th.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000293864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000288672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SpeechPrivacy.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmd.exe
2020-10-21 15:12 - 2020-10-21 15:12 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000217088 _____ (Microsoft Corporation) C:\WINDOWS\system32\activeds.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsldpc.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000176448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Taskbar.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000132920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pacer.sys
2020-10-21 15:12 - 2020-10-21 15:12 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwbase.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000126024 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000115192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\activeds.tlb
2020-10-21 15:12 - 2020-10-21 15:12 - 000110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.RetailInfo.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000099656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000091968 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000091960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2020-10-21 15:12 - 2020-10-21 15:12 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkQoSPolicyCSP.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\keepaliveprovider.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000058176 _____ (Microsoft Corporation) C:\WINDOWS\system32\virtdisk.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsstrace.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000053048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe
2020-10-21 15:12 - 2020-10-21 15:12 - 000052672 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel.appcore.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000052592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2020-10-21 15:12 - 2020-10-21 15:12 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000042328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IndirectKmd.sys
2020-10-21 15:12 - 2020-10-21 15:12 - 000028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtClient.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshqos.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbservicetrigger.dll
2020-10-21 15:12 - 2020-10-21 15:12 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchTM.exe
2020-10-21 15:12 - 2020-10-21 15:12 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tier2punctuations.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 006365280 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 005998616 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 005371544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 003706880 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 003469824 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 002973696 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 002607104 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 002318336 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 002127872 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-10-21 15:11 - 2020-10-21 15:11 - 002104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 001963712 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 001836544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 001695760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 001612800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 001509728 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 001360384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 001333248 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 001276928 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 001063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsf3gip.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000966864 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputHost.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000928256 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000873272 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000797448 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000783992 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000779360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000756680 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000756656 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000712192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2020-10-21 15:11 - 2020-10-21 15:11 - 000701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000611952 _____ C:\WINDOWS\system32\TextShaping.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000594464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscms.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000523712 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000455168 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoMetadataHandler.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000373248 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2020-10-21 15:11 - 2020-10-21 15:11 - 000303104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000287680 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\icm32.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000233984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSip.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2020-10-21 15:11 - 2020-10-21 15:11 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecsExt.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\PushToInstall.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\fidocredprov.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Winlangdb.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000133728 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000128616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47mrm.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DSCache.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSAssessment.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\globinputhost.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.ServiceHostBuilder.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerApi.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\TempSignedLicenseExchangeTask.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000045904 _____ (Microsoft Corporation) C:\WINDOWS\system32\coloradapterclient.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguageProfileCallback.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerSvc.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2020-10-21 15:11 - 2020-10-21 15:11 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mobilenetworking.dll
2020-10-21 15:10 - 2020-10-21 15:11 - 002621720 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 003821072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 002918720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-10-21 15:10 - 2020-10-21 15:10 - 002827776 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 002541568 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 001963752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 001926656 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2020-10-21 15:10 - 2020-10-21 15:10 - 001641960 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 001598032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 001315328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 001240064 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 001001984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000956216 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000871736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2020-10-21 15:10 - 2020-10-21 15:10 - 000759296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000746336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000721024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000693048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-10-21 15:10 - 2020-10-21 15:10 - 000655872 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000654336 _____ (Microsoft Corporation) C:\WINDOWS\system32\certca.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Search.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000525824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000520704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UiaManager.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000424448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000407504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000358200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-10-21 15:10 - 2020-10-21 15:10 - 000356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\licensingdiag.exe
2020-10-21 15:10 - 2020-10-21 15:10 - 000337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000311920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000271664 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000163216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXCore.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000141008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Clipc.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppExtension.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000101744 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevDispItemProvider.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000097088 _____ (Microsoft Corporation) C:\WINDOWS\system32\oemlicense.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000079472 _____ (Microsoft Corporation) C:\WINDOWS\system32\RuntimeBroker.exe
2020-10-21 15:10 - 2020-10-21 15:10 - 000061752 _____ (Microsoft Corporation) C:\WINDOWS\system32\GameInput.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\threadpoolwinrt.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000052664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResourcePolicyClient.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollCtrl.exe
2020-10-21 15:10 - 2020-10-21 15:10 - 000049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mskeyprotect.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\atlthunk.dll
2020-10-21 15:10 - 2020-10-21 15:10 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
