Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

win 7 , nejde přihlásit, pouze nouzový režim

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zpráva
Autor
Dennis
Návštěvník
Návštěvník
Příspěvky: 153
Registrován: 18 kvě 2009 06:38
Bydliště: Trutnov

win 7 , nejde přihlásit, pouze nouzový režim

#1 Příspěvek od Dennis »

zdravím, prosím o kontrolu : nejde se přihlásit : službě Profil uživatele se nepodařilo přihlášení
Nelze načíst profil uživatele

jde pouze v nouzovém režimu kde byl vytvořen log

děkuji

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28.02.2018
Ran by katka (administrator) on KATKA-PC (28-02-2018 11:48:48)
Running from C:\Windows\System32\config\systemprofile\Desktop
Loaded Profiles: False (Available Profiles: katka & Mcx1-KATKA-PC) <==== ATTENTION (Temporary Profile?)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Safe Mode (with Networking)
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [961184 2011-08-02] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [798880 2011-08-02] (Atheros Commnucations)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2661672 2012-02-20] (ELAN Microelectronics Corp.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [243496 2018-02-25] (AVAST Software)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3331312 2011-10-19] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe [737104 2011-07-29] (ecareme)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [322208 2012-06-25] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [174752 2012-06-19] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [FLxHCIm64] => C:\Program Files\Fresco Logic\Fresco Logic USB3.0 Host Controller\amd64_host\FLxHCIm.exe [48128 2012-05-21] (Windows (R) Win 7 DDK provider)
HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2321584 2012-04-28] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [5993248 2016-09-27] (IObit)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
Startup: C:\Users\katka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CPP - CalcServer.lnk [2014-12-18]
ShortcutTarget: CPP - CalcServer.lnk -> C:\CPP\CppKalkulacky\CppCalcServer.exe ()
GroupPolicy: Restriction <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: 127.0.0.1 asc55.iobit.com
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 194.12.32.193
Tcpip\..\Interfaces\{CAE83C90-F142-47E5-A149-BCE919377C0F}: [DhcpNameServer] 8.8.8.8 194.12.32.193

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2015-11-12] (IObit)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2018-02-25] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll [2017-09-23] (Oracle Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-08-02] (Atheros Commnucations)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2018-02-25] (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-09-23] (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File

FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [siteranker@siteranker.com] - C:\Program Files (x86)\SiteRanker\firefox => not found
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_28_0_0_161.dll [2018-02-06] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_161.dll [2018-02-06] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-09-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-09-23] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-13] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-13] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-05-08] (Adobe Systems Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll [2010-01-23] (Zeon Corporation)
StartMenuInternet: Firefox-48A8B1C46EA8071B - C:\Users\katka\AppData\Local\Mozilla Firefox\firefox.exe

