Prosím o preventivní kontrolu - děkuji

[vlas]

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-03-2017
Ran by Vladimír (administrator) on VLADIMÍR-PC (06-04-2017 17:13:40)
Running from C:\Users\Vladimír\Desktop
Loaded Profiles: Vladimír (Available Profiles: Vladimír & DefaultAppPool)
Platform: Windows 10 Pro Version 1511 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe
(Microsoft Corporation) C:\WINDOWS\System32\mqsvc.exe
(VIA Technologies, Inc.) C:\WINDOWS\System32\ViakaraokeSrv.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avpui.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Igor Gottwald - OKsoftware) C:\Program Files (x86)\OKsoftware\Svátky a výročí\Vyroci.exe
() C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
() D:\adwcleaner_6.045.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\WINDOWS\SysWOW64\wbem\WmiPrvSE.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1793736 2015-02-20] (NVIDIA Corporation)
HKLM-x32\...\Run: [ProductUpdater] => C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe [75776 2016-11-16] ()
HKU\S-1-5-21-4276936731-1478878061-1455199337-1000\...\Run: [] => [X]
HKU\S-1-5-21-4276936731-1478878061-1455199337-1000\...\Run: [Svátky a výročí] => C:\Program Files (x86)\OKsoftware\Svátky a výročí\Vyroci.exe [1019904 2006-04-28] (Igor Gottwald - OKsoftware)
HKU\S-1-5-21-4276936731-1478878061-1455199337-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [31744 2015-10-30] (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{d6c9f7b1-a030-4be7-835d-0fee603015c0}: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{ee8c7f5c-a685-407e-8899-025d3a653768}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-4276936731-1478878061-1455199337-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
BHO: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2017-03-29] (AO Kaspersky Lab)
BHO-x32: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2017-03-29] (AO Kaspersky Lab)
Toolbar: HKLM - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2017-03-29] (AO Kaspersky Lab)
Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2017-03-29] (AO Kaspersky Lab)

Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-4276936731-1478878061-1455199337-1000 -> hxxp://www.seznam.cz/