2020-10-21 15:10 - 2020-10-21 15:10 - 000017728 _____ (Microsoft Corporation) C:\WINDOWS\system32\backgroundTaskHost.exe
2020-10-21 15:10 - 2020-10-21 15:10 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 014758400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 004739864 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 003493888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Controls.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 003240448 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 002757120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 002227712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 001972736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 001602048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 001461248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 001391104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 001140736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 001134728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2020-10-21 15:09 - 2020-10-21 15:09 - 001000408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000942408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000794320 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000773432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Facilitator.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.Schema.Shell.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000537696 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShellCommonCommonProxyStub.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000337768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000293184 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000291264 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialEnrollmentManager.exe
2020-10-21 15:09 - 2020-10-21 15:09 - 000286016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000276480 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000265440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000252616 _____ (Microsoft Corporation) C:\WINDOWS\system32\capauthz.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3svc.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAnimation.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000198792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSWB7.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000195904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinREAgent.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\miutils.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataExchange.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmidcom.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.HostName.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000128000 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2020-10-21 15:09 - 2020-10-21 15:09 - 000119608 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadWamExtension.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe
2020-10-21 15:09 - 2020-10-21 15:09 - 000101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mi.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdsapi.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3msm.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3api.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000068680 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi32.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000061448 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialEnrollmentManagerForUser.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\NapiNSP.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\amsi.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\execmodelproxy.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.Common.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiredNetworkCSP.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe
2020-10-21 15:09 - 2020-10-21 15:09 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32topl.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerClient.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.TimeBroker.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerClient.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\localui.dll
2020-10-21 15:09 - 2020-10-21 15:09 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\amsiproxy.dll
2020-10-21 15:08 - 2020-10-21 15:09 - 004012688 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2020-10-21 15:08 - 2020-10-21 15:08 - 002757632 _____ (Microsoft Corporation) C:\WINDOWS\system32\tellib.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 001883696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 001373696 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 001315640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 001253624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 001252352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 001011768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 001010176 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000922112 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000775680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Signals.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000761280 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000751496 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000645632 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000630272 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000614912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000582144 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000502624 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2020-10-21 15:08 - 2020-10-21 15:08 - 000487048 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000469920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000431104 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2020-10-21 15:08 - 2020-10-21 15:08 - 000420936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000408000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp110_win.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbemcomn.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000395592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000374496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\HrtfApo.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000335360 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000321848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2020-10-21 15:08 - 2020-10-21 15:08 - 000265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000264704 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreCommonProxyStub.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000212480 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wosc.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2020-10-21 15:08 - 2020-10-21 15:08 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.System.UserProfile.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\fcon.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatializerApo.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000164232 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSrv.exe
2020-10-21 15:08 - 2020-10-21 15:08 - 000149272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmm.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000145664 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000134800 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageOverlayUtil.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe
2020-10-21 15:08 - 2020-10-21 15:08 - 000121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmapi.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000074832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000072824 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000072288 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbs.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\bfsvc.exe
2020-10-21 15:08 - 2020-10-21 15:08 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappprxy.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000047472 _____ C:\WINDOWS\system32\umpdc.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmiclnt.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mmcss.sys
2020-10-21 15:08 - 2020-10-21 15:08 - 000027336 _____ (Microsoft Corporation) C:\WINDOWS\system32\avrt.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\FaxPrinterInstaller.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000024888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tbs.sys
2020-10-21 15:08 - 2020-10-21 15:08 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\KNetPwrDepBroker.sys
2020-10-21 15:08 - 2020-10-21 15:08 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregtask.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCertResources.dll
2020-10-21 15:08 - 2020-10-21 15:08 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneServiceRes.dll
2020-10-21 15:06 - 2020-10-21 15:06 - 000585016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2020-10-21 15:06 - 2020-10-21 15:06 - 000378336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2020-10-21 15:06 - 2020-10-21 15:06 - 000177976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys
2020-10-21 15:06 - 2020-10-21 15:06 - 000170824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys
2020-10-21 15:06 - 2020-10-21 15:06 - 000164160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys
2020-10-21 15:06 - 2020-10-21 15:06 - 000161080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys
2020-10-21 15:06 - 2020-10-21 15:06 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\viac7.sys
2020-10-21 15:06 - 2020-10-21 15:06 - 000115512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2020-10-21 15:06 - 2020-10-21 15:06 - 000115000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys
2020-10-21 15:06 - 2020-10-21 15:06 - 000066880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2020-10-21 15:06 - 2020-10-21 15:06 - 000023752 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmbuspipe.dll
2020-10-21 15:06 - 2020-10-21 15:06 - 000021472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IntelTA.sys
2020-10-19 18:43 - 2020-10-19 20:22 - 1683399516 _____ C:\Users\R\Downloads\Komando-Akcni-1985-CZ-adriatic.avi
2020-10-18 20:39 - 2020-10-18 20:48 - 1202630989 _____ C:\Users\R\Downloads\KOMANDO FILMY CZ DABING FULL HD CELÝ FILM. RODINNÝ, AKČNÍ, DOBRODRUŽNÝ. 1080P.-12v1sN8Gfmo.mkv