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 ASUS InstantOn; C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [277120 2012-02-16] (ASUS)
S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7564512 2018-02-25] (AVAST Software)
S2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-08-02] (Atheros) [File not signed]
S2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [103584 2011-08-02] (Atheros Commnucations) [File not signed]
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [300600 2018-02-25] (AVAST Software)
S2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [1600288 2016-07-26] (IObit)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [3046688 2016-07-29] (IObit)
S3 MozillaMaintenance; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [194512 2018-02-13] () [File not signed]
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [1050904 2013-12-11] () [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AiCharger; C:\Windows\SysWOW64\DRIVERS\AiCharger.sys [17152 2012-02-29] (ASUSTek Computer Inc.)
R0 assd; C:\Windows\System32\Drivers\assd.sys [27056 2011-10-28] (ASUS Corporation) [File not signed]
S1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [192944 2018-02-25] (AVAST Software)
S1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [321512 2018-01-09] (AVAST Software)
S0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [199448 2018-01-09] (AVAST Software)
S0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [343768 2018-01-09] (AVAST Software)
S0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [57696 2018-01-09] (AVAST Software)
S1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [190440 2018-02-25] (AVAST Software)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [46968 2018-02-25] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [41832 2017-09-10] (AVAST Software)
S2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [146648 2018-02-25] (AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [110328 2018-02-25] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [84368 2018-02-25] (AVAST Software)
S1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1026696 2018-02-25] (AVAST Software)
S1 aswSP; C:\Windows\System32\drivers\aswSP.sys [459952 2018-02-25] (AVAST Software)
S2 aswStm; C:\Windows\System32\drivers\aswStm.sys [205464 2018-02-25] (AVAST Software)
S0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [379448 2018-02-25] (AVAST Software)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 FLxHCIh; C:\Windows\System32\DRIVERS\FLxHCIh.sys [72448 2012-05-28] (Fresco Logic)
S1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-07-24] (REALiX(tm))
S4 IMFFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\IMFFilter.sys [22208 2016-04-01] (IObit)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2014-05-23] (Intel Corporation)
S3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2016-07-27] (IObit.com)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21360 2016-03-22] (IObit)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [34544 2014-05-23] (Synaptics Incorporated)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [221824 2016-04-24] (Samsung Electronics Co., Ltd.)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
S1 nlfpmdnb; \??\C:\Windows\system32\drivers\nlfpmdnb.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-02-28 11:35 - 2018-02-28 11:48 - 000000000 ____D C:\FRST
2018-02-27 15:56 - 2018-02-27 15:56 - 000000000 ____D C:\Windows\system32\%LOCALAPPDATA%
2018-02-27 15:54 - 2018-02-27 15:54 - 000000000 ____D C:\Users\TEMP\AppData\Roaming\Adobe
2018-02-27 15:06 - 2018-02-28 11:33 - 000549180 _____ C:\Windows\ntbtlog.txt
2018-02-27 15:02 - 2018-02-27 15:02 - 000000824 _____ C:\Users\Public\Desktop\CCleaner.lnk
2018-02-27 15:02 - 2018-02-27 15:02 - 000000300 ____H C:\Windows\Tasks\CCleaner Update.job
2018-02-27 15:02 - 2018-02-27 15:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2018-02-27 15:02 - 2018-02-27 15:02 - 000000000 ____D C:\Program Files\CCleaner
2018-02-27 13:19 - 2018-02-28 09:07 - 000000000 ____D C:\AdwCleaner
2018-02-26 16:34 - 2018-02-25 11:20 - 000380768 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2018-02-25 11:20 - 2015-09-15 21:05 - 000000000 ____D C:\Users\TEMP\AppData\Roaming\IObit
2018-02-25 11:20 - 2012-02-27 10:23 - 000000000 ____D C:\Users\TEMP\AppData\Local\Microsoft Help
2018-02-25 11:20 - 2012-02-25 12:18 - 000000000 ____D C:\Users\TEMP\AppData\Roaming\Macromedia
2018-02-25 11:20 - 2009-07-14 08:44 - 000000000 ____D C:\Users\TEMP\AppData\Roaming\Media Center Programs
2018-02-17 10:22 - 2018-02-10 20:52 - 000395928 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2018-02-17 10:22 - 2018-02-10 20:03 - 000347296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-02-17 10:22 - 2018-02-10 09:44 - 025740288 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-02-17 10:22 - 2018-02-10 08:30 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2018-02-17 10:22 - 2018-02-10 08:29 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2018-02-17 10:22 - 2018-02-10 08:19 - 002900480 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-02-17 10:22 - 2018-02-10 08:17 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2018-02-17 10:22 - 2018-02-10 08:17 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2018-02-17 10:22 - 2018-02-10 08:17 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2018-02-17 10:22 - 2018-02-10 08:16 - 000577536 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-02-17 10:22 - 2018-02-10 08:16 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2018-02-17 10:22 - 2018-02-10 08:10 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2018-02-17 10:22 - 2018-02-10 08:10 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2018-02-17 10:22 - 2018-02-10 08:09 - 005782016 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-02-17 10:22 - 2018-02-10 08:07 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2018-02-17 10:22 - 2018-02-10 08:06 - 000816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-02-17 10:22 - 2018-02-10 08:06 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-02-17 10:22 - 2018-02-10 08:06 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2018-02-17 10:22 - 2018-02-10 08:06 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2018-02-17 10:22 - 2018-02-10 08:01 - 000969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2018-02-17 10:22 - 2018-02-10 07:58 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2018-02-17 10:22 - 2018-02-10 07:52 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2018-02-17 10:22 - 2018-02-10 07:52 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-02-17 10:22 - 2018-02-10 07:51 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2018-02-17 10:22 - 2018-02-10 07:49 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2018-02-17 10:22 - 2018-02-10 07:48 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2018-02-17 10:22 - 2018-02-10 07:46 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2018-02-17 10:22 - 2018-02-10 07:45 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2018-02-17 10:22 - 2018-02-10 07:36 - 015283712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-02-17 10:22 - 2018-02-10 07:36 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2018-02-17 10:22 - 2018-02-10 07:34 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-02-17 10:22 - 2018-02-10 07:34 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2018-02-17 10:22 - 2018-02-10 07:33 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2018-02-17 10:22 - 2018-02-10 07:32 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-02-17 10:22 - 2018-02-10 07:27 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-02-17 10:22 - 2018-02-10 07:20 - 020274176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-02-17 10:22 - 2018-02-10 07:14 - 001546240 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-02-17 10:22 - 2018-02-10 07:08 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2018-02-17 10:22 - 2018-02-10 07:02 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-02-17 10:22 - 2018-02-10 06:57 - 000499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-02-17 10:22 - 2018-02-10 06:57 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2018-02-17 10:22 - 2018-02-10 06:57 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2018-02-17 10:22 - 2018-02-10 06:57 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2018-02-17 10:22 - 2018-02-10 06:56 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2018-02-17 10:22 - 2018-02-10 06:54 - 002294272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2018-02-17 10:22 - 2018-02-10 06:52 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2018-02-17 10:22 - 2018-02-10 06:51 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2018-02-17 10:22 - 2018-02-10 06:50 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2018-02-17 10:22 - 2018-02-10 06:49 - 000662528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-02-17 10:22 - 2018-02-10 06:49 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2018-02-17 10:22 - 2018-02-10 06:49 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2018-02-17 10:22 - 2018-02-10 06:42 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2018-02-17 10:22 - 2018-02-10 06:39 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2018-02-17 