FireFox:
========
FF DefaultProfile: zr8qwfw9.default
FF ProfilePath: C:\Users\Vladimír\AppData\Roaming\Mozilla\Firefox\Profiles\zr8qwfw9.default [2017-04-06]
FF Homepage: Mozilla\Firefox\Profiles\zr8qwfw9.default -> hxxps://www.seznam.cz/
FF Extension: (S3.Google Translator) - C:\Users\Vladimír\AppData\Roaming\Mozilla\Firefox\Profiles\zr8qwfw9.default\Extensions\s3google@translator.xpi [2017-04-02]
FF Extension: (Imagus) - C:\Users\Vladimír\AppData\Roaming\Mozilla\Firefox\Profiles\zr8qwfw9.default\Extensions\{00000f2a-7cde-4f20-83ed-434fcb420d71}.xpi [2017-03-02]
FF Extension: (Video DownloadHelper) - C:\Users\Vladimír\AppData\Roaming\Mozilla\Firefox\Profiles\zr8qwfw9.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-12-30]
FF Extension: (Adblock Plus) - C:\Users\Vladimír\AppData\Roaming\Mozilla\Firefox\Profiles\zr8qwfw9.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-23]
FF Extension: (Site Deployment Checker) - C:\Program Files\Mozilla Firefox\browser\features\deployment-checker@mozilla.org.xpi [2017-04-01] [not signed]
FF HKLM\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi [2017-03-29]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\WINDOWS\system32\C2MP\npdivx32.dll [No File]
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-11-14] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-11-14] (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
CHR HKLM-x32\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [173472 2017-02-15] (SUPERAntiSpyware.com)
R2 AVP17.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe [241544 2016-06-28] (AO Kaspersky Lab)
S3 klvssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\vssbridge64.exe [77328 2016-06-28] (AO Kaspersky Lab)
R2 KSDE1.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe [241544 2016-06-28] (AO Kaspersky Lab)
R2 VIAKaraokeService; C:\WINDOWS\system32\viakaraokesrv.exe [36504 2015-06-22] (VIA Technologies, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2016-10-25] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24856 2017-03-04] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [238936 2016-06-10] (AO Kaspersky Lab)
R3 dvdfab; C:\WINDOWS\system32\drivers\dvdfab.sys [82904 2016-08-31] (Windows (R) Win 7 DDK provider)
S3 fcvsc; C:\WINDOWS\system32\drivers\fcvsc.sys [32768 2015-11-17] (Microsoft Corporation) [File not signed]
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2016-11-24] (Huawei Technologies Co., Ltd.)
R0 kl1; C:\WINDOWS\System32\DRIVERS\kl1.sys [554416 2016-06-02] (AO Kaspersky Lab)
R0 klbackupdisk; C:\WINDOWS\System32\DRIVERS\klbackupdisk.sys [63920 2016-06-07] (AO Kaspersky Lab)
R1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [86352 2016-06-15] (AO Kaspersky Lab)
R2 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [78216 2016-05-31] (AO Kaspersky Lab)
S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [28792 2016-03-31] (AO Kaspersky Lab)
R3 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [196376 2017-03-29] (AO Kaspersky Lab)
R1 klhk; C:\WINDOWS\System32\drivers\klhk.sys [509728 2017-03-29] (AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP17.0.0\Bases\klids.sys [171312 2017-04-06] (AO Kaspersky Lab)
R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1017624 2017-03-29] (AO Kaspersky Lab)
R1 KLIM6; C:\WINDOWS\system32\DRIVERS\klim6.sys [57424 2017-03-29] (AO Kaspersky Lab)
R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [52136 2016-05-19] (AO Kaspersky Lab)
R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [45488 2016-05-31] (AO Kaspersky Lab)
R3 kltap; C:\WINDOWS\System32\drivers\kltap.sys [52152 2016-06-07] (The OpenVPN Project)
R0 klupd_klif_arkmon; C:\WINDOWS\System32\Drivers\klupd_klif_arkmon.sys [218920 2017-04-06] (AO Kaspersky Lab)
R3 klupd_klif_kimul; C:\WINDOWS\System32\Drivers\klupd_klif_kimul.sys [87584 2017-04-06] (AO Kaspersky Lab)
R3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [252232 2017-04-06] (AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [114064 2017-04-06] (AO Kaspersky Lab)
R3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [164888 2017-04-06] (AO Kaspersky Lab)
R1 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [85320 2016-06-18] (AO Kaspersky Lab)
R1 Klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [136416 2017-03-29] (AO Kaspersky Lab)
R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [199392 2017-04-06] (AO Kaspersky Lab)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
U3 idsvc; no ImagePath
U3 wpcsvc; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-04-06 17:13 - 2017-04-06 17:14 - 00012181 _____ C:\Users\Vladimír\Desktop\FRST.txt
2017-04-06 17:13 - 2017-04-06 17:13 - 00000000 ____D C:\FRST
2017-04-06 17:07 - 2017-04-06 17:07 - 00003240 _____ C:\WINDOWS\System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901}
2017-04-06 17:05 - 2017-04-06 17:10 - 02424832 _____ (Farbar) C:\Users\Vladimír\Desktop\FRST64.exe
2017-04-06 16:48 - 2017-04-06 16:48 - 00000907 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-04-06 15:27 - 2017-04-06 15:27 - 00252232 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klark.sys
2017-04-06 15:26 - 2017-04-06 15:26 - 00114064 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klbg.sys
2017-04-06 15:26 - 2017-04-06 15:26 - 00087584 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_kimul.sys
2017-04-06 15:26 - 2017-04-06 15:25 - 00199392 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\kneps.sys
2017-04-06 15:23 - 2017-04-06 15:23 - 00218920 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_arkmon.sys
2017-04-06 15:23 - 2017-04-06 15:23 - 00164888 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_mark.sys
2017-04-06 15:22 - 2017-04-06 15:23 - 00000000 ____D C:\Program Files\Common Files\AV
2017-04-06 15:22 - 2017-04-06 15:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Secure Connection
2017-04-06 15:22 - 2017-04-06 15:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2017-04-06 15:22 - 2013-05-06 08:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klfphc.dll
2017-04-06 15:21 - 2017-04-06 16:52 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2017-04-06 15:21 - 2017-04-06 15:22 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2017-04-06 15:21 - 2017-03-29 18:00 - 01017624 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klif.sys
2017-04-06 15:21 - 2017-03-29 18:00 - 00509728 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klhk.sys
2017-04-06 15:21 - 2017-03-29 18:00 - 00196376 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klflt.sys
2017-04-05 19:33 - 2017-04-06 04:19 - 4008959655 _____ C:\Users\Vladimír\Downloads\Anděl-Páně-2-(2016)-dvdrip-cz-(VIDEO_TS,-DVD5,-pouze-hlavní-film-cz-5.1)-jbr.rar
2017-04-02 13:52 - 2017-04-02 14:00 - 103473007 _____ C:\Users\Vladimír\Downloads\Pain-Of-Salvation---In-The-Passing-Light-Of-Day-(2017)-192.rar
2017-04-01 10:01 - 2017-04-01 12:43 - 2045380722 _____ C:\Users\Vladimír\Downloads\Collateral Beauty-Druhá šance.mkv
2017-03-31 19:04 - 2017-03-31 19:04 - 00000000 ____D C:\ProgramData\s5r8
2017-03-31 19:01 - 2017-03-31 19:01 - 00000000 ____D C:\ProgramData\s4lk
2017-03-31 19:01 - 2017-03-31 19:01 - 00000000 ____D C:\ProgramData\s4eo
2017-03-31 19:00 - 2017-03-31 19:00 - 00000000 ____D C:\ProgramData\s498
2017-03-31 19:00 - 2017-03-31 19:00 - 00000000 ____D C:\ProgramData\s3fg
2017-03-31 14:39 - 2017-03-31 14:39 - 00000000 ____D C:\ProgramData\s1a8
2017-03-31 14:35 - 2017-03-31 14:35 - 00000000 ____D C:\ProgramData\s7o0
2017-03-31 14:35 - 2017-03-31 14:35 - 00000000 ____D C:\ProgramData\s3a8
2017-03-31 14:34 - 2017-03-31 14:34 - 00000000 ____D C:\ProgramData\s52s
2017-03-31 14:34 - 2017-03-31 14:34 - 00000000 ____D C:\ProgramData\s3bc
2017-03-31 14:26 - 2017-03-31 14:26 - 00000000 _____ C:\autoexec.bat
2017-03-31 14:25 - 2017-03-31 14:25 - 00022704 _____ C:\WINDOWS\system32\Drivers\EsgScanner.sys
2017-03-31 14:25 - 2017-03-31 14:25 - 00000000 ____D C:\sh4ldr
2017-03-31 11:32 - 2017-03-31 16:12 - 4026355737 _____ C:\Users\Vladimír\Downloads\Pasažéři.mkv
2017-03-30 20:37 - 2017-03-30 20:37 - 00084138 _____ C:\Users\Vladimír\Downloads\496026623.PDF
2017-03-29 18:00 - 2017-03-29 18:00 - 00136416 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klwtp.sys
2017-03-29 18:00 - 2017-03-29 18:00 - 00057424 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klim6.sys
2017-03-26 14:19 - 2017-03-26 15:57 - 1760330366 _____ C:\Users\Vladimír\Downloads\Orest z rodu čarodejníkov.avi
2017-03-26 11:56 - 2017-03-26 13:40 - 1867147222 _____ C:\Users\Vladimír\Downloads\Dračí princ.mkv
2017-03-18 11:04 - 2017-03-18 11:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 5.2
2017-03-18 11:04 - 2017-03-18 11:04 - 00000000 ____D C:\Program Files (x86)\LibreOffice 5
2017-03-17 20:15 - 2017-03-17 23:29 - 3466177123 _____ C:\Users\Vladimír\Downloads\Instalatér z Tuchlovic.mp4
2017-03-17 16:46 - 2017-03-10 06:42 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-03-17 16:46 - 2017-03-10 06:42 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-03-15 14:03 - 2017-03-15 14:03 - 04701352 _____ C:\Users\Vladimír\Downloads\prilohy_17436.zip
2017-03-15 13:54 - 2017-03-04 09:12 - 00987488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2017-03-15 13:54 - 2017-03-04 08:41 - 02180136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-03-15 13:54 - 2017-03-04 08:41 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2017-03-15 13:54 - 2017-03-04 08:41 - 00980352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-03-15 13:54 - 2017-03-04 08:41 - 00895080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2017-03-15 13:54 - 2017-03-04 08:41 - 00701384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2017-03-15 13:54 - 2017-03-04 08:40 - 01349640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-03-15 13:54 - 2017-03-04 08:40 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2017-03-15 13:54 - 2017-03-04 08:40 - 00713824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-03-15 13:54 - 2017-03-04 08:33 - 02942536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-03-15 13:54 - 2017-03-04 08:33 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-03-15 13:54 - 2017-03-04 08:30 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-03-15 13:54 - 2017-03-04 07:58 - 02186864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2017-03-15 13:54 - 2017-03-04 07:19 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2017-03-15 13:54 - 2017-03-04 07:16 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2017-03-15 13:54 - 2017-03-04 07:16 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2017-03-15 13:54 - 2017-03-04 07:06 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
2017-03-15 13:54 - 2017-03-04 07:06 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2017-03-15 13:54 - 2017-03-04 07:04 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2017-03-15 13:54 - 2017-03-04 07:03 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2017-03-15 13:54 - 2017-03-04 06:51 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll
2017-03-15 13:54 - 2017-03-04 06:47 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2017-03-15 13:54 - 2017-03-04 06:45 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2017-03-15 13:54 - 2017-03-04 06:42 - 00541184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2017-03-15 13:54 - 2017-03-04 06:42 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2017-03-15 13:54 - 2017-03-04 06:36 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-03-15 13:54 - 2017-03-04 06:33 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2017-03-15 13:54 - 2017-03-04 06:33 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2017-03-15 13:54 - 2017-03-04 06:33 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll
2017-03-15 13:54 - 2017-03-04 06:33 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll
2017-03-15 13:54 - 2017-03-04 06:31 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2017-03-15 13:54 - 2017-03-04 06:31 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2017-03-15 13:54 - 2017-03-04 06:30 - 00501760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-03-15 13:54 - 2017-03-04 06:29 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2017-03-15 13:54 - 2017-03-04 06:28 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2017-03-15 13:54 - 2017-03-04 06:27 - 00854528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2017-03-15 13:54 - 2017-03-04 06:25 - 01117184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2017-03-15 13:54 - 2017-03-04 06:24 - 02578432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2017-03-15 13:54 - 2017-03-04 06:23 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2017-03-15 13:54 - 2017-03-04 06:21 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-03-15 13:54 - 2017-03-04 06:21 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licensingdiag.exe
2017-03-15 13:54 - 2017-03-04 06:18 - 00778240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2017-03-15 13:54 - 2017-03-04 06:14 - 00581632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2017-03-15 13:54 - 2017-03-04 06:08 - 01185280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationFramework.dll
2017-03-15 13:54 - 2017-03-04 06:07 - 04078080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-03-15 13:54 - 2017-03-04 06:07 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2017-03-15 13:54 - 2017-03-04 06:07 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2017-03-15 13:54 - 2017-03-04 05:59 - 01626112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-03-15 13:54 - 2017-03-04 05:55 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2017-03-15 13:54 - 2017-03-04 05:54 - 06296064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2017-03-15 13:54 - 2017-03-04 05:54 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-03-15 13:54 - 2017-03-04 05:44 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2017-03-15 13:54 - 2017-03-04 05:41 - 04404736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2017-03-15 13:54 - 2017-03-04 05:38 - 02519552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll
2017-03-15 13:54 - 2017-03-04 05:36 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-03-15 13:54 - 2017-03-04 05:35 - 05326336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-03-15 13:54 - 2017-03-04 05:35 - 02798080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-03-15 13:54 - 2017-03-04 05:33 - 02604032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2017-03-15 13:54 - 2017-03-04 05:31 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2017-03-15 13:54 - 2017-03-04 05:31 - 02062336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-03-15 13:54 - 2017-03-04 05:31 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2017-03-15 13:54 - 2017-03-04 05:30 - 01249280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2017-03-15 13:54 - 2017-03-04 05:29 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll
2017-03-15 13:54 - 2017-03-04 05:03 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-03-15 13:53 - 2017-03-04 10:01 - 00994760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2017-03-15 13:53 - 2017-03-04 09:54 - 00989528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2017-03-15 13:53 - 2017-03-04 09:39 - 01862008 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-03-15 13:53 - 2017-03-04 09:39 - 00602256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2017-03-15 13:53 - 2017-03-04 09:29 - 00535088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2017-03-15 13:53 - 2017-03-04 09:27 - 00922432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2017-03-15 13:53 - 2017-03-04 09:18 - 01554152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2017-03-15 13:53 - 2017-03-04 09:18 - 01552104 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-03-15 13:53 - 2017-03-04 09:12 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-03-15 13:53 - 2017-03-04 09:07 - 01040792 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2017-03-15 13:53 - 2017-03-04 09:06 - 06536248 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2017-03-15 13:53 - 2017-03-04 08:43 - 00306832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2017-03-15 13:53 - 2017-03-04 08:34 - 01824272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2017-03-15 13:53 - 2017-03-04 08:29 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-03-15 13:53 - 2017-03-04 08:29 - 05240960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-03-15 13:53 - 2017-03-04 08:29 - 04075184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-03-15 13:53 - 2017-03-04 08:29 - 00836752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2017-03-15 13:53 - 2017-03-04 08:29 - 00569752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2017-03-15 13:53 - 2017-03-04 08:25 - 00268040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2017-03-15 13:53 - 2017-03-04 08:00 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-03-15 13:53 - 2017-03-04 07:59 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2017-03-15 13:53 - 2017-03-04 07:57 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2017-03-15 13:53 - 2017-03-04 07:55 - 01370224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2017-03-15 13:53 - 2017-03-04 07:41 - 02448752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2017-03-15 13:53 - 2017-03-04 07:41 - 00882208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
2017-03-15 13:53 - 2017-03-04 07:40 - 00473616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2017-03-15 13:53 - 2017-03-04 07:40 - 00467440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
2017-03-15 13:53 - 2017-03-04 07:37 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdechangepin.exe
2017-03-15 13:53 - 2017-03-04 07:37 - 00351232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2017-03-15 13:53 - 2017-03-04 07:35 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-03-15 13:53 - 2017-03-04 07:27 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2017-03-15 13:53 - 2017-03-04 07:19 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2017-03-15 13:53 - 2017-03-04 07:15 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stdole2.tlb
2017-03-15 13:53 - 2017-03-04 07:11 - 00556544 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2017-03-15 13:53 - 2017-03-04 07:10 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2017-03-15 13:53 - 2017-03-04 07:06 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2017-03-15 13:53 - 2017-03-04 07:06 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallButtons.dll
2017-03-15 13:53 - 2017-03-04 07:04 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2017-03-15 13:53 - 2017-03-04 07:00 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sscore.dll
2017-03-15 13:53 - 2017-03-04 06:57 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2017-03-15 13:53 - 2017-03-04 06:57 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-03-15 13:53 - 2017-03-04 06:57 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp
2017-03-15 13:53 - 2017-03-04 06:57 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\feclient.dll
2017-03-15 13:53 - 2017-03-04 06:56 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oemlicense.dll
2017-03-15 13:53 - 2017-03-04 06:55 - 00302080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe
2017-03-15 13:53 - 2017-03-04 06:55 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2017-03-15 13:53 - 2017-03-04 06:53 - 00865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-03-15 13:53 - 2017-03-04 06:49 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icm32.dll
2017-03-15 13:53 - 2017-03-04 06:49 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2017-03-15 13:53 - 2017-03-04 06:48 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apds.dll
2017-03-15 13:53 - 2017-03-04 06:46 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
2017-03-15 13:53 - 2017-03-04 06:45 - 00395776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll
2017-03-15 13:53 - 2017-03-04 06:45 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2017-03-15 13:53 - 2017-03-04 06:41 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2017-03-15 13:53 - 2017-03-04 06:37 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2017-03-15 13:53 - 2017-03-04 06:33 - 00616960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2017-03-15 13:53 - 2017-03-04 06:32 - 00502272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2017-03-15 13:53 - 2017-03-04 06:32 - 00153088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSSync.dll
2017-03-15 13:53 - 2017-03-04 06:29 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2017-03-15 13:53 - 2017-03-04 06:26 - 01586176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2017-03-15 13:53 - 2017-03-04 06:26 - 01497088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2017-03-15 13:53 - 2017-03-04 06:26 - 01467904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2017-03-15 13:53 - 2017-03-04 06:25 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-03-15 13:53 - 2017-03-04 06:24 - 00885248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2017-03-15 13:53 - 2017-03-04 06:24 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2017-03-15 13:53 - 2017-03-04 06:24 - 00760320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2017-03-15 13:53 - 2017-03-04 06:23 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-03-15 13:53 - 2017-03-04 06:22 - 03695104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-03-15 13:53 - 2017-03-04 06:22 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2017-03-15 13:53 - 2017-03-04 06:19 - 00639488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2017-03-15 13:53 - 2017-03-04 06:15 - 01986560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2017-03-15 13:53 - 2017-03-04 06:13 - 00246784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qwave.dll
2017-03-15 13:53 - 2017-03-04 06:05 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Proximity.dll
2017-03-15 13:53 - 2017-03-04 06:03 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rshx32.dll
2017-03-15 13:53 - 2017-03-04 06:01 - 00724480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanpref.dll
2017-03-15 13:53 - 2017-03-04 06:00 - 01501184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-03-15 13:53 - 2017-03-04 05:58 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2017-03-15 13:53 - 2017-03-04 05:57 - 04412928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-03-15 13:53 - 2017-03-04 05:57 - 02878976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-03-15 13:53 - 2017-03-04 05:57 - 01708032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2017-03-15 13:53 - 2017-03-04 05:52 - 02000896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2017-03-15 13:53 - 2017-03-04 05:52 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-03-15 13:53 - 2017-03-04 05:51 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-03-15 13:53 - 2017-03-04 05:51 - 09921024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-03-15 13:53 - 2017-03-04 05:31 - 02911744 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2017-03-15 13:53 - 2017-03-04 05:19 - 01487872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
2017-03-15 13:52 - 2017-03-04 10:13 - 01997832 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-03-15 13:52 - 2017-03-04 10:13 - 00800080 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2017-03-15 13:52 - 2017-03-04 09:48 - 01297760 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2017-03-15 13:52 - 2017-03-04 09:19 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2017-03-15 13:52 - 2017-03-04 09:19 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2017-03-15 13:52 - 2017-03-04 09:19 - 00498952 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2017-03-15 13:52 - 2017-03-04 09:18 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-03-15 13:52 - 2017-03-04 09:18 - 01152328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-03-15 13:52 - 2017-03-04 09:18 - 01092464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2017-03-15 13:52 - 2017-03-04 09:18 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-03-15 13:52 - 2017-03-04 09:18 - 01017032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2017-03-15 13:52 - 2017-03-04 09:18 - 00858952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-03-15 13:52 - 2017-03-04 09:18 - 00819648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-03-15 13:52 - 2017-03-04 09:08 - 22560744 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-03-15 13:52 - 2017-03-04 09:08 - 06605544 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-03-15 13:52 - 2017-03-04 08:17 - 00315232 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2017-03-15 13:52 - 2017-03-04 08:17 - 00038240 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2017-03-15 13:52 - 2017-03-04 08:16 - 00388896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-03-15 13:52 - 2017-03-04 08:09 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2017-03-15 13:52 - 2017-03-04 08:09 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-03-15 13:52 - 2017-03-04 08:03 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2017-03-15 13:52 - 2017-03-04 08:01 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-03-15 13:52 - 2017-03-04 07:59 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\stdole2.tlb