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-11-03 18:06 - 2019-12-07 07:12 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-11-03 17:55 - 2019-12-07 07:12 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-11-03 17:54 - 2019-12-07 07:12 - 000000000 ___HD C:\Program Files\WindowsApps
2020-11-03 17:52 - 2020-09-25 21:22 - 000000000 _____ C:\WINDOWS\UV_LastPW.ini
2020-11-03 17:51 - 2020-09-25 21:41 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-11-03 17:51 - 2020-09-25 21:15 - 000008192 ___SH C:\DumpStack.log.tmp
2020-11-03 17:51 - 2020-09-25 21:15 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-11-03 17:51 - 2018-09-15 11:52 - 000000000 ____D C:\ProgramData\NVIDIA
2020-11-03 17:07 - 2020-09-28 19:21 - 000002382 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-11-03 17:07 - 2020-09-28 19:21 - 000002220 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2020-11-03 16:53 - 2020-09-25 21:33 - 001693200 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-11-03 16:53 - 2019-12-07 13:21 - 000716602 _____ C:\WINDOWS\system32\perfh005.dat
2020-11-03 16:53 - 2019-12-07 13:21 - 000144780 _____ C:\WINDOWS\system32\perfc005.dat
2020-11-03 16:53 - 2019-12-07 07:10 - 000000000 ____D C:\WINDOWS\INF
2020-11-03 06:45 - 2019-12-07 07:12 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2020-11-03 06:40 - 2020-09-25 21:18 - 000000000 ____D C:\Users\R
2020-11-02 17:21 - 2020-09-28 19:20 - 000003572 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2020-11-02 17:21 - 2020-09-28 19:20 - 000003448 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2020-10-31 16:21 - 2018-09-15 12:34 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2020-10-30 23:08 - 2019-12-12 17:51 - 000652152 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2020-10-30 19:30 - 2020-09-25 21:41 - 000003346 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2850982705-188599128-418802589-1000
2020-10-30 19:30 - 2020-09-25 21:18 - 000002349 _____ C:\Users\R\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-10-30 19:30 - 2014-07-10 16:51 - 000000000 ___RD C:\Users\R\OneDrive
2020-10-27 19:39 - 2019-12-07 07:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2020-10-26 19:44 - 2020-08-29 06:38 - 000090672 _____ (ESET) C:\WINDOWS\system32\Drivers\edevmon.sys
2020-10-26 19:44 - 2018-09-04 11:23 - 000150568 _____ (ESET) C:\WINDOWS\system32\Drivers\ehdrv.sys
2020-10-26 19:44 - 2018-09-04 11:23 - 000135136 _____ (ESET) C:\WINDOWS\system32\Drivers\eamonm.sys
2020-10-26 19:44 - 2018-09-04 11:23 - 000090712 _____ (ESET) C:\WINDOWS\system32\Drivers\epfwwfp.sys
2020-10-26 19:44 - 2018-09-04 11:23 - 000062296 _____ (ESET) C:\WINDOWS\system32\Drivers\epfw.sys
2020-10-26 19:44 - 2018-04-28 17:37 - 000036480 _____ (ESET) C:\WINDOWS\system32\Drivers\ekbdflt.sys
2020-10-26 19:22 - 2018-09-15 12:03 - 000000000 ____D C:\Users\R\AppData\Local\Packages
2020-10-26 19:15 - 2020-09-20 15:13 - 000000000 ___DC C:\WINDOWS\Panther
2020-10-22 20:08 - 2013-06-24 17:47 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-10-22 09:11 - 2020-09-25 21:15 - 000432816 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-10-22 09:05 - 2019-12-07 07:12 - 000000000 ____D C:\WINDOWS\SystemResources
2020-10-22 09:05 - 2019-12-07 07:12 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2020-10-22 09:05 - 2019-12-07 07:12 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugins
2020-10-22 09:05 - 2019-12-07 07:12 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2020-10-22 09:05 - 2019-12-07 07:12 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2020-10-22 09:05 - 2019-12-07 07:12 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2020-10-22 09:05 - 2019-12-07 07:12 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-10-22 09:05 - 2019-12-07 07:12 - 000000000 ____D C:\WINDOWS\system32\es-MX
2020-10-22 09:05 - 2019-12-07 07:12 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-10-22 09:05 - 2019-12-07 07:12 - 000000000 ____D C:\WINDOWS\system32\appraiser
2020-10-22 09:04 - 2019-12-07 13:23 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2020-10-22 09:04 - 2019-12-07 07:12 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2020-10-22 09:04 - 2019-12-07 07:12 - 000000000 ____D C:\WINDOWS\Provisioning
2020-10-22 09:04 - 2019-12-07 07:12 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2020-10-22 09:04 - 2019-12-07 07:12 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-10-22 09:04 - 2019-12-07 07:03 - 000000000 ____D C:\WINDOWS\servicing
2020-10-21 15:31 - 2019-12-07 07:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-10-21 15:27 - 2019-12-07 13:23 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2020-10-21 15:27 - 2019-12-07 13:23 - 000020908 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2020-10-18 17:01 - 2020-09-25 21:41 - 000003460 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2020-10-18 17:01 - 2020-09-25 21:41 - 000003336 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2020-10-18 15:11 - 2020-09-25 21:41 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2020-10-17 21:57 - 2020-09-25 22:14 - 000000000 ____D C:\Windows.old