10:22 - 2018-02-10 06:38 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2018-02-17 10:22 - 2018-02-10 06:38 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2018-02-17 10:22 - 2018-02-10 06:36 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2018-02-17 10:22 - 2018-02-10 06:35 - 004498944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-02-17 10:22 - 2018-02-10 06:35 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2018-02-17 10:22 - 2018-02-10 06:35 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2018-02-17 10:22 - 2018-02-10 06:34 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2018-02-17 10:22 - 2018-02-10 06:33 - 013680640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-02-17 10:22 - 2018-02-10 06:29 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2018-02-17 10:22 - 2018-02-10 06:27 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2018-02-17 10:22 - 2018-02-10 06:27 - 000694784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-02-17 10:22 - 2018-02-10 06:26 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2018-02-17 10:22 - 2018-02-10 06:14 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-02-17 10:22 - 2018-02-10 06:10 - 001314304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-02-17 10:22 - 2018-02-10 06:08 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-02-17 10:22 - 2018-01-12 17:46 - 000631680 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-02-17 10:22 - 2018-01-12 17:44 - 005581544 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-02-17 10:22 - 2018-01-12 17:44 - 001894120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2018-02-17 10:22 - 2018-01-12 17:44 - 000708328 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-02-17 10:22 - 2018-01-12 17:44 - 000377064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2018-02-17 10:22 - 2018-01-12 17:44 - 000371432 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2018-02-17 10:22 - 2018-01-12 17:44 - 000287976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2018-02-17 10:22 - 2018-01-12 17:44 - 000262376 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2018-02-17 10:22 - 2018-01-12 17:44 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2018-02-17 10:22 - 2018-01-12 17:44 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2018-02-17 10:22 - 2018-01-12 17:40 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000484864 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:33 - 001665384 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-02-17 10:22 - 2018-01-12 17:29 - 004014312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2018-02-17 10:22 - 2018-01-12 17:29 - 003959016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2018-02-17 10:22 - 2018-01-12 17:27 - 004834816 _____ (Microsoft Corporation) C:\Windows\system32\xpsrchvw.exe
2018-02-17 10:22 - 2018-01-12 17:27 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:16 - 003405824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xpsrchvw.exe
2018-02-17 10:22 - 2018-01-12 17:16 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2018-02-17 10:22 - 2018-01-12 17:16 - 000030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2018-02-17 10:22 - 2018-01-12 17:15 - 000032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2018-02-17 10:22 - 2018-01-12 17:11 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2018-02-17 10:22 - 2018-01-12 17:11 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2018-02-17 10:22 - 2018-01-12 17:11 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2018-02-17 10:22 - 2018-01-12 17:10 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2018-02-17 10:22 - 2018-01-12 17:07 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2018-02-17 10:22 - 2018-01-12 17:06 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2018-02-17 10:22 - 2018-01-12 17:03 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-02-17 10:22 - 2018-01-12 17:02 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2018-02-17 10:22 - 2018-01-12 17:02 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2018-02-17 10:22 - 2018-01-12 17:02 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2018-02-17 10:22 - 2018-01-12 17:01 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2018-02-17 10:22 - 2018-01-12 17:01 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2018-02-17 10:22 - 2018-01-12 16:57 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2018-02-17 10:22 - 2018-01-12 16:57 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2018-02-17 10:22 - 2018-01-12 16:57 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2018-02-17 10:22 - 2018-01-12 16:57 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2018-02-17 10:22 - 2018-01-12 16:57 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2018-02-17 10:22 - 2018-01-12 16:56 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 16:56 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 16:56 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 16:56 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2018-02-17 10:22 - 2018-01-11 17:41 - 001133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2018-02-17 10:22 - 2018-01-11 17:22 - 000805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2018-02-17 10:22 - 2018-01-11 17:09 - 003224064 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-02-17 10:22 - 2018-01-05 17:31 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2018-02-17 10:22 - 2018-01-05 17:31 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2018-02-17 10:22 - 2018-01-05 17:30 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2018-02-17 10:22 - 2018-01-05 17:30 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2018-02-17 10:22 - 2018-01-05 17:30 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2018-02-17 10:22 - 2018-01-05 17:25 - 000383720 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2018-02-17 10:22 - 2018-01-05 17:14 - 000309480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2018-02-17 10:22 - 2018-01-05 17:11 - 000111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2018-02-17 10:22 - 2018-01-05 17:11 - 000071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2018-02-17 10:22 - 2018-01-05 17:11 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2018-02-17 10:22 - 2018-01-05 17:11 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2018-02-17 10:22 - 2018-01-05 16:50 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2018-02-17 10:22 - 2017-12-05 18:36 - 001484288 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2018-02-17 10:22 - 2017-12-05 18:36 - 000229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2018-02-17 10:22 - 2017-12-05 18:36 - 000218112 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2018-02-17 10:22 - 2017-12-05 18:36 - 000190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2018-02-17 10:22 - 2017-12-05 18:36 - 000141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2018-02-17 10:22 - 2017-12-05 18:36 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
2018-02-17 10:22 - 2017-12-05 18:08 - 001176576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2018-02-17 10:22 - 2017-12-05 18:08 - 000179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2018-02-17 10:22 - 2017-12-05 18:08 - 000145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2018-02-17 10:22 - 2017-12-05 18:08 - 000135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2018-02-17 10:22 - 2017-12-05 18:08 - 000106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2018-02-17 10:22 - 2017-12-05 17:04 - 000404992 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe
2018-02-17 10:21 - 2018-01-22 00:50 - 000136424 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2018-02-17 10:21 - 2018-01-22 00:40 - 000654336 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2018-02-17 10:21 - 2018-01-19 15:05 - 001994752 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2018-02-17 10:21 - 2018-01-19 15:05 - 001569280 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2018-02-17 10:21 - 2018-01-19 15:05 - 000749568 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2018-02-17 10:21 - 2018-01-19 15:05 - 000604672 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2018-02-17 10:21 - 2018-01-19 15:05 - 000450048 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2018-02-17 10:21 - 2018-01-19 15:05 - 000378880 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2018-02-17 10:21 - 2018-01-19 15:05 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2018-02-17 10:21 - 2018-01-19 15:05 - 000236544 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2018-02-14 07:11 - 2018-02-14 07:13 - 000000000 ____D C:\Users\katka\AppData\Local\Mozilla Firefox
2018-02-14 07:11 - 2018-02-14 07:11 - 000001208 _____ C:\Users\katka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-02-14 07:10 - 2018-02-14 07:10 - 000313544 _____ (Mozilla) C:\Users\katka\Downloads\Firefox Installer (1).exe
2018-02-14 07:07 - 2018-02-14 07:07 - 000313544 _____ (Mozilla) C:\Users\katka\Downloads\Firefox Installer.exe
2018-02-10 23:20 - 2018-02-11 00:45 - 1570310828 _____ C:\Users\katka\Downloads\Bohové Egypta-(2016)cz.dabing.mkv
2018-02-08 20:43 - 2018-02-08 20:43 - 000002282 _____ C:\Users\Public\Desktop\Driver Booster 5.lnk
2018-02-08 20:43 - 2018-02-08 20:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 5