2017-03-15 13:52 - 2017-03-04 07:57 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpreference.exe
2017-03-15 13:52 - 2017-03-04 07:52 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2017-03-15 13:52 - 2017-03-04 07:49 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2017-03-15 13:52 - 2017-03-04 07:47 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2017-03-15 13:52 - 2017-03-04 07:44 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2017-03-15 13:52 - 2017-03-04 07:41 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2017-03-15 13:52 - 2017-03-04 07:34 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2017-03-15 13:52 - 2017-03-04 07:33 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\LegacyNetUXHost.exe
2017-03-15 13:52 - 2017-03-04 07:31 - 00185856 _____ C:\WINDOWS\system32\ism32k.dll
2017-03-15 13:52 - 2017-03-04 07:29 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\icm32.dll
2017-03-15 13:52 - 2017-03-04 07:29 - 00216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\P2P.dll
2017-03-15 13:52 - 2017-03-04 07:27 - 00531968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2017-03-15 13:52 - 2017-03-04 07:25 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2017-03-15 13:52 - 2017-03-04 07:25 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-03-15 13:52 - 2017-03-04 07:25 - 00287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2017-03-15 13:52 - 2017-03-04 07:23 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2017-03-15 13:52 - 2017-03-04 07:22 - 00450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2017-03-15 13:52 - 2017-03-04 07:20 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2017-03-15 13:52 - 2017-03-04 07:19 - 00510464 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll
2017-03-15 13:52 - 2017-03-04 07:19 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2017-03-15 13:52 - 2017-03-04 07:19 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2017-03-15 13:52 - 2017-03-04 07:17 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-03-15 13:52 - 2017-03-04 07:17 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2017-03-15 13:52 - 2017-03-04 07:16 - 00619520 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2017-03-15 13:52 - 2017-03-04 07:16 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2017-03-15 13:52 - 2017-03-04 07:15 - 00695296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2017-03-15 13:52 - 2017-03-04 07:13 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-03-15 13:52 - 2017-03-04 07:11 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2017-03-15 13:52 - 2017-03-04 07:09 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-03-15 13:52 - 2017-03-04 07:09 - 00351232 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll
2017-03-15 13:52 - 2017-03-04 07:08 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2017-03-15 13:52 - 2017-03-04 07:08 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2017-03-15 13:52 - 2017-03-04 07:08 - 00852992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2017-03-15 13:52 - 2017-03-04 07:08 - 00787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll
2017-03-15 13:52 - 2017-03-04 07:08 - 00674304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2017-03-15 13:52 - 2017-03-04 07:05 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2017-03-15 13:52 - 2017-03-04 07:04 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2017-03-15 13:52 - 2017-03-04 07:03 - 01001472 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2017-03-15 13:52 - 2017-03-04 07:03 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2017-03-15 13:52 - 2017-03-04 07:02 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2017-03-15 13:52 - 2017-03-04 07:02 - 00817152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Search.dll
2017-03-15 13:52 - 2017-03-04 07:00 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-03-15 13:52 - 2017-03-04 07:00 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2017-03-15 13:52 - 2017-03-04 06:53 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-03-15 13:52 - 2017-03-04 06:49 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\P2P.dll
2017-03-15 13:52 - 2017-03-04 06:41 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\qwave.dll
2017-03-15 13:52 - 2017-03-04 06:35 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2017-03-15 13:52 - 2017-03-04 06:33 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2017-03-15 13:52 - 2017-03-04 06:32 - 05123072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-03-15 13:52 - 2017-03-04 06:25 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanpref.dll
2017-03-15 13:52 - 2017-03-04 06:24 - 00931328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2017-03-15 13:52 - 2017-03-04 06:18 - 07977984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2017-03-15 13:52 - 2017-03-04 06:00 - 07200256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-03-15 13:52 - 2017-03-04 05:59 - 00882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2017-03-15 13:52 - 2017-03-04 05:52 - 00957952 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2017-03-15 13:52 - 2017-03-04 05:36 - 03428352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-03-15 13:52 - 2017-03-04 05:36 - 01385472 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2017-03-15 13:52 - 2017-03-04 05:34 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-03-15 13:52 - 2017-03-04 05:28 - 14258688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2017-03-15 13:52 - 2017-03-04 05:26 - 12590080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2017-03-15 13:52 - 2017-03-04 05:20 - 00381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2017-03-15 13:51 - 2017-03-04 10:13 - 07467872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-03-15 13:51 - 2017-03-04 10:13 - 01098648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2017-03-15 13:51 - 2017-03-04 10:12 - 02656952 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2017-03-15 13:51 - 2017-03-04 10:10 - 00754664 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-03-15 13:51 - 2017-03-04 10:09 - 00610632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2017-03-15 13:51 - 2017-03-04 10:04 - 00687496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2017-03-15 13:51 - 2017-03-04 09:56 - 01637216 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-03-15 13:51 - 2017-03-04 09:49 - 03449168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2017-03-15 13:51 - 2017-03-04 09:20 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll
2017-03-15 13:51 - 2017-03-04 09:12 - 03695152 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-03-15 13:51 - 2017-03-04 09:12 - 02607336 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2017-03-15 13:51 - 2017-03-04 08:32 - 02773096 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2017-03-15 13:51 - 2017-03-04 08:29 - 00216416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-03-15 13:51 - 2017-03-04 08:27 - 00431456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2017-03-15 13:51 - 2017-03-04 08:24 - 00420704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2017-03-15 13:51 - 2017-03-04 08:16 - 02831488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2017-03-15 13:51 - 2017-03-04 08:16 - 01062992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
2017-03-15 13:51 - 2017-03-04 08:15 - 00549088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2017-03-15 13:51 - 2017-03-04 08:15 - 00521192 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2017-03-15 13:51 - 2017-03-04 07:59 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2017-03-15 13:51 - 2017-03-04 07:58 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2017-03-15 13:51 - 2017-03-04 07:49 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2017-03-15 13:51 - 2017-03-04 07:45 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2017-03-15 13:51 - 2017-03-04 07:42 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll
2017-03-15 13:51 - 2017-03-04 07:39 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
2017-03-15 13:51 - 2017-03-04 07:39 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabbtnEx.dll
2017-03-15 13:51 - 2017-03-04 07:29 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2017-03-15 13:51 - 2017-03-04 07:28 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\apds.dll
2017-03-15 13:51 - 2017-03-04 07:28 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2017-03-15 13:51 - 2017-03-04 07:27 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2017-03-15 13:51 - 2017-03-04 07:26 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2017-03-15 13:51 - 2017-03-04 07:26 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2017-03-15 13:51 - 2017-03-04 07:25 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinFax.dll
2017-03-15 13:51 - 2017-03-04 07:23 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2017-03-15 13:51 - 2017-03-04 07:21 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\scapi.dll
2017-03-15 13:51 - 2017-03-04 07:20 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-03-15 13:51 - 2017-03-04 07:10 - 00509440 _____ (Microsoft Corporation) C:\WINDOWS\system32\energy.dll
2017-03-15 13:51 - 2017-03-04 07:08 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmIndexer.dll
2017-03-15 13:51 - 2017-03-04 07:08 - 00472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll
2017-03-15 13:51 - 2017-03-04 07:08 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSSync.dll
2017-03-15 13:51 - 2017-03-04 07:07 - 00915456 _____ (Microsoft Corporation) C:\WINDOWS\system32\configurationclient.dll
2017-03-15 13:51 - 2017-03-04 07:05 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-03-15 13:51 - 2017-03-04 07:05 - 00602624 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-03-15 13:51 - 2017-03-04 07:03 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2017-03-15 13:51 - 2017-03-04 07:03 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2017-03-15 13:51 - 2017-03-04 07:00 - 01239552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2017-03-15 13:51 - 2017-03-04 07:00 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-03-15 13:51 - 2017-03-04 06:59 - 01900544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2017-03-15 13:51 - 2017-03-04 06:59 - 01847808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2017-03-15 13:51 - 2017-03-04 06:59 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-03-15 13:51 - 2017-03-04 06:58 - 01752576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2017-03-15 13:51 - 2017-03-04 06:58 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingMonitor.dll
2017-03-15 13:51 - 2017-03-04 06:57 - 01040896 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2017-03-15 13:51 - 2017-03-04 06:56 - 01648128 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2017-03-15 13:51 - 2017-03-04 06:56 - 00961536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2017-03-15 13:51 - 2017-03-04 06:55 - 01319424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2017-03-15 13:51 - 2017-03-04 06:54 - 00549888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2017-03-15 13:51 - 2017-03-04 06:54 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2017-03-15 13:51 - 2017-03-04 06:50 - 02054144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2017-03-15 13:51 - 2017-03-04 06:49 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2017-03-15 13:51 - 2017-03-04 06:48 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-03-15 13:51 - 2017-03-04 06:46 - 00283136 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2017-03-15 13:51 - 2017-03-04 06:46 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinFax.dll
2017-03-15 13:51 - 2017-03-04 06:42 - 02436096 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2017-03-15 13:51 - 2017-03-04 06:31 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2017-03-15 13:51 - 2017-03-04 06:30 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-03-15 13:51 - 2017-03-04 06:29 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2017-03-15 13:51 - 2017-03-04 06:25 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2017-03-15 13:51 - 2017-03-04 06:24 - 01946112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-03-15 13:51 - 2017-03-04 06:24 - 01729024 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-03-15 13:51 - 2017-03-04 06:24 - 01097728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-03-15 13:51 - 2017-03-04 06:22 - 00995328 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2017-03-15 13:51 - 2017-03-04 06:19 - 03404800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-03-15 13:51 - 2017-03-04 06:13 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2017-03-15 13:51 - 2017-03-04 06:11 - 02444800 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2017-03-15 13:51 - 2017-03-04 06:10 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2017-03-15 13:51 - 2017-03-04 06:04 - 00733184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-03-15 13:51 - 2017-03-04 06:03 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Tabbtn.dll
2017-03-15 13:51 - 2017-03-04 05:58 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-03-15 13:51 - 2017-03-04 05:55 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-03-15 13:51 - 2017-03-04 05:50 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-03-15 13:51 - 2017-03-04 05:48 - 04895744 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-03-15 13:51 - 2017-03-04 05:43 - 22375424 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-03-15 13:51 - 2017-03-04 05:39 - 18672128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-03-15 13:51 - 2017-03-04 05:37 - 03664384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-03-15 13:51 - 2017-03-04 05:36 - 19344384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-03-15 13:51 - 2017-03-04 05:36 - 12134912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-03-15 13:51 - 2017-03-04 05:34 - 06312448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2017-03-15 13:51 - 2017-03-04 05:33 - 24603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-03-15 13:51 - 2017-03-04 05:31 - 13392384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-03-15 13:51 - 2017-03-04 05:21 - 05671424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-03-15 13:51 - 2017-03-04 05:19 - 07855616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-03-15 13:51 - 2017-01-24 04:22 - 00447095 _____ C:\WINDOWS\system32\ApnDatabase.xml
2017-03-15 13:50 - 2017-03-04 10:15 - 01030416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2017-03-15 13:50 - 2017-03-04 10:15 - 00875480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2017-03-15 13:50 - 2017-03-04 09:55 - 01038176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2017-03-15 13:50 - 2017-03-04 09:09 - 00730352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2017-03-15 13:50 - 2017-03-04 09:09 - 00230752 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-03-15 13:50 - 2017-03-04 09:08 - 04516800 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-03-15 13:50 - 2017-03-04 09:08 - 00725776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2017-03-15 13:50 - 2017-03-04 09:08 - 00566112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-03-15 13:50 - 2017-03-04 09:07 - 01540224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-03-15 13:50 - 2017-03-04 09:06 - 00742192 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2017-03-15 13:50 - 2017-03-04 09:06 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2017-03-15 13:50 - 2017-03-04 09:04 - 01128104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2017-03-15 13:50 - 2017-03-04 09:04 - 00625000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-03-15 13:50 - 2017-03-04 09:03 - 00341944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2017-03-15 13:50 - 2017-03-04 08:32 - 01987424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-03-15 13:50 - 2017-03-04 08:31 - 01594416 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2017-03-15 13:50 - 2017-03-04 08:17 - 01617760 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-03-15 13:50 - 2017-03-04 08:17 - 01294688 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-03-15 13:50 - 2017-03-04 08:17 - 00655200 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-03-15 13:50 - 2017-03-04 08:17 - 00565088 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-03-15 13:50 - 2017-03-04 08:17 - 00343904 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2017-03-15 13:50 - 2017-03-04 08:17 - 00242528 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2017-03-15 13:50 - 2017-03-04 08:17 - 00142176 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-03-15 13:50 - 2017-03-04 08:17 - 00086368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2017-03-15 13:50 - 2017-03-04 07:50 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-03-15 13:50 - 2017-03-04 07:49 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcdAutoSetup.dll
2017-03-15 13:50 - 2017-03-04 07:48 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scfilter.sys
2017-03-15 13:50 - 2017-03-04 07:40 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2017-03-15 13:50 - 2017-03-04 07:38 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oemlicense.dll
2017-03-15 13:50 - 2017-03-04 07:38 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\feclient.dll
2017-03-15 13:50 - 2017-03-04 07:36 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2017-03-15 13:50 - 2017-03-04 07:31 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2017-03-15 13:50 - 2017-03-04 07:29 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2017-03-15 13:50 - 2017-03-04 07:28 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-03-15 13:50 - 2017-03-04 07:26 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-03-15 13:50 - 2017-03-04 07:26 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2017-03-15 13:50 - 2017-03-04 07:24 - 00431104 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2017-03-15 13:50 - 2017-03-04 07:24 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2017-03-15 13:50 - 2017-03-04 07:22 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\APHostService.dll
2017-03-15 13:50 - 2017-03-04 07:21 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack_win.dll
2017-03-15 13:50 - 2017-03-04 07:16 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll
2017-03-15 13:50 - 2017-03-04 07:15 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2017-03-15 13:50 - 2017-03-04 07:14 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2017-03-15 13:50 - 2017-03-04 07:13 - 00602112 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2017-03-15 13:50 - 2017-03-04 07:11 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2017-03-15 13:50 - 2017-03-04 07:09 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2017-03-15 13:50 - 2017-03-04 07:08 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2017-03-15 13:50 - 2017-03-04 07:07 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2017-03-15 13:50 - 2017-03-04 07:07 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-03-15 13:50 - 2017-03-04 07:07 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2017-03-15 13:50 - 2017-03-04 07:06 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2017-03-15 13:50 - 2017-03-04 07:05 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2017-03-15 13:50 - 2017-03-04 07:03 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2017-03-15 13:50 - 2017-03-04 07:02 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-03-15 13:50 - 2017-03-04 07:02 - 01159168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationFrame.dll
2017-03-15 13:50 - 2017-03-04 07:02 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-03-15 13:50 - 2017-03-04 07:02 - 00990208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2017-03-15 13:50 - 2017-03-04 07:02 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2017-03-15 13:50 - 2017-03-04 07:02 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-03-15 13:50 - 2017-03-04 06:58 - 01717760 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2017-03-15 13:50 - 2017-03-04 06:58 - 01575936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2017-03-15 13:50 - 2017-03-04 06:57 - 02731008 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2017-03-15 13:50 - 2017-03-04 06:55 - 01661952 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2017-03-15 13:50 - 2017-03-04 06:53 - 04456448 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-03-15 13:50 - 2017-03-04 06:53 - 01073152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-03-15 13:50 - 2017-03-04 06:52 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\licensingdiag.exe
2017-03-15 13:50 - 2017-03-04 06:47 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-03-15 13:50 - 2017-03-04 06:47 - 01052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2017-03-15 13:50 - 2017-03-04 06:41 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2017-03-15 13:50 - 2017-03-04 06:39 - 01297408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe
2017-03-15 13:50 - 2017-03-04 06:35 - 03586560 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-03-15 13:50 - 2017-03-04 06:34 - 02610176 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-03-15 13:50 - 2017-03-04 06:31 - 01755648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2017-03-15 13:50 - 2017-03-04 06:31 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2017-03-15 13:50 - 2017-03-04 06:30 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Proximity.dll
2017-03-15 13:50 - 2017-03-04 06:27 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2017-03-15 13:50 - 2017-03-04 06:27 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2017-03-15 13:50 - 2017-03-04 06:27 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rshx32.dll
2017-03-15 13:50 - 2017-03-04 06:24 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2017-03-15 13:50 - 2017-03-04 06:20 - 02175488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-03-15 13:50 - 2017-03-04 06:19 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2017-03-15 13:50 - 2017-03-04 06:18 - 04826624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-03-15 13:50 - 2017-03-04 06:12 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-03-15 13:50 - 2017-03-04 06:08 - 03585536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-03-15 13:50 - 2017-03-04 06:08 - 00984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-03-15 13:50 - 2017-03-04 06:08 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabSvc.dll
2017-03-15 13:50 - 2017-03-04 06:03 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2017-03-15 13:50 - 2017-03-04 05:56 - 02563584 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll
2017-03-15 13:50 - 2017-03-04 05:52 - 01797120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-03-15 13:50 - 2017-03-04 05:43 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2017-03-15 13:50 - 2017-03-04 05:42 - 00651776 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
2017-03-15 13:50 - 2017-03-04 05:41 - 11545600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-03-15 13:50 - 2017-03-04 05:35 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2017-03-15 13:50 - 2017-03-04 05:34 - 00636928 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll
2017-03-15 13:50 - 2017-03-04 05:31 - 06976512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-03-15 13:50 - 2017-03-04 05:31 - 03994112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-03-15 13:50 - 2017-03-04 05:13 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-03-12 14:30 - 2017-03-12 18:29 - 4265125826 _____ C:\Users\Vladimír\Downloads\Trollové.mkv
2017-03-12 11:05 - 2017-03-12 14:18 - 3455883436 _____ C:\Users\Vladimír\Downloads\Příchozí.mkv
2017-03-11 11:59 - 2017-03-11 14:43 - 2936777944 _____ C:\Users\Vladimír\Downloads\Odvážná Vaiana-Legenda o konci světa.mkv
2017-03-07 14:47 - 2017-03-07 14:47 - 00045971 _____ C:\Users\Vladimír\Downloads\Informace-pro-klienty-o-zmenach-podminek-platne-050117.pdf