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118275
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Kontrola PC - viry

#6 Příspěvek od Rudy »

Teď spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Rostislav89
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 02 lis 2020 20:13
Bydliště: Tvrdonice, okr. Břeclav

Re: Kontrola PC - viry

#7 Příspěvek od Rostislav89 »

# -------------------------------
# Malwarebytes AdwCleaner 8.0.8.0
# -------------------------------
# Build: 10-08-2020
# Database: 2020-09-29.1 (Local)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 11-03-2020
# Duration: 00:00:09
# OS: Windows 10 Pro
# Cleaned: 0
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [2568 octets] - [13/01/2020 16:43:16]
AdwCleaner[C00].txt - [2498 octets] - [13/01/2020 16:44:31]
AdwCleaner[S01].txt - [1527 octets] - [03/11/2020 19:09:33]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########
Nahoru
Rostislav89
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 02 lis 2020 20:13
Bydliště: Tvrdonice, okr. Břeclav

Re: Kontrola PC - viry

#8 Příspěvek od Rostislav89 »

Teď je to určitě o poznání lepší, ale nevím jestli FRST, AdwCleaner nebo že jsem vzal PC do garáže a profoukal kompresorem :D

Každopádně velké DÍKY :thumbsup:
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118275
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Kontrola PC - viry

#9 Příspěvek od Rudy »

Ještě je třeba ručně dočistit. Otevřte poznámkový blok a zkopírujte do něj:
Start

CloseProcesses:
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (No File)
GroupPolicy: Restriction ? <==== ATTENTION
Task: {23E3EC6B-F681-4F18-BBDB-2C1A6B85D527} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [153168 2018-09-15] (Google Inc -> Google Inc.)
Task: {A63C6EBF-39AA-4459-A78D-D41F027C22B9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [153168 2018-09-15] (Google Inc -> Google Inc.)
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File

EmptyTemp:
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Rostislav89
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 02 lis 2020 20:13
Bydliště: Tvrdonice, okr. Břeclav

Re: Kontrola PC - viry

#10 Příspěvek od Rostislav89 »

Fix result of Farbar Recovery Scan Tool (x86) Version: 02-11-2020
Ran by R (03-11-2020 21:45:35) Run:1
Running from C:\Users\R\Desktop
Loaded Profiles: R
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start

CloseProcesses:
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (No File)
GroupPolicy: Restriction ? <==== ATTENTION
Task: {23E3EC6B-F681-4F18-BBDB-2C1A6B85D527} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [153168 2018-09-15] (Google Inc -> Google Inc.)
Task: {A63C6EBF-39AA-4459-A78D-D41F027C22B9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [153168 2018-09-15] (Google Inc -> Google Inc.)
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File

EmptyTemp:
End
*****************

Processes closed successfully.
"C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe" => not found
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{23E3EC6B-F681-4F18-BBDB-2C1A6B85D527}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{23E3EC6B-F681-4F18-BBDB-2C1A6B85D527}" => removed successfully.
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A63C6EBF-39AA-4459-A78D-D41F027C22B9}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A63C6EBF-39AA-4459-A78D-D41F027C22B9}" => removed successfully.
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully.
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA" => not found
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore" => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip => removed successfully.
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 => removed successfully.
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully.
"HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}" => removed successfully.
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\{4A7C4306-57E0-4C0C-83A9-78C1528F618C} => removed successfully.
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip => removed successfully.
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 10248192 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 19099574 B
Java, Flash, Steam htmlcache => 1128 B
Windows/system/drivers => 12635379 B
Edge => 38912 B
Chrome => 155600314 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 6144 B
Users => 6144 B
ProgramData => 6144 B
Public => 6144 B
systemprofile => 6144 B
LocalService => 26650 B
NetworkService => 204351450 B
R => 231096854 B
DefaultAppPool => 231102998 B

RecycleBin => 140356 B
EmptyTemp: => 824.3 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 21:46:11 ====
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118275
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Kontrola PC - viry

#11 Příspěvek od Rudy »

Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Rostislav89
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 02 lis 2020 20:13
Bydliště: Tvrdonice, okr. Břeclav

Re: Kontrola PC - viry

#12 Příspěvek od Rostislav89 »

Jo, PC funguje resp. jeho rychlost jak, když byl nový.

Mnohokrát díky a zasílám finanční příspěvek.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118275
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Kontrola PC - viry

#13 Příspěvek od Rudy »

Rádo se stalo a za příspěvek děkujeme! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“