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-02-28 11:34 - 2011-02-19 06:36 - 007572240 _____ C:\Windows\system32\perfh005.dat
2018-02-28 11:34 - 2011-02-19 06:36 - 002560062 _____ C:\Windows\system32\perfc005.dat
2018-02-28 11:34 - 2009-07-14 06:13 - 000006504 _____ C:\Windows\system32\PerfStringBackup.INI
2018-02-28 09:21 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-02-28 09:20 - 2014-05-23 21:09 - 000000000 ____D C:\ProgramData\IObit
2018-02-27 15:54 - 2012-03-18 20:13 - 000000000 ____D C:\Program Files (x86)\Google
2018-02-27 15:31 - 2009-07-14 05:45 - 000018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-02-27 15:31 - 2009-07-14 05:45 - 000018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-02-27 15:03 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2018-02-27 13:27 - 2014-05-23 21:09 - 000000000 ____D C:\Users\katka\AppData\Roaming\IObit
2018-02-27 13:27 - 2014-05-23 21:09 - 000000000 ____D C:\Program Files (x86)\IObit
2018-02-27 13:22 - 2014-05-23 21:18 - 000000000 ____D C:\Users\katka\AppData\LocalLow\IObit
2018-02-27 01:32 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\registration
2018-02-26 16:34 - 2017-03-16 07:37 - 000003910 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2018-02-26 16:34 - 2016-07-09 04:13 - 000001924 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2018-02-25 12:06 - 2016-06-02 14:54 - 000000000 ____D C:\Windows\rescache
2018-02-25 11:20 - 2017-11-20 13:20 - 000192944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2018-02-25 11:20 - 2017-09-20 08:16 - 000190440 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 001026696 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 000459952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 000379448 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 000205464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 000146648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 000110328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 000084368 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 000046968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2018-02-25 11:20 - 2014-05-23 21:18 - 000000000 ____D C:\ProgramData\ProductData
2018-02-25 11:19 - 2009-07-14 05:45 - 011648520 _____ C:\Windows\system32\FNTCACHE.DAT
2018-02-25 11:18 - 2014-12-13 03:15 - 000000000 ____D C:\Windows\system32\appraiser
2018-02-17 10:39 - 2017-10-17 08:39 - 130067560 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2018-02-17 10:39 - 2013-09-09 08:15 - 000000000 ____D C:\Windows\system32\MRT
2018-02-17 10:39 - 2013-09-09 08:14 - 130067560 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-02-17 10:33 - 2016-11-22 21:11 - 000000000 ____D C:\Users\katka\AppData\LocalLow\Mozilla
2018-02-17 10:09 - 2012-02-25 11:46 - 000000000 ____D C:\Users\katka\AppData\Local\Deployment
2018-02-14 07:18 - 2017-06-06 08:34 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-02-14 07:08 - 2017-11-17 07:55 - 000000946 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-02-14 07:08 - 2017-11-17 07:55 - 000000934 _____ C:\Users\Public\Desktop\Firefox.lnk
2018-02-13 18:12 - 2014-11-20 09:26 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-02-08 20:43 - 2014-05-23 21:09 - 000002886 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (katka)
2018-02-06 14:05 - 2012-09-25 21:35 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-02-06 14:05 - 2012-09-25 21:35 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-02-06 14:05 - 2012-09-25 21:35 - 000004396 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-02-06 14:05 - 2012-09-25 21:35 - 000000000 ____D C:\Windows\system32\Macromed
2018-02-06 14:05 - 2011-10-19 23:59 - 000000000 ____D C:\Windows\SysWOW64\Macromed

==================== Files in the root of some directories =======

2012-12-16 21:59 - 2012-12-17 16:47 - 004096000 _____ () C:\Program Files (x86)\GUT102D.tmp

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-02-27 15:34

==================== End of FRST.txt ============================

Conder
VIP
VIP
Příspěvky: 4399
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: win 7 , nejde přihlásit, pouze nouzový režim

#2 Příspěvek od Conder »

Ahoj :)

:arrow: Odinstaluj vsetky programy od IObit (Advanced SystemCare, Driver Booster...) - su to cinske smejdy, ktore mozu poskodit system.