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-04-06 16:57 - 2016-11-15 19:00 - 00000000 ____D C:\Users\Vladimír\AppData\LocalLow\Mozilla
2017-04-06 16:56 - 2016-04-26 16:07 - 02037110 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-04-06 16:56 - 2016-02-13 14:50 - 00842644 _____ C:\WINDOWS\system32\perfh005.dat
2017-04-06 16:56 - 2016-02-13 14:50 - 00192218 _____ C:\WINDOWS\system32\perfc005.dat
2017-04-06 16:56 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
2017-04-06 16:53 - 2016-08-30 17:35 - 00000000 ____D C:\AdwCleaner
2017-04-06 16:49 - 2016-04-26 16:05 - 00000000 ____D C:\ProgramData\NVIDIA
2017-04-06 16:49 - 2016-02-13 15:10 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-04-06 16:49 - 2015-10-30 08:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2017-04-06 16:29 - 2016-08-05 17:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-04-06 15:59 - 2016-05-02 18:43 - 00000000 ____D C:\Users\Vladimír\AppData\Local\CrashDumps
2017-04-06 15:26 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2017-04-06 15:26 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-04-06 15:22 - 2015-10-30 08:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2017-04-06 15:21 - 2015-10-30 09:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2017-04-06 15:13 - 2016-08-18 18:36 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2017-04-06 15:11 - 2016-09-23 16:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-04-05 18:17 - 2016-04-26 16:38 - 00000000 ____D C:\Users\Vladimír\AppData\Local\ESET
2017-04-05 06:21 - 2010-11-21 05:27 - 00523432 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-04-02 18:37 - 2016-04-27 20:08 - 00000000 ____D C:\Users\Vladimír\AppData\Roaming\vlc
2017-04-01 15:07 - 2016-09-23 16:35 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-03-31 14:25 - 2016-04-26 16:07 - 00000000 ____D C:\Users\Vladimír
2017-03-24 18:11 - 2016-02-13 06:07 - 00264888 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-03-17 20:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2017-03-17 20:20 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-03-17 19:39 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache
2017-03-17 17:23 - 2016-02-13 15:14 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-03-17 17:14 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-03-17 17:13 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-03-17 17:13 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-03-17 17:12 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-03-17 17:12 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2017-03-17 17:12 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Provisioning
2017-03-17 17:12 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-03-17 17:12 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Defender
2017-03-17 17:12 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-03-17 17:12 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2017-03-17 16:49 - 2016-04-26 16:24 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-03-17 16:47 - 2016-04-26 16:24 - 138634176 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