:arrow: Spusti prikazovy riadok ako spravca a zadaj prikaz: sfc /scannow
  • Po dokonceni skopiruj a spusti tento prikaz:

    Kód: Vybrat vše

    findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >> "%userprofile%\desktop\sfcdetails.txt"
  • Na ploche sa vytvori subor sfcdetails.txt, jeho obsah sem skopiruj
Naposledy upravil(a) Conder dne 01 bře 2018 16:06, celkem upraveno 1 x.
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

Dennis
Návštěvník
Návštěvník
Příspěvky: 153
Registrován: 18 kvě 2009 06:38
Bydliště: Trutnov

Re: win 7 , nejde přihlásit, pouze nouzový režim

#3 Příspěvek od Dennis »

děkuji,
odinstalovano
sfc /scannow spuštěno

soubor:

2018-03-01 15:51:52, Info CSI 00000009 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:51:52, Info CSI 0000000a [SR] Beginning Verify and Repair transaction
2018-03-01 15:51:52, Info CSI 0000000c [SR] Verify complete
2018-03-01 15:51:52, Info CSI 0000000d [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:51:52, Info CSI 0000000e [SR] Beginning Verify and Repair transaction
2018-03-01 15:51:52, Info CSI 00000010 [SR] Verify complete
2018-03-01 15:51:52, Info CSI 00000011 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:51:52, Info CSI 00000012 [SR] Beginning Verify and Repair transaction
2018-03-01 15:51:53, Info CSI 00000014 [SR] Verify complete
2018-03-01 15:51:53, Info CSI 00000015 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:51:53, Info CSI 00000016 [SR] Beginning Verify and Repair transaction
2018-03-01 15:51:53, Info CSI 00000018 [SR] Verify complete
2018-03-01 15:51:53, Info CSI 00000019 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:51:53, Info CSI 0000001a [SR] Beginning Verify and Repair transaction
2018-03-01 15:51:53, Info CSI 0000001c [SR] Verify complete
2018-03-01 15:51:54, Info CSI 0000001d [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:51:54, Info CSI 0000001e [SR] Beginning Verify and Repair transaction
2018-03-01 15:51:54, Info CSI 00000020 [SR] Verify complete
2018-03-01 15:51:54, Info CSI 00000021 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:51:54, Info CSI 00000022 [SR] Beginning Verify and Repair transaction
2018-03-01 15:51:54, Info CSI 00000024 [SR] Verify complete
2018-03-01 15:51:54, Info CSI 00000025 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:51:54, Info CSI 00000026 [SR] Beginning Verify and Repair transaction
2018-03-01 15:51:54, Info CSI 00000028 [SR] Verify complete
2018-03-01 15:51:55, Info CSI 00000029 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:51:55, Info CSI 0000002a [SR] Beginning Verify and Repair transaction
2018-03-01 15:51:55, Info CSI 0000002c [SR] Verify complete
2018-03-01 15:51:55, Info CSI 0000002d [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:51:55, Info CSI 0000002e [SR] Beginning Verify and Repair transaction
2018-03-01 15:51:55, Info CSI 00000030 [SR] Verify complete
2018-03-01 15:51:55, Info CSI 00000031 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:51:55, Info CSI 00000032 [SR] Beginning Verify and Repair transaction
2018-03-01 15:51:55, Info CSI 00000034 [SR] Verify complete
2018-03-01 15:51:56, Info CSI 00000035 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:51:56, Info CSI 00000036 [SR] Beginning Verify and Repair transaction
2018-03-01 15:51:56, Info CSI 00000038 [SR] Verify complete
2018-03-01 15:51:56, Info CSI 00000039 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:51:56, Info CSI 0000003a [SR] Beginning Verify and Repair transaction
2018-03-01 15:51:56, Info CSI 0000003c [SR] Verify complete
2018-03-01 15:51:56, Info CSI 0000003d [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:51:56, Info CSI 0000003e [SR] Beginning Verify and Repair transaction
2018-03-01 15:51:56, Info CSI 00000040 [SR] Verify complete
2018-03-01 15:51:57, Info CSI 00000041 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:51:57, Info CSI 00000042 [SR] Beginning Verify and Repair transaction
2018-03-01 15:51:57, Info CSI 00000044 [SR] Verify complete
2018-03-01 15:51:57, Info CSI 00000045 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:51:57, Info CSI 00000046 [SR] Beginning Verify and Repair transaction
2018-03-01 15:51:57, Info CSI 00000048 [SR] Verify complete
2018-03-01 15:51:57, Info CSI 00000049 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:51:57, Info CSI 0000004a [SR] Beginning Verify and Repair transaction
2018-03-01 15:51:57, Info CSI 0000004c [SR] Verify complete
2018-03-01 15:51:58, Info CSI 0000004d [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:51:58, Info CSI 0000004e [SR] Beginning Verify and Repair transaction
2018-03-01 15:51:58, Info CSI 00000050 [SR] Verify complete
2018-03-01 15:51:58, Info CSI 00000051 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:51:58, Info CSI 00000052 [SR] Beginning Verify and Repair transaction
2018-03-01 15:51:58, Info CSI 00000054 [SR] Verify complete
2018-03-01 15:51:58, Info CSI 00000055 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:51:58, Info CSI 00000056 [SR] Beginning Verify and Repair transaction
2018-03-01 15:51:58, Info CSI 00000058 [SR] Verify complete
2018-03-01 15:51:59, Info CSI 00000059 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:51:59, Info CSI 0000005a [SR] Beginning Verify and Repair transaction
2018-03-01 15:51:59, Info CSI 0000005c [SR] Verify complete
2018-03-01 15:51:59, Info CSI 0000005d [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:51:59, Info CSI 0000005e [SR] Beginning Verify and Repair transaction
2018-03-01 15:51:59, Info CSI 00000060 [SR] Verify complete
2018-03-01 15:51:59, Info CSI 00000061 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:51:59, Info CSI 00000062 [SR] Beginning Verify and Repair transaction
2018-03-01 15:51:59, Info CSI 00000064 [SR] Verify complete
2018-03-01 15:52:00, Info CSI 00000065 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:00, Info CSI 00000066 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:00, Info CSI 00000068 [SR] Verify complete
2018-03-01 15:52:00, Info CSI 00000069 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:00, Info CSI 0000006a [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:00, Info CSI 0000006c [SR] Verify complete
2018-03-01 15:52:00, Info CSI 0000006d [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:00, Info CSI 0000006e [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:01, Info CSI 00000070 [SR] Verify complete
2018-03-01 15:52:01, Info CSI 00000071 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:01, Info CSI 00000072 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:01, Info CSI 00000074 [SR] Verify complete
2018-03-01 15:52:01, Info CSI 00000075 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:01, Info CSI 00000076 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:01, Info CSI 00000078 [SR] Verify complete
2018-03-01 15:52:01, Info CSI 00000079 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:01, Info CSI 0000007a [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:02, Info CSI 0000007c [SR] Verify complete
2018-03-01 15:52:02, Info CSI 0000007d [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:02, Info CSI 0000007e [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:02, Info CSI 00000080 [SR] Verify complete
2018-03-01 15:52:02, Info CSI 00000081 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:02, Info CSI 00000082 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:02, Info CSI 00000084 [SR] Verify complete
2018-03-01 15:52:02, Info CSI 00000085 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:02, Info CSI 00000086 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:03, Info CSI 00000088 [SR] Verify complete
2018-03-01 15:52:03, Info CSI 00000089 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:03, Info CSI 0000008a [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:03, Info CSI 0000008c [SR] Verify complete
2018-03-01 15:52:03, Info CSI 0000008d [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:03, Info CSI 0000008e [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:03, Info CSI 00000090 [SR] Verify complete
2018-03-01 15:52:03, Info CSI 00000091 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:03, Info CSI 00000092 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:04, Info CSI 00000094 [SR] Verify complete
2018-03-01 15:52:04, Info CSI 00000095 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:04, Info CSI 00000096 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:05, Info CSI 00000098 [SR] Verify complete
2018-03-01 15:52:05, Info CSI 00000099 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:05, Info CSI 0000009a [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:05, Info CSI 0000009c [SR] Verify complete
2018-03-01 15:52:05, Info CSI 0000009d [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:05, Info CSI 0000009e [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:06, Info CSI 000000a0 [SR] Verify complete
2018-03-01 15:52:06, Info CSI 000000a1 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:06, Info CSI 000000a2 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:06, Info CSI 000000a4 [SR] Verify complete
2018-03-01 15:52:06, Info CSI 000000a5 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:06, Info CSI 000000a6 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:06, Info CSI 000000a8 [SR] Verify complete
2018-03-01 15:52:06, Info CSI 000000a9 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:06, Info CSI 000000aa [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:07, Info CSI 000000ac [SR] Verify complete
2018-03-01 15:52:07, Info CSI 000000ad [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:07, Info CSI 000000ae [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:07, Info CSI 000000b0 [SR] Verify complete
2018-03-01 15:52:07, Info CSI 000000b1 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:07, Info CSI 000000b2 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:07, Info CSI 000000b4 [SR] Verify complete
2018-03-01 15:52:07, Info CSI 000000b5 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:07, Info CSI 000000b6 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:08, Info CSI 000000b8 [SR] Verify complete