==================== Files in the root of some directories =======

2016-10-22 16:34 - 2016-10-22 16:34 - 0099384 _____ () C:\Users\Vladimír\AppData\Roaming\inst.exe
2016-10-22 16:34 - 2016-10-22 16:34 - 0007859 _____ () C:\Users\Vladimír\AppData\Roaming\pcouffin.cat
2016-10-22 16:34 - 2016-10-22 16:34 - 0001167 _____ () C:\Users\Vladimír\AppData\Roaming\pcouffin.inf
2016-10-22 16:34 - 2016-10-22 16:34 - 0000055 _____ () C:\Users\Vladimír\AppData\Roaming\pcouffin.log
2016-10-22 16:34 - 2016-10-22 16:34 - 0082816 _____ (VSO Software) C:\Users\Vladimír\AppData\Roaming\pcouffin.sys
2017-01-25 17:44 - 2017-01-25 17:44 - 0000218 _____ () C:\Users\Vladimír\AppData\Local\recently-used.xbel

Some files in TEMP:
====================
2017-04-06 16:30 - 2017-04-05 18:01 - 11583584 _____ (SurfRight B.V.) C:\Users\Vladimír\AppData\Local\Temp\HitmanPro.exe
2017-04-06 16:28 - 2017-04-06 16:28 - 7178424 _____ (VS Revo Group ) C:\Users\Vladimír\AppData\Local\Temp\VSUSetup.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-04-05 19:28

==================== End of FRST.txt ============================

[Rudy]

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.

[vlas]

Dobrý den,zde je log:
# AdwCleaner v6.045 - Log vytvořen 08/04/2017 v 15:53:48
# Aktualizováno dne 28/03/2017 z Malwarebytes
# Databáze : 2017-04-06.1 [Server]
# Operační systém : Windows 10 Pro (X64)
# Uživatelské jméno : Vladimír - VLADIMÍR-PC
# Spuštěno z : C:\Users\Vladimír\Desktop\adwcleaner_6.045.exe
# Mod: Skenování
# Podpora : https://www.malwarebytes.com/support



***** [ Služby ] *****

Nebyly nalezeny žádné škodlivé služby.


***** [ Složky ] *****

Složka nalezena: C:\sh4ldr
Složka nalezena: C:\WINDOWS\SysWOW64\C2MP
Složka nalezena: C:\WINDOWS\SysWOW64\config\systemprofile\AppData\Roaming\Solvusoft


***** [ Soubory ] *****

Soubor nalezen: C:\WINDOWS\SysNative\drivers\EsgScanner.sys


***** [ DLL ] *****

Nebyly nalezeny žádné škodlivé DLL.


***** [ WMI ] *****

Nebyly nalezeny žádné škodlivé klíče.


***** [ Zástupci ] *****

Žádný infikovaný zástupce nenalezen.


***** [ Naplánované úlohy ] *****

Žádná nebezpečná úloha nenalezena.


***** [ Registry ] *****

Klíč nalezen: [x64] HKLM\SOFTWARE\EnigmaSoftwareGroup
Klíč nalezen: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\brutalniceny.cz
Klíč nalezen: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\izito.com
Klíč nalezen: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\klavesnice-mysi.h
Klíč nalezen: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\lednice.heureka.c
Klíč nalezen: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\slunecnice.cz
Klíč nalezen: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\srovnanicen.cz
Klíč nalezen: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.brutalniceny.
Klíč nalezen: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.izito.com
Klíč nalezen: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\brutalniceny.cz
Klíč nalezen: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\izito.com
Klíč nalezen: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\klavesnice-mysi.heur
Klíč nalezen: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\lednice.heureka.cz
Klíč nalezen: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\slunecnice.cz
Klíč nalezen: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\srovnanicen.cz
Klíč nalezen: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.brutalniceny.cz
Klíč nalezen: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.izito.com
Klíč nalezen: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\brutalniceny.cz
Klíč nalezen: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\izito.com
Klíč nalezen: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\klavesnice-mysi
Klíč nalezen: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\lednice.heureka
Klíč nalezen: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\slunecnice.cz
Klíč nalezen: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\srovnanicen.cz
Klíč nalezen: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.brutalnicen
Klíč nalezen: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.izito.com
Klíč nalezen: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\brutalniceny.cz
Klíč nalezen: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\izito.com
Klíč nalezen: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\klavesnice-mysi.he
Klíč nalezen: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\lednice.heureka.cz
Klíč nalezen: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\slunecnice.cz
Klíč nalezen: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\srovnanicen.cz
Klíč nalezen: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.brutalniceny.c
Klíč nalezen: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.izito.com


***** [ Internetové prohlížeče ] *****

Firefox nastavení nalezeno: [C:\Users\Vladimír\AppData\Roaming\Mozilla\Firefox\Profiles\zr8qwfw9.default\prefs.js] - "extensions.Imagus.sieve" - "{\"dereferers\":{\"link\":\"^[^/]{3,70}/\\\\??(hxxps?:[^?#]+\\\\.(?:jpe?g a?png gi
Nebyly nalezeny žádné škodlivé položky prohlížeče Chromium.

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [3146 Bajty] - [02/10/2016 14:53:28]
C:\AdwCleaner\AdwCleaner[C2].txt - [9482 Bajty] - [26/03/2017 22:31:05]
C:\AdwCleaner\AdwCleaner[C3].txt - [9894 Bajty] - [06/04/2017 16:48:23]
C:\AdwCleaner\AdwCleaner[S0].txt - [1666 Bajty] - [30/08/2016 17:37:30]
C:\AdwCleaner\AdwCleaner[S10].txt - [9611 Bajty] - [06/04/2017 16:53:19]
C:\AdwCleaner\AdwCleaner[S11].txt - [8756 Bajty] - [08/04/2017 15:53:48]
C:\AdwCleaner\AdwCleaner[S1].txt - [3305 Bajty] - [16/09/2016 18:21:10]
C:\AdwCleaner\AdwCleaner[S2].txt - [3353 Bajty] - [17/09/2016 11:27:25]
C:\AdwCleaner\AdwCleaner[S3].txt - [3585 Bajty] - [24/09/2016 18:24:45]
C:\AdwCleaner\AdwCleaner[S4].txt - [3461 Bajty] - [02/10/2016 14:52:23]
C:\AdwCleaner\AdwCleaner[S5].txt - [9836 Bajty] - [26/03/2017 22:26:30]
C:\AdwCleaner\AdwCleaner[S6].txt - [9776 Bajty] - [27/03/2017 18:31:47]
C:\AdwCleaner\AdwCleaner[S7].txt - [9825 Bajty] - [27/03/2017 19:07:42]
C:\AdwCleaner\AdwCleaner[S8].txt - [9896 Bajty] - [31/03/2017 14:05:48]
C:\AdwCleaner\AdwCleaner[S9].txt - [10078 Bajty] - [06/04/2017 16:33:45]

########## EOF - C:\AdwCleaner\AdwCleaner[S11].txt - [9488 Bajty] ##########

[Rudy]

Musíte ještě kliknout na mazání. ADW jen skenoval, ale nemazal. Zkuste ještě jednou.

[vlas]

# AdwCleaner v6.045 - Log vytvořen 17/04/2017 v 15:30:47
# Aktualizováno dne 28/03/2017 z Malwarebytes
# Databáze : 2017-04-16.1 [Server]
# Operační systém : Windows 10 Pro (X64)
# Uživatelské jméno : Vladimír - VLADIMÍR-PC
# Spuštěno z : D:\adwcleaner_6.045.exe
# Mod: Čištění
# Podpora : https://www.malwarebytes.com/support



***** [ Služby ] *****



***** [ Složky ] *****



***** [ Soubory ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Zástupci ] *****



***** [ Naplánované úlohy ] *****



***** [ Registry ] *****



***** [ Prohlížeče ] *****

[-] Firefox předvolby vyčištěny:


*************************

:: "Tracing" klíče smazány
:: Winsock nastavení vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [3146 Bajty] - [02/10/2016 14:53:28]
C:\AdwCleaner\AdwCleaner[C2].txt - [9482 Bajty] - [26/03/2017 22:31:05]
C:\AdwCleaner\AdwCleaner[C3].txt - [9894 Bajty] - [06/04/2017 16:48:23]
C:\AdwCleaner\AdwCleaner[C4].txt - [9771 Bajty] - [15/04/2017 12:00:03]
C:\AdwCleaner\AdwCleaner[C5].txt - [1110 Bajty] - [17/04/2017 15:30:47]
C:\AdwCleaner\AdwCleaner[S0].txt - [1666 Bajty] - [30/08/2016 17:37:30]
C:\AdwCleaner\AdwCleaner[S10].txt - [9611 Bajty] - [06/04/2017 16:53:19]
C:\AdwCleaner\AdwCleaner[S11].txt - [9636 Bajty] - [08/04/2017 15:53:48]
C:\AdwCleaner\AdwCleaner[S12].txt - [9710 Bajty] - [15/04/2017 11:54:04]
C:\AdwCleaner\AdwCleaner[S13].txt - [2761 Bajty] - [17/04/2017 15:30:06]
C:\AdwCleaner\AdwCleaner[S1].txt - [3305 Bajty] - [16/09/2016 18:21:10]
C:\AdwCleaner\AdwCleaner[S2].txt - [3353 Bajty] - [17/09/2016 11:27:25]
C:\AdwCleaner\AdwCleaner[S3].txt - [3585 Bajty] - [24/09/2016 18:24:45]
C:\AdwCleaner\AdwCleaner[S4].txt - [3461 Bajty] - [02/10/2016 14:52:23]
C:\AdwCleaner\AdwCleaner[S5].txt - [9836 Bajty] - [26/03/2017 22:26:30]
C:\AdwCleaner\AdwCleaner[S6].txt - [9776 Bajty] - [27/03/2017 18:31:47]
C:\AdwCleaner\AdwCleaner[S7].txt - [9825 Bajty] - [27/03/2017 19:07:42]
C:\AdwCleaner\AdwCleaner[S8].txt - [9896 Bajty] - [31/03/2017 14:05:48]
C:\AdwCleaner\AdwCleaner[S9].txt - [10078 Bajty] - [06/04/2017 16:33:45]

########## EOF - C:\AdwCleaner\AdwCleaner[C5].txt - [2210 Bajty] ##########

[Rudy]

Dejte nový log FRST.

[vlas]

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17-04-2017 01
Ran by Vladimír (administrator) on VLADIMÍR-PC (18-04-2017 15:44:07)
Running from C:\Users\Vladimír\Desktop
Loaded Profiles: Vladimír (Available Profiles: Vladimír & DefaultAppPool)
Platform: Windows 10 Pro Version 1511 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe
(VIA Technologies, Inc.) C:\WINDOWS\System32\ViakaraokeSrv.exe
(Microsoft Corporation) C:\WINDOWS\System32\mqsvc.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avpui.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe
(Igor Gottwald - OKsoftware) C:\Program Files (x86)\OKsoftware\Svátky a výročí\Vyroci.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Microsoft Corporation) C:\WINDOWS\System32\InstallAgent.exe
(Microsoft Corporation) C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\WINDOWS\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\WINDOWS\System32\dllhost.exe
(Microsoft Corporation) C:\WINDOWS\System32\dllhost.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1793736 2015-02-20] (NVIDIA Corporation)
HKU\S-1-5-21-4276936731-1478878061-1455199337-1000\...\Run: [] => [X]
HKU\S-1-5-21-4276936731-1478878061-1455199337-1000\...\Run: [Svátky a výročí] => C:\Program Files (x86)\OKsoftware\Svátky a výročí\Vyroci.exe [1019904 2006-04-28] (Igor Gottwald - OKsoftware)
HKU\S-1-5-21-4276936731-1478878061-1455199337-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [31744 2015-10-30] (Microsoft Corporation)
Startup: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Uninstall LastPass RunOnce.lnk [2017-04-15]
ShortcutTarget: Uninstall LastPass RunOnce.lnk -> C:\Program Files (x86)\Common Files\lpuninstall.exe (LastPass)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{d6c9f7b1-a030-4be7-835d-0fee603015c0}: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{ee8c7f5c-a685-407e-8899-025d3a653768}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-4276936731-1478878061-1455199337-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
BHO: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2017-03-29] (AO Kaspersky Lab)
BHO: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar_x64.dll => No File
BHO-x32: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2017-03-29] (AO Kaspersky Lab)
Toolbar: HKLM - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2017-03-29] (AO Kaspersky Lab)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll No File
Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2017-03-29] (AO Kaspersky Lab)

Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-4276936731-1478878061-1455199337-1000 -> hxxp://www.seznam.cz/