2018-03-01 15:52:08, Info CSI 000000b9 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:08, Info CSI 000000ba [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:08, Info CSI 000000bc [SR] Verify complete
2018-03-01 15:52:08, Info CSI 000000bd [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:08, Info CSI 000000be [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:09, Info CSI 000000c0 [SR] Verify complete
2018-03-01 15:52:09, Info CSI 000000c1 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:09, Info CSI 000000c2 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:09, Info CSI 000000c4 [SR] Verify complete
2018-03-01 15:52:09, Info CSI 000000c5 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:09, Info CSI 000000c6 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:09, Info CSI 000000c8 [SR] Verify complete
2018-03-01 15:52:09, Info CSI 000000c9 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:09, Info CSI 000000ca [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:10, Info CSI 000000cc [SR] Verify complete
2018-03-01 15:52:10, Info CSI 000000cd [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:10, Info CSI 000000ce [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:10, Info CSI 000000d0 [SR] Verify complete
2018-03-01 15:52:10, Info CSI 000000d1 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:10, Info CSI 000000d2 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:11, Info CSI 000000d4 [SR] Verify complete
2018-03-01 15:52:11, Info CSI 000000d5 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:11, Info CSI 000000d6 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:12, Info CSI 000000d8 [SR] Verify complete
2018-03-01 15:52:12, Info CSI 000000d9 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:12, Info CSI 000000da [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:13, Info CSI 000000dc [SR] Verify complete
2018-03-01 15:52:13, Info CSI 000000dd [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:13, Info CSI 000000de [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:14, Info CSI 000000e0 [SR] Verify complete
2018-03-01 15:52:14, Info CSI 000000e1 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:14, Info CSI 000000e2 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:16, Info CSI 000000e5 [SR] Verify complete
2018-03-01 15:52:16, Info CSI 000000e6 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:16, Info CSI 000000e7 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:18, Info CSI 000000eb [SR] Verify complete
2018-03-01 15:52:18, Info CSI 000000ec [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:18, Info CSI 000000ed [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:20, Info CSI 000000f1 [SR] Verify complete
2018-03-01 15:52:20, Info CSI 000000f2 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:20, Info CSI 000000f3 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:21, Info CSI 000000f5 [SR] Verify complete
2018-03-01 15:52:21, Info CSI 000000f6 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:21, Info CSI 000000f7 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:25, Info CSI 00000118 [SR] Verify complete
2018-03-01 15:52:26, Info CSI 00000119 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:26, Info CSI 0000011a [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:28, Info CSI 00000120 [SR] Verify complete
2018-03-01 15:52:28, Info CSI 00000121 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:28, Info CSI 00000122 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:29, Info CSI 00000124 [SR] Verify complete
2018-03-01 15:52:29, Info CSI 00000125 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:29, Info CSI 00000126 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:31, Info CSI 00000128 [SR] Verify complete
2018-03-01 15:52:31, Info CSI 00000129 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:31, Info CSI 0000012a [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:33, Info CSI 0000012c [SR] Verify complete
2018-03-01 15:52:33, Info CSI 0000012d [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:33, Info CSI 0000012e [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:35, Info CSI 00000130 [SR] Verify complete
2018-03-01 15:52:35, Info CSI 00000131 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:35, Info CSI 00000132 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:38, Info CSI 00000134 [SR] Verify complete
2018-03-01 15:52:38, Info CSI 00000135 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:38, Info CSI 00000136 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:41, Info CSI 00000159 [SR] Verify complete
2018-03-01 15:52:41, Info CSI 0000015a [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:41, Info CSI 0000015b [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:44, Info CSI 0000015d [SR] Verify complete
2018-03-01 15:52:44, Info CSI 0000015e [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:44, Info CSI 0000015f [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:51, Info CSI 00000161 [SR] Verify complete
2018-03-01 15:52:52, Info CSI 00000162 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:52, Info CSI 00000163 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:53, Info CSI 00000167 [SR] Verify complete
2018-03-01 15:52:54, Info CSI 00000168 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:54, Info CSI 00000169 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:55, Info CSI 0000016b [SR] Verify complete
2018-03-01 15:52:55, Info CSI 0000016c [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:55, Info CSI 0000016d [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:56, Info CSI 0000016f [SR] Verify complete
2018-03-01 15:52:56, Info CSI 00000170 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:56, Info CSI 00000171 [SR] Beginning Verify and Repair transaction
2018-03-01 15:52:57, Info CSI 00000173 [SR] Verify complete
2018-03-01 15:52:57, Info CSI 00000174 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:52:57, Info CSI 00000175 [SR] Beginning Verify and Repair transaction
2018-03-01 15:53:03, Info CSI 00000188 [SR] Verify complete
2018-03-01 15:53:03, Info CSI 00000189 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:53:03, Info CSI 0000018a [SR] Beginning Verify and Repair transaction
2018-03-01 15:53:03, Info CSI 0000018c [SR] Verify complete
2018-03-01 15:53:03, Info CSI 0000018d [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:53:03, Info CSI 0000018e [SR] Beginning Verify and Repair transaction
2018-03-01 15:53:04, Info CSI 00000190 [SR] Cannot repair member file [l:22{11}]"PINTLGB.IMD" of Microsoft-Windows-IME-Simplified-Chinese-Core, Version = 6.1.7601.23572, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-01 15:53:04, Info CSI 00000192 [SR] Cannot repair member file [l:22{11}]"PINTLGB.IMD" of Microsoft-Windows-IME-Simplified-Chinese-Core, Version = 6.1.7601.23572, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-01 15:53:04, Info CSI 00000193 [SR] This component was referenced by [l:164{82}]"Package_510_for_KB4074598~31bf3856ad364e35~amd64~~6.1.1.3.4074598-1921_neutral_LDR"
2018-03-01 15:53:04, Info CSI 00000194 [SR] This component was referenced by [l:162{81}]"Package_165_for_KB4074598~31bf3856ad364e35~amd64~~6.1.1.3.4074598-528_neutral_LDR"
2018-03-01 15:53:04, Info CSI 00000197 [SR] Could not reproject corrupted file [ml:520{260},l:62{31}]"\??\C:\Windows\IME\IMESC5\DICTS"\[l:22{11}]"PINTLGB.IMD"; source file in store is also corrupted
2018-03-01 15:53:05, Info CSI 00000199 [SR] Verify complete
2018-03-01 15:53:05, Info CSI 0000019a [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:53:05, Info CSI 0000019b [SR] Beginning Verify and Repair transaction
2018-03-01 15:53:05, Info CSI 0000019d [SR] Verify complete
2018-03-01 15:53:06, Info CSI 0000019e [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:53:06, Info CSI 0000019f [SR] Beginning Verify and Repair transaction
2018-03-01 15:53:08, Info CSI 000001a2 [SR] Verify complete
2018-03-01 15:53:08, Info CSI 000001a3 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:53:08, Info CSI 000001a4 [SR] Beginning Verify and Repair transaction
2018-03-01 15:53:13, Info CSI 000001a7 [SR] Verify complete
2018-03-01 15:53:13, Info CSI 000001a8 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:53:13, Info CSI 000001a9 [SR] Beginning Verify and Repair transaction
2018-03-01 15:53:15, Info CSI 000001ab [SR] Verify complete
2018-03-01 15:53:15, Info CSI 000001ac [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:53:15, Info CSI 000001ad [SR] Beginning Verify and Repair transaction
2018-03-01 15:53:15, Info CSI 000001af [SR] Verify complete
2018-03-01 15:53:16, Info CSI 000001b0 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:53:16, Info CSI 000001b1 [SR] Beginning Verify and Repair transaction
2018-03-01 15:53:17, Info CSI 000001b3 [SR] Verify complete
2018-03-01 15:53:17, Info CSI 000001b4 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:53:17, Info CSI 000001b5 [SR] Beginning Verify and Repair transaction
2018-03-01 15:53:19, Info CSI 000001b7 [SR] Verify complete
2018-03-01 15:53:19, Info CSI 000001b8 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:53:19, Info CSI 000001b9 [SR] Beginning Verify and Repair transaction
2018-03-01 15:53:21, Info CSI 000001bb [SR] Verify complete
2018-03-01 15:53:21, Info CSI 000001bc [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:53:21, Info CSI 000001bd [SR] Beginning Verify and Repair transaction
2018-03-01 15:53:27, Info CSI 000001ce [SR] Verify complete
2018-03-01 15:53:27, Info CSI 000001cf [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:53:27, Info CSI 000001d0 [SR] Beginning Verify and Repair transaction
2018-03-01 15:53:30, Info CSI 000001d9 [SR] Verify complete
2018-03-01 15:53:30, Info CSI 000001da [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:53:30, Info CSI 000001db [SR] Beginning Verify and Repair transaction
2018-03-01 15:53:40, Info CSI 000001dd [SR] Verify complete