FireFox:
========
FF DefaultProfile: zr8qwfw9.default
FF ProfilePath: C:\Users\Vladimír\AppData\Roaming\Mozilla\Firefox\Profiles\zr8qwfw9.default [2017-04-18]
FF Homepage: Mozilla\Firefox\Profiles\zr8qwfw9.default -> hxxps://www.seznam.cz/
FF Extension: (S3.Google Translator) - C:\Users\Vladimír\AppData\Roaming\Mozilla\Firefox\Profiles\zr8qwfw9.default\Extensions\s3google@translator.xpi [2017-04-02]
FF Extension: (Imagus) - C:\Users\Vladimír\AppData\Roaming\Mozilla\Firefox\Profiles\zr8qwfw9.default\Extensions\{00000f2a-7cde-4f20-83ed-434fcb420d71}.xpi [2017-03-02]
FF Extension: (Video DownloadHelper) - C:\Users\Vladimír\AppData\Roaming\Mozilla\Firefox\Profiles\zr8qwfw9.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-12-30]
FF Extension: (Adblock Plus) - C:\Users\Vladimír\AppData\Roaming\Mozilla\Firefox\Profiles\zr8qwfw9.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-23]
FF Extension: (Site Deployment Checker) - C:\Program Files\Mozilla Firefox\browser\features\deployment-checker@mozilla.org.xpi [2017-04-01] [not signed]
FF HKLM\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi [2017-03-29]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\WINDOWS\system32\C2MP\npdivx32.dll [No File]
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-11-14] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-11-14] (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
CHR HKLM-x32\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [173472 2017-02-15] (SUPERAntiSpyware.com)
R2 AVP17.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe [241544 2016-06-28] (AO Kaspersky Lab)
S3 klvssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\vssbridge64.exe [77328 2016-06-28] (AO Kaspersky Lab)
R2 KSDE1.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe [241544 2016-06-28] (AO Kaspersky Lab)
R2 VIAKaraokeService; C:\WINDOWS\system32\viakaraokesrv.exe [36504 2015-06-22] (VIA Technologies, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2016-10-25] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2017-03-28] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [238936 2016-06-10] (AO Kaspersky Lab)
R3 dvdfab; C:\WINDOWS\system32\drivers\dvdfab.sys [82904 2016-08-31] (Windows (R) Win 7 DDK provider)
S3 fcvsc; C:\WINDOWS\system32\drivers\fcvsc.sys [32768 2015-11-17] (Microsoft Corporation) [File not signed]
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2016-11-24] (Huawei Technologies Co., Ltd.)
R0 kl1; C:\WINDOWS\System32\DRIVERS\kl1.sys [554416 2016-06-02] (AO Kaspersky Lab)
R0 klbackupdisk; C:\WINDOWS\System32\DRIVERS\klbackupdisk.sys [63920 2016-06-07] (AO Kaspersky Lab)
R1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [86352 2016-06-15] (AO Kaspersky Lab)
R2 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [78216 2016-05-31] (AO Kaspersky Lab)
S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [28792 2016-03-31] (AO Kaspersky Lab)
R3 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [197336 2017-04-12] (AO Kaspersky Lab)
R1 klhk; C:\WINDOWS\System32\drivers\klhk.sys [509728 2017-04-06] (AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP17.0.0\Bases\klids.sys [171312 2017-04-18] (AO Kaspersky Lab)
R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1018592 2017-04-12] (AO Kaspersky Lab)
R1 KLIM6; C:\WINDOWS\system32\DRIVERS\klim6.sys [57424 2017-03-29] (AO Kaspersky Lab)
R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [52136 2016-05-19] (AO Kaspersky Lab)
R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [45488 2016-05-31] (AO Kaspersky Lab)
R3 kltap; C:\WINDOWS\System32\drivers\kltap.sys [52152 2016-06-07] (The OpenVPN Project)
R0 klupd_klif_arkmon; C:\WINDOWS\System32\Drivers\klupd_klif_arkmon.sys [218920 2017-04-06] (AO Kaspersky Lab)
R3 klupd_klif_kimul; C:\WINDOWS\System32\Drivers\klupd_klif_kimul.sys [87584 2017-04-12] (AO Kaspersky Lab)
R3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [252232 2017-04-17] (AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [112920 2017-04-17] (AO Kaspersky Lab)
R3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [164888 2017-04-06] (AO Kaspersky Lab)
R1 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [85320 2016-06-18] (AO Kaspersky Lab)
R1 Klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [136416 2017-03-29] (AO Kaspersky Lab)
R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [199392 2017-04-06] (AO Kaspersky Lab)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
U3 idsvc; no ImagePath
U3 wpcsvc; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-04-18 15:44 - 2017-04-18 15:44 - 00012704 _____ C:\Users\Vladimír\Desktop\FRST.txt
2017-04-18 11:42 - 2017-04-18 11:42 - 02424832 _____ (Farbar) C:\Users\Vladimír\Desktop\FRST64.exe
2017-04-18 08:56 - 2017-04-18 15:33 - 930201017 _____ C:\Users\Vladimír\Downloads\Zloba.Kralovna.Cerne.Magie.2014.1080p.BDRip.x264.AC3.CZ.dabing.mkv
2017-04-18 08:32 - 2017-04-18 08:32 - 00003240 _____ C:\WINDOWS\System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901}
2017-04-17 14:37 - 2017-04-17 14:37 - 00252232 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klark.sys
2017-04-17 14:36 - 2017-04-17 14:36 - 00112920 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klbg.sys
2017-04-13 15:36 - 2017-04-13 18:53 - 2037299080 _____ C:\Users\Vladimír\Downloads\Maniak.mkv
2017-04-13 13:46 - 2017-04-01 21:05 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-04-13 13:46 - 2017-04-01 21:05 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-04-12 20:41 - 2017-03-28 12:19 - 00202480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2017-04-12 20:41 - 2017-03-28 12:14 - 00754664 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-04-12 20:41 - 2017-03-28 11:08 - 00566112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-04-12 20:41 - 2017-03-28 11:05 - 01540216 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-04-12 20:41 - 2017-03-28 11:05 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2017-04-12 20:41 - 2017-03-28 11:03 - 01128104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2017-04-12 20:41 - 2017-03-28 11:03 - 00625000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-04-12 20:41 - 2017-03-28 10:30 - 00379232 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2017-04-12 20:41 - 2017-03-28 10:29 - 01986912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-04-12 20:41 - 2017-03-28 10:29 - 00636304 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-04-12 20:41 - 2017-03-28 10:29 - 00393568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-04-12 20:41 - 2017-03-28 10:28 - 01594928 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2017-04-12 20:41 - 2017-03-28 09:52 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll
2017-04-12 20:41 - 2017-03-28 09:51 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll
2017-04-12 20:41 - 2017-03-28 09:28 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oemlicense.dll
2017-04-12 20:41 - 2017-03-28 09:20 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2017-04-12 20:41 - 2017-03-28 09:20 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2017-04-12 20:41 - 2017-03-28 09:18 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-04-12 20:41 - 2017-03-28 09:15 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2017-04-12 20:41 - 2017-03-28 09:13 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2017-04-12 20:41 - 2017-03-28 09:09 - 00715776 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-04-12 20:41 - 2017-03-28 08:55 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2017-04-12 20:41 - 2017-03-28 08:53 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2017-04-12 20:41 - 2017-03-28 08:41 - 04456448 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-04-12 20:41 - 2017-03-28 08:21 - 03586048 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-04-12 20:41 - 2017-03-28 08:19 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2017-04-12 20:41 - 2017-03-28 07:55 - 03585536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-04-12 20:41 - 2017-03-28 07:30 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2017-04-12 20:40 - 2017-03-28 09:53 - 06958304 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-04-12 20:40 - 2017-03-28 09:44 - 02944592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-04-12 20:40 - 2017-03-28 09:41 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-04-12 20:40 - 2017-03-28 08:37 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2017-04-12 20:40 - 2017-03-28 08:12 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2017-04-12 20:40 - 2017-03-28 08:07 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp
2017-04-12 20:40 - 2017-03-28 08:06 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oemlicense.dll
2017-04-12 20:40 - 2017-03-28 08:01 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll
2017-04-12 20:40 - 2017-03-28 07:56 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-04-12 20:40 - 2017-03-28 07:53 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2017-04-12 20:40 - 2017-03-28 07:43 - 00153088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSSync.dll
2017-04-12 20:40 - 2017-03-28 07:41 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2017-04-12 20:40 - 2017-03-28 07:40 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2017-04-12 20:40 - 2017-03-28 07:36 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2017-04-12 20:40 - 2017-03-28 07:35 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2017-04-12 20:40 - 2017-03-28 07:33 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-04-12 20:40 - 2017-03-28 07:32 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licensingdiag.exe
2017-04-12 20:40 - 2017-03-28 07:18 - 04078080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-04-12 20:40 - 2017-03-28 07:11 - 01501696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-04-12 20:40 - 2017-03-28 07:08 - 02878976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-04-12 20:40 - 2017-03-28 06:45 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2017-04-12 20:39 - 2017-03-28 10:52 - 00168360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2017-04-12 20:39 - 2017-03-28 10:51 - 01557776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-04-12 20:39 - 2017-03-28 10:51 - 00602256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2017-04-12 20:39 - 2017-03-28 10:50 - 01862008 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-04-12 20:39 - 2017-03-28 09:45 - 00958120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-04-12 20:39 - 2017-03-28 09:44 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-04-12 20:39 - 2017-03-28 09:40 - 05240440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-04-12 20:39 - 2017-03-28 09:08 - 00546968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2017-04-12 20:39 - 2017-03-28 09:08 - 00316248 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2017-04-12 20:39 - 2017-03-28 09:06 - 01522664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2017-04-12 20:39 - 2017-03-28 09:06 - 01370736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2017-04-12 20:39 - 2017-03-28 08:26 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-04-12 20:39 - 2017-03-28 08:26 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2017-04-12 20:39 - 2017-03-28 08:25 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2017-04-12 20:39 - 2017-03-28 08:23 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2017-04-12 20:39 - 2017-03-28 08:17 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll
2017-04-12 20:39 - 2017-03-28 08:16 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2017-04-12 20:39 - 2017-03-28 08:01 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2017-04-12 20:39 - 2017-03-28 07:57 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2017-04-12 20:39 - 2017-03-28 07:56 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2017-04-12 20:39 - 2017-03-28 07:53 - 00541184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2017-04-12 20:39 - 2017-03-28 07:47 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-04-12 20:39 - 2017-03-28 07:42 - 00792576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2017-04-12 20:39 - 2017-03-28 07:42 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2017-04-12 20:39 - 2017-03-28 07:41 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-04-12 20:39 - 2017-03-28 07:33 - 03695104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-04-12 20:39 - 2017-03-28 07:18 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2017-04-12 20:39 - 2017-03-28 07:04 - 06296064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2017-04-12 20:39 - 2017-03-28 06:48 - 03664384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-04-12 20:39 - 2017-03-28 06:47 - 04405248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2017-04-12 20:39 - 2017-03-28 06:46 - 19344896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-04-12 20:39 - 2017-03-28 06:45 - 18671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-04-12 20:39 - 2017-03-28 06:45 - 12134912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-04-12 20:39 - 2017-03-28 06:41 - 02604032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2017-04-12 20:39 - 2017-03-28 06:31 - 05670912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-04-12 20:39 - 2017-03-28 06:13 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-04-12 20:39 - 2017-03-18 18:41 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-04-12 20:26 - 2017-03-28 11:18 - 08710320 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-04-12 20:26 - 2017-03-28 11:11 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-04-12 20:26 - 2017-03-28 10:28 - 01777792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2017-04-12 20:26 - 2017-03-28 09:40 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-04-12 20:26 - 2017-03-28 09:29 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
2017-04-12 20:26 - 2017-03-28 08:10 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-04-12 20:26 - 2017-03-28 07:22 - 06312448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2017-04-12 20:26 - 2017-03-28 07:19 - 02911744 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2017-04-12 20:26 - 2017-03-21 03:36 - 00448285 _____ C:\WINDOWS\system32\ApnDatabase.xml
2017-04-12 20:25 - 2017-03-28 11:51 - 03449168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2017-04-12 20:25 - 2017-03-28 11:05 - 06536248 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2017-04-12 20:25 - 2017-03-28 10:59 - 00262400 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
2017-04-12 20:25 - 2017-03-28 09:51 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-04-12 20:25 - 2017-03-28 09:01 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-04-12 20:25 - 2017-03-28 08:55 - 00971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-04-12 20:25 - 2017-03-28 08:48 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-04-12 20:25 - 2017-03-28 08:44 - 00961536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2017-04-12 20:25 - 2017-03-28 08:41 - 00865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-04-12 20:25 - 2017-03-28 07:36 - 04895744 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-04-12 20:25 - 2017-03-28 07:06 - 07856640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-04-12 20:25 - 2017-03-28 07:01 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-04-12 20:25 - 2017-03-18 22:39 - 22560744 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-04-12 20:24 - 2017-03-28 12:20 - 00100192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2017-04-12 20:24 - 2017-03-28 12:17 - 00800080 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2017-04-12 20:24 - 2017-03-28 10:05 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-04-12 20:24 - 2017-03-28 09:52 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-04-12 20:24 - 2017-03-28 09:35 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2017-04-12 20:24 - 2017-03-28 08:56 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSSync.dll
2017-04-12 20:24 - 2017-03-28 08:42 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\csc.sys
2017-04-12 20:24 - 2017-03-28 07:39 - 00957952 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2017-04-12 20:23 - 2017-03-28 12:18 - 01997840 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-04-12 20:23 - 2017-03-28 11:11 - 03698216 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-04-12 20:23 - 2017-03-28 11:06 - 06604992 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-04-12 20:23 - 2017-03-28 10:12 - 00388888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-04-12 20:23 - 2017-03-28 09:50 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2017-04-12 20:23 - 2017-03-28 09:42 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll
2017-04-12 20:23 - 2017-03-28 09:38 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2017-04-12 20:23 - 2017-03-28 09:21 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2017-04-12 20:23 - 2017-03-28 09:18 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2017-04-12 20:23 - 2017-03-28 09:17 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-04-12 20:23 - 2017-03-28 09:14 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-04-12 20:23 - 2017-03-28 09:10 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2017-04-12 20:23 - 2017-03-28 08:54 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2017-04-12 20:23 - 2017-03-28 08:53 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-04-12 20:23 - 2017-03-28 08:51 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2017-04-12 20:23 - 2017-03-28 08:46 - 01752576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2017-04-12 20:23 - 2017-03-28 08:20 - 05123072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-04-12 20:23 - 2017-03-28 08:12 - 01729536 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-04-12 20:23 - 2017-03-28 08:06 - 03405312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-04-12 20:23 - 2017-03-28 08:05 - 07977984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2017-04-12 20:23 - 2017-03-28 07:44 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-04-12 20:23 - 2017-03-28 07:29 - 22375424 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-04-12 20:23 - 2017-03-28 07:20 - 24604160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-04-12 20:23 - 2017-03-28 07:20 - 13392384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-04-12 20:22 - 2017-03-28 12:17 - 02656952 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2017-04-12 20:22 - 2017-03-28 12:12 - 00061792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2017-04-12 20:22 - 2017-03-28 11:12 - 01322760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-04-12 20:22 - 2017-03-28 09:48 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2017-04-12 20:22 - 2017-03-28 09:37 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2017-04-12 20:22 - 2017-03-28 09:31 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-04-12 20:22 - 2017-03-28 09:16 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2017-04-12 20:22 - 2017-03-28 07:42 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-04-12 20:21 - 2017-03-28 08:40 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\licensingdiag.exe
2017-04-12 20:20 - 2017-03-28 09:49 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-04-12 19:38 - 2017-04-12 19:38 - 00087584 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_kimul.sys
2017-04-12 19:37 - 2017-04-12 19:37 - 01018592 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klif.sys
2017-04-12 19:37 - 2017-04-12 19:37 - 00197336 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klflt.sys
2017-04-12 19:22 - 2017-04-12 19:22 - 00004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2017-04-12 19:22 - 2017-04-12 19:22 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-04-09 11:57 - 2017-04-09 11:58 - 16790552 _____ (LastPass) C:\Users\Vladimír\Downloads\lastpass_x64.exe
2017-04-09 11:46 - 2017-04-09 17:16 - 2146698089 _____ C:\Users\Vladimír\Downloads\Zpívej.mkv
2017-04-08 10:39 - 2017-04-08 10:39 - 00000000 ___HD C:\Users\Vladimír\Downloads\Jiří Schelinger
2017-04-06 17:47 - 2017-04-03 17:18 - 00000000 ____D C:\Users\Vladimír\Downloads\Anděl Páně 2
2017-04-06 17:13 - 2017-04-18 15:44 - 00000000 ____D C:\FRST
2017-04-06 16:48 - 2017-04-06 16:48 - 00000907 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-04-06 15:26 - 2017-04-06 15:25 - 00509728 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klhk.sys
2017-04-06 15:26 - 2017-04-06 15:25 - 00199392 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\kneps.sys
2017-04-06 15:23 - 2017-04-06 15:23 - 00218920 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_arkmon.sys
2017-04-06 15:23 - 2017-04-06 15:23 - 00164888 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_mark.sys
2017-04-06 15:22 - 2017-04-13 14:18 - 00000000 ____D C:\Program Files\Common Files\AV
2017-04-06 15:22 - 2017-04-06 15:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Secure Connection
2017-04-06 15:22 - 2017-04-06 15:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2017-04-06 15:22 - 2013-05-06 08:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klfphc.dll
2017-04-06 15:21 - 2017-04-18 15:22 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2017-04-06 15:21 - 2017-04-06 15:22 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2017-04-05 19:33 - 2017-04-06 04:19 - 4008959655 _____ C:\Users\Vladimír\Downloads\Anděl Páně 2(2016)-dvdrip-cz-(VIDEO_TS,-DVD5,-pouze-hlavní-film-cz-5.1)-jbr.rar
2017-04-02 13:52 - 2017-04-02 14:00 - 103473007 _____ C:\Users\Vladimír\Downloads\Pain-Of-Salvation---In-The-Passing-Light-Of-Day-(2017)-192.rar
2017-04-01 10:01 - 2017-04-01 12:43 - 2045380722 _____ C:\Users\Vladimír\Downloads\Collateral Beauty-Druhá šance.mkv
2017-03-31 19:04 - 2017-03-31 19:04 - 00000000 ____D C:\ProgramData\s5r8
2017-03-31 19:01 - 2017-03-31 19:01 - 00000000 ____D C:\ProgramData\s4lk
2017-03-31 19:01 - 2017-03-31 19:01 - 00000000 ____D C:\ProgramData\s4eo
2017-03-31 19:00 - 2017-03-31 19:00 - 00000000 ____D C:\ProgramData\s498
2017-03-31 19:00 - 2017-03-31 19:00 - 00000000 ____D C:\ProgramData\s3fg
2017-03-31 14:39 - 2017-03-31 14:39 - 00000000 ____D C:\ProgramData\s1a8
2017-03-31 14:35 - 2017-03-31 14:35 - 00000000 ____D C:\ProgramData\s7o0
2017-03-31 14:35 - 2017-03-31 14:35 - 00000000 ____D C:\ProgramData\s3a8
2017-03-31 14:34 - 2017-03-31 14:34 - 00000000 ____D C:\ProgramData\s52s
2017-03-31 14:34 - 2017-03-31 14:34 - 00000000 ____D C:\ProgramData\s3bc
2017-03-31 14:26 - 2017-03-31 14:26 - 00000000 _____ C:\autoexec.bat
2017-03-31 11:32 - 2017-03-31 16:12 - 4026355737 _____ C:\Users\Vladimír\Downloads\Pasažéři.mkv
2017-03-30 20:37 - 2017-03-30 20:37 - 00084138 _____ C:\Users\Vladimír\Downloads\496026623.PDF
2017-03-29 18:00 - 2017-03-29 18:00 - 00136416 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klwtp.sys
2017-03-29 18:00 - 2017-03-29 18:00 - 00057424 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klim6.sys
2017-03-26 14:19 - 2017-03-26 15:57 - 1760330366 _____ C:\Users\Vladimír\Downloads\Orest z rodu čarodejníkov.avi
2017-03-26 11:56 - 2017-03-26 13:40 - 1867147222 _____ C:\Users\Vladimír\Downloads\Dračí princ.mkv