2018-03-01 15:53:41, Info CSI 000001de [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:53:41, Info CSI 000001df [SR] Beginning Verify and Repair transaction
2018-03-01 15:53:43, Info CSI 000001e1 [SR] Verify complete
2018-03-01 15:53:43, Info CSI 000001e2 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:53:43, Info CSI 000001e3 [SR] Beginning Verify and Repair transaction
2018-03-01 15:53:47, Info CSI 000001e5 [SR] Verify complete
2018-03-01 15:53:47, Info CSI 000001e6 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:53:47, Info CSI 000001e7 [SR] Beginning Verify and Repair transaction
2018-03-01 15:53:49, Info CSI 000001ea [SR] Verify complete
2018-03-01 15:53:49, Info CSI 000001eb [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:53:49, Info CSI 000001ec [SR] Beginning Verify and Repair transaction
2018-03-01 15:53:50, Info CSI 000001ee [SR] Verify complete
2018-03-01 15:53:50, Info CSI 000001ef [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:53:50, Info CSI 000001f0 [SR] Beginning Verify and Repair transaction
2018-03-01 15:53:52, Info CSI 000001f2 [SR] Verify complete
2018-03-01 15:53:52, Info CSI 000001f3 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:53:52, Info CSI 000001f4 [SR] Beginning Verify and Repair transaction
2018-03-01 15:53:53, Info CSI 000001f8 [SR] Verify complete
2018-03-01 15:53:54, Info CSI 000001f9 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:53:54, Info CSI 000001fa [SR] Beginning Verify and Repair transaction
2018-03-01 15:53:55, Info CSI 000001fc [SR] Verify complete
2018-03-01 15:53:56, Info CSI 000001fd [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:53:56, Info CSI 000001fe [SR] Beginning Verify and Repair transaction
2018-03-01 15:53:59, Info CSI 00000201 [SR] Verify complete
2018-03-01 15:54:00, Info CSI 00000202 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:00, Info CSI 00000203 [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:02, Info CSI 00000205 [SR] Verify complete
2018-03-01 15:54:02, Info CSI 00000206 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:02, Info CSI 00000207 [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:04, Info CSI 0000020a [SR] Verify complete
2018-03-01 15:54:04, Info CSI 0000020b [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:04, Info CSI 0000020c [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:07, Info CSI 0000020e [SR] Verify complete
2018-03-01 15:54:07, Info CSI 0000020f [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:07, Info CSI 00000210 [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:10, Info CSI 00000213 [SR] Verify complete
2018-03-01 15:54:10, Info CSI 00000214 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:10, Info CSI 00000215 [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:12, Info CSI 00000217 [SR] Verify complete
2018-03-01 15:54:12, Info CSI 00000218 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:12, Info CSI 00000219 [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:15, Info CSI 0000021b [SR] Verify complete
2018-03-01 15:54:15, Info CSI 0000021c [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:15, Info CSI 0000021d [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:16, Info CSI 00000220 [SR] Verify complete
2018-03-01 15:54:17, Info CSI 00000221 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:17, Info CSI 00000222 [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:18, Info CSI 00000224 [SR] Verify complete
2018-03-01 15:54:18, Info CSI 00000225 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:18, Info CSI 00000226 [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:19, Info CSI 00000229 [SR] Verify complete
2018-03-01 15:54:20, Info CSI 0000022a [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:20, Info CSI 0000022b [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:22, Info CSI 0000022e [SR] Verify complete
2018-03-01 15:54:22, Info CSI 0000022f [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:22, Info CSI 00000230 [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:25, Info CSI 00000233 [SR] Verify complete
2018-03-01 15:54:25, Info CSI 00000234 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:25, Info CSI 00000235 [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:27, Info CSI 00000238 [SR] Verify complete
2018-03-01 15:54:27, Info CSI 00000239 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:27, Info CSI 0000023a [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:30, Info CSI 0000023c [SR] Verify complete
2018-03-01 15:54:30, Info CSI 0000023d [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:30, Info CSI 0000023e [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:33, Info CSI 00000241 [SR] Verify complete
2018-03-01 15:54:33, Info CSI 00000242 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:33, Info CSI 00000243 [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:34, Info CSI 00000245 [SR] Verify complete
2018-03-01 15:54:34, Info CSI 00000246 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:34, Info CSI 00000247 [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:35, Info CSI 00000249 [SR] Verify complete
2018-03-01 15:54:35, Info CSI 0000024a [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:35, Info CSI 0000024b [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:37, Info CSI 0000024d [SR] Verify complete
2018-03-01 15:54:37, Info CSI 0000024e [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:37, Info CSI 0000024f [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:38, Info CSI 00000251 [SR] Verify complete
2018-03-01 15:54:38, Info CSI 00000252 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:38, Info CSI 00000253 [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:41, Info CSI 00000255 [SR] Verify complete
2018-03-01 15:54:41, Info CSI 00000256 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:41, Info CSI 00000257 [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:42, Info CSI 00000259 [SR] Verify complete
2018-03-01 15:54:42, Info CSI 0000025a [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:42, Info CSI 0000025b [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:44, Info CSI 0000025d [SR] Verify complete
2018-03-01 15:54:44, Info CSI 0000025e [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:44, Info CSI 0000025f [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:48, Info CSI 00000261 [SR] Verify complete
2018-03-01 15:54:48, Info CSI 00000262 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:48, Info CSI 00000263 [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:53, Info CSI 00000265 [SR] Verify complete
2018-03-01 15:54:53, Info CSI 00000266 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:53, Info CSI 00000267 [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:54, Info CSI 00000269 [SR] Verify complete
2018-03-01 15:54:55, Info CSI 0000026a [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:55, Info CSI 0000026b [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:55, Info CSI 0000026d [SR] Verify complete
2018-03-01 15:54:55, Info CSI 0000026e [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:55, Info CSI 0000026f [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:56, Info CSI 00000271 [SR] Verify complete
2018-03-01 15:54:57, Info CSI 00000272 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:57, Info CSI 00000273 [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:58, Info CSI 00000275 [SR] Verify complete
2018-03-01 15:54:58, Info CSI 00000276 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:58, Info CSI 00000277 [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:59, Info CSI 00000279 [SR] Verify complete
2018-03-01 15:54:59, Info CSI 0000027a [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:54:59, Info CSI 0000027b [SR] Beginning Verify and Repair transaction
2018-03-01 15:54:59, Info CSI 0000027d [SR] Verify complete
2018-03-01 15:55:00, Info CSI 0000027e [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:00, Info CSI 0000027f [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:00, Info CSI 00000281 [SR] Verify complete
2018-03-01 15:55:00, Info CSI 00000282 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:00, Info CSI 00000283 [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:03, Info CSI 0000028b [SR] Verify complete
2018-03-01 15:55:03, Info CSI 0000028c [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:03, Info CSI 0000028d [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:04, Info CSI 0000028f [SR] Verify complete
2018-03-01 15:55:05, Info CSI 00000290 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:05, Info CSI 00000291 [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:05, Info CSI 00000293 [SR] Verify complete
2018-03-01 15:55:06, Info CSI 00000294 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:06, Info CSI 00000295 [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:07, Info CSI 00000297 [SR] Verify complete
2018-03-01 15:55:07, Info CSI 00000298 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:07, Info CSI 00000299 [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:10, Info CSI 0000029b [SR] Verify complete
2018-03-01 15:55:10, Info CSI 0000029c [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:10, Info CSI 0000029d [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:13, Info CSI 000002a0 [SR] Verify complete
2018-03-01 15:55:13, Info CSI 000002a1 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:13, Info CSI 000002a2 [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:14, Info CSI 000002a4 [SR] Verify complete
2018-03-01 15:55:14, Info CSI 000002a5 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:14, Info CSI 000002a6 [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:15, Info CSI 000002a8 [SR] Verify complete
2018-03-01 15:55:15, Info CSI 000002a9 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:15, Info CSI 000002aa [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:21, Info CSI 000002af [SR] Verify complete