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-04-18 15:44 - 2016-11-15 19:00 - 00000000 ____D C:\Users\Vladimír\AppData\LocalLow\Mozilla
2017-04-18 08:57 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2017-04-18 08:57 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-04-17 15:35 - 2016-04-26 16:07 - 02037110 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-04-17 15:35 - 2016-02-13 14:50 - 00842644 _____ C:\WINDOWS\system32\perfh005.dat
2017-04-17 15:35 - 2016-02-13 14:50 - 00192218 _____ C:\WINDOWS\system32\perfc005.dat
2017-04-17 15:35 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
2017-04-17 15:31 - 2016-04-26 16:05 - 00000000 ____D C:\ProgramData\NVIDIA
2017-04-17 15:31 - 2016-02-13 15:10 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-04-17 15:31 - 2015-10-30 08:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2017-04-17 15:30 - 2016-08-30 17:35 - 00000000 ____D C:\AdwCleaner
2017-04-15 14:49 - 2016-05-02 18:43 - 00000000 ____D C:\Users\Vladimír\AppData\Local\CrashDumps
2017-04-15 14:46 - 2016-04-28 15:23 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2017-04-13 19:41 - 2016-04-27 20:08 - 00000000 ____D C:\Users\Vladimír\AppData\Roaming\vlc
2017-04-13 16:22 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache
2017-04-13 14:01 - 2016-02-13 15:14 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-04-13 14:00 - 2016-02-13 06:07 - 00264888 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-04-13 13:58 - 2015-10-30 09:24 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-04-13 13:58 - 2015-10-30 09:24 - 00000000 ___SD C:\WINDOWS\system32\F12
2017-04-13 13:58 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-04-13 13:58 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2017-04-13 13:58 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-04-13 13:58 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Defender
2017-04-13 13:58 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-04-13 13:58 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2017-04-13 13:54 - 2016-04-26 16:24 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-04-13 13:52 - 2016-04-26 16:24 - 148601744 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-04-13 13:52 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-04-06 17:50 - 2016-09-13 17:41 - 00000000 ____D C:\Users\Vladimír\AppData\Roaming\dvdcss
2017-04-06 16:29 - 2016-08-05 17:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-04-06 15:22 - 2015-10-30 08:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2017-04-06 15:21 - 2015-10-30 09:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2017-04-06 15:13 - 2016-08-18 18:36 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2017-04-06 15:11 - 2016-09-23 16:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-04-05 18:17 - 2016-04-26 16:38 - 00000000 ____D C:\Users\Vladimír\AppData\Local\ESET
2017-04-05 06:21 - 2010-11-21 05:27 - 00523432 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-04-01 15:07 - 2016-09-23 16:35 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-03-31 14:25 - 2016-04-26 16:07 - 00000000 ____D C:\Users\Vladimír
2017-03-28 11:15 - 2016-02-13 15:10 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll

==================== Files in the root of some directories =======

2017-04-15 14:45 - 2017-04-15 14:45 - 16790552 _____ (LastPass) C:\Program Files (x86)\Common Files\lpuninstall.exe
2016-10-22 16:34 - 2016-10-22 16:34 - 0099384 _____ () C:\Users\Vladimír\AppData\Roaming\inst.exe
2016-10-22 16:34 - 2016-10-22 16:34 - 0007859 _____ () C:\Users\Vladimír\AppData\Roaming\pcouffin.cat
2016-10-22 16:34 - 2016-10-22 16:34 - 0001167 _____ () C:\Users\Vladimír\AppData\Roaming\pcouffin.inf
2016-10-22 16:34 - 2016-10-22 16:34 - 0000055 _____ () C:\Users\Vladimír\AppData\Roaming\pcouffin.log
2016-10-22 16:34 - 2016-10-22 16:34 - 0082816 _____ (VSO Software) C:\Users\Vladimír\AppData\Roaming\pcouffin.sys
2017-01-25 17:44 - 2017-01-25 17:44 - 0000218 _____ () C:\Users\Vladimír\AppData\Local\recently-used.xbel

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-04-13 14:16

==================== End of FRST.txt ============================

[Rudy]

Otevřte poznámkový blok a zkopírujte do něj:

Start
HKU\S-1-5-21-4276936731-1478878061-1455199337-1000\...\Run: [] => [X]
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
BHO: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar_x64.dll => No File
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll No File
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\WINDOWS\system32\C2MP\npdivx32.dll [No File]
U3 idsvc; no ImagePath
U3 wpcsvc; no ImagePath
C:\ProgramData\s5r8
C:\ProgramData\s4lk
C:\ProgramData\s4eo
C:\ProgramData\s498
C:\ProgramData\s3fg
C:\ProgramData\s1a8
C:\ProgramData\s7o0
C:\ProgramData\s3a8
C:\ProgramData\s52s
C:\ProgramData\s3bc

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

[vlas]

Zde je nový log:
Fix result of Farbar Recovery Scan Tool (x64) Version: 19-04-2017
Ran by Vladimír (20-04-2017 11:17:58) Run:1
Running from C:\Users\Vladimír\Desktop
Loaded Profiles: Vladimír (Available Profiles: Vladimír & DefaultAppPool)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
HKU\S-1-5-21-4276936731-1478878061-1455199337-1000\...\Run: [] => [X]
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
BHO: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar_x64.dll => No File
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll No File
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\WINDOWS\system32\C2MP\npdivx32.dll [No File]
U3 idsvc; no ImagePath
U3 wpcsvc; no ImagePath
C:\ProgramData\s5r8
C:\ProgramData\s4lk
C:\ProgramData\s4eo
C:\ProgramData\s498
C:\ProgramData\s3fg
C:\ProgramData\s1a8
C:\ProgramData\s7o0
C:\ProgramData\s3a8
C:\ProgramData\s52s
C:\ProgramData\s3bc

EmptyTemp:
End
*****************

HKU\S-1-5-21-4276936731-1478878061-1455199337-1000\Software\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95D9ECF5-2A4D-4550-BE49-70D42F71296E} => key removed successfully
HKCR\CLSID\{95D9ECF5-2A4D-4550-BE49-70D42F71296E} => key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} => value removed successfully
HKCR\CLSID\{9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} => key not found.
HKLM\Software\Wow6432Node\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0 => key removed successfully
HKLM\System\CurrentControlSet\Services\idsvc => key removed successfully
idsvc => service removed successfully
HKLM\System\CurrentControlSet\Services\wpcsvc => key removed successfully
wpcsvc => service removed successfully
C:\ProgramData\s5r8 => moved successfully
C:\ProgramData\s4lk => moved successfully
C:\ProgramData\s4eo => moved successfully
C:\ProgramData\s498 => moved successfully
C:\ProgramData\s3fg => moved successfully
C:\ProgramData\s1a8 => moved successfully
C:\ProgramData\s7o0 => moved successfully
C:\ProgramData\s3a8 => moved successfully
C:\ProgramData\s52s => moved successfully
C:\ProgramData\s3bc => moved successfully

=========== EmptyTemp: ==========

BITS transfer queue => 32768 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 16957642 B
Java, Flash, Steam htmlcache => 506 B
Windows/system/drivers => -3372389 B
Edge => 331604878 B
Chrome => 0 B
Firefox => 191039475 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 128 B
LocalService => 93490 B
NetworkService => 59944 B
Vladimír => 46456935 B
DefaultAppPool => 0 B

RecycleBin => 0 B
EmptyTemp: => 555.9 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 11:18:24 ====

[Rudy]

Smazáno. Log je jiř OK.

[vlas]

Děkuji za Váš čas.
vs

[Rudy]

Rádo se stalo!