2018-03-01 15:55:21, Info CSI 000002b0 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:21, Info CSI 000002b1 [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:25, Info CSI 000002b5 [SR] Verify complete
2018-03-01 15:55:25, Info CSI 000002b6 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:25, Info CSI 000002b7 [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:28, Info CSI 000002b9 [SR] Verify complete
2018-03-01 15:55:28, Info CSI 000002ba [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:28, Info CSI 000002bb [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:31, Info CSI 000002c9 [SR] Verify complete
2018-03-01 15:55:31, Info CSI 000002ca [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:31, Info CSI 000002cb [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:33, Info CSI 000002d1 [SR] Verify complete
2018-03-01 15:55:34, Info CSI 000002d2 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:34, Info CSI 000002d3 [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:35, Info CSI 000002d5 [SR] Verify complete
2018-03-01 15:55:36, Info CSI 000002d6 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:36, Info CSI 000002d7 [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:37, Info CSI 000002db [SR] Verify complete
2018-03-01 15:55:37, Info CSI 000002dc [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:37, Info CSI 000002dd [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:38, Info CSI 000002df [SR] Verify complete
2018-03-01 15:55:38, Info CSI 000002e0 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:38, Info CSI 000002e1 [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:41, Info CSI 00000306 [SR] Verify complete
2018-03-01 15:55:42, Info CSI 00000307 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:42, Info CSI 00000308 [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:43, Info CSI 0000030a [SR] Verify complete
2018-03-01 15:55:43, Info CSI 0000030b [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:43, Info CSI 0000030c [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:44, Info CSI 0000030e [SR] Verify complete
2018-03-01 15:55:44, Info CSI 0000030f [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:44, Info CSI 00000310 [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:46, Info CSI 00000312 [SR] Verify complete
2018-03-01 15:55:46, Info CSI 00000313 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:46, Info CSI 00000314 [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:47, Info CSI 00000322 [SR] Verify complete
2018-03-01 15:55:47, Info CSI 00000323 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:47, Info CSI 00000324 [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:49, Info CSI 00000326 [SR] Verify complete
2018-03-01 15:55:49, Info CSI 00000327 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:49, Info CSI 00000328 [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:53, Info CSI 00000336 [SR] Verify complete
2018-03-01 15:55:53, Info CSI 00000337 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:53, Info CSI 00000338 [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:54, Info CSI 0000033a [SR] Verify complete
2018-03-01 15:55:54, Info CSI 0000033b [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:54, Info CSI 0000033c [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:55, Info CSI 0000033e [SR] Verify complete
2018-03-01 15:55:55, Info CSI 0000033f [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:55, Info CSI 00000340 [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:57, Info CSI 00000343 [SR] Verify complete
2018-03-01 15:55:58, Info CSI 00000344 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:58, Info CSI 00000345 [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:58, Info CSI 00000347 [SR] Verify complete
2018-03-01 15:55:58, Info CSI 00000348 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:55:58, Info CSI 00000349 [SR] Beginning Verify and Repair transaction
2018-03-01 15:55:59, Info CSI 0000034b [SR] Verify complete
2018-03-01 15:56:00, Info CSI 0000034c [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:56:00, Info CSI 0000034d [SR] Beginning Verify and Repair transaction
2018-03-01 15:56:01, Info CSI 0000034f [SR] Verify complete
2018-03-01 15:56:01, Info CSI 00000350 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:56:01, Info CSI 00000351 [SR] Beginning Verify and Repair transaction
2018-03-01 15:56:02, Info CSI 00000353 [SR] Verify complete
2018-03-01 15:56:02, Info CSI 00000354 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:56:02, Info CSI 00000355 [SR] Beginning Verify and Repair transaction
2018-03-01 15:56:07, Info CSI 0000036f [SR] Verify complete
2018-03-01 15:56:07, Info CSI 00000370 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:56:07, Info CSI 00000371 [SR] Beginning Verify and Repair transaction
2018-03-01 15:56:16, Info CSI 00000373 [SR] Verify complete
2018-03-01 15:56:16, Info CSI 00000374 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:56:16, Info CSI 00000375 [SR] Beginning Verify and Repair transaction
2018-03-01 15:56:18, Info CSI 00000377 [SR] Verify complete
2018-03-01 15:56:18, Info CSI 00000378 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:56:18, Info CSI 00000379 [SR] Beginning Verify and Repair transaction
2018-03-01 15:56:19, Info CSI 0000037b [SR] Verify complete
2018-03-01 15:56:19, Info CSI 0000037c [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:56:19, Info CSI 0000037d [SR] Beginning Verify and Repair transaction
2018-03-01 15:56:20, Info CSI 00000381 [SR] Verify complete
2018-03-01 15:56:20, Info CSI 00000382 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:56:20, Info CSI 00000383 [SR] Beginning Verify and Repair transaction
2018-03-01 15:56:21, Info CSI 00000385 [SR] Verify complete
2018-03-01 15:56:22, Info CSI 00000386 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:56:22, Info CSI 00000387 [SR] Beginning Verify and Repair transaction
2018-03-01 15:56:23, Info CSI 00000389 [SR] Verify complete
2018-03-01 15:56:23, Info CSI 0000038a [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:56:23, Info CSI 0000038b [SR] Beginning Verify and Repair transaction
2018-03-01 15:56:24, Info CSI 0000038d [SR] Verify complete
2018-03-01 15:56:25, Info CSI 0000038e [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:56:25, Info CSI 0000038f [SR] Beginning Verify and Repair transaction
2018-03-01 15:56:26, Info CSI 00000392 [SR] Verify complete
2018-03-01 15:56:26, Info CSI 00000393 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:56:26, Info CSI 00000394 [SR] Beginning Verify and Repair transaction
2018-03-01 15:56:27, Info CSI 00000396 [SR] Verify complete
2018-03-01 15:56:27, Info CSI 00000397 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:56:27, Info CSI 00000398 [SR] Beginning Verify and Repair transaction
2018-03-01 15:56:29, Info CSI 0000039a [SR] Verify complete
2018-03-01 15:56:29, Info CSI 0000039b [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:56:29, Info CSI 0000039c [SR] Beginning Verify and Repair transaction
2018-03-01 15:56:31, Info CSI 0000039e [SR] Verify complete
2018-03-01 15:56:31, Info CSI 0000039f [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:56:31, Info CSI 000003a0 [SR] Beginning Verify and Repair transaction
2018-03-01 15:56:33, Info CSI 000003a3 [SR] Verify complete
2018-03-01 15:56:33, Info CSI 000003a4 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:56:33, Info CSI 000003a5 [SR] Beginning Verify and Repair transaction
2018-03-01 15:56:35, Info CSI 000003a7 [SR] Verify complete
2018-03-01 15:56:35, Info CSI 000003a8 [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:56:35, Info CSI 000003a9 [SR] Beginning Verify and Repair transaction
2018-03-01 15:56:36, Info CSI 000003ab [SR] Verify complete
2018-03-01 15:56:36, Info CSI 000003ac [SR] Verifying 100 (0x0000000000000064) components
2018-03-01 15:56:36, Info CSI 000003ad [SR] Beginning Verify and Repair transaction
2018-03-01 15:56:38, Info CSI 000003af [SR] Verify complete
2018-03-01 15:56:38, Info CSI 000003b0 [SR] Verifying 92 (0x000000000000005c) components
2018-03-01 15:56:38, Info CSI 000003b1 [SR] Beginning Verify and Repair transaction
2018-03-01 15:56:40, Info CSI 000003b3 [SR] Verify complete
2018-03-01 15:56:40, Info CSI 000003b4 [SR] Repairing 1 components
2018-03-01 15:56:40, Info CSI 000003b5 [SR] Beginning Verify and Repair transaction
2018-03-01 15:56:40, Info CSI 000003b7 [SR] Cannot repair member file [l:22{11}]"PINTLGB.IMD" of Microsoft-Windows-IME-Simplified-Chinese-Core, Version = 6.1.7601.23572, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-01 15:56:40, Info CSI 000003b9 [SR] Cannot repair member file [l:22{11}]"PINTLGB.IMD" of Microsoft-Windows-IME-Simplified-Chinese-Core, Version = 6.1.7601.23572, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2018-03-01 15:56:40, Info CSI 000003ba [SR] This component was referenced by [l:164{82}]"Package_510_for_KB4074598~31bf3856ad364e35~amd64~~6.1.1.3.4074598-1921_neutral_LDR"
2018-03-01 15:56:40, Info CSI 000003bb [SR] This component was referenced by [l:162{81}]"Package_165_for_KB4074598~31bf3856ad364e35~amd64~~6.1.1.3.4074598-528_neutral_LDR"
2018-03-01 15:56:40, Info CSI 000003be [SR] Could not reproject corrupted file [ml:520{260},l:62{31}]"\??\C:\Windows\IME\IMESC5\DICTS"\[l:22{11}]"PINTLGB.IMD"; source file in store is also corrupted
2018-03-01 15:56:40, Info CSI 000003c0 [SR] Repair complete
2018-03-01 15:56:40, Info CSI 000003c1 [SR] Committing transaction
2018-03-01 15:56:40, Info CSI 000003c5 [SR] Verify and Repair Transaction completed. All files and registry keys listed in this transaction have been successfully repaired

Conder
VIP
VIP
Příspěvky: 4399
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: win 7 , nejde přihlásit, pouze nouzový režim

#4 Příspěvek od Conder »

:arrow: OK, sfc /scannow nieco opravil. Otestuj, ci funguje prihlasenie v normalnom rezime.
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

Dennis
Návštěvník
Návštěvník
Příspěvky: 153
Registrován: 18 kvě 2009 06:38
Bydliště: Trutnov

Re: win 7 , nejde přihlásit, pouze nouzový režim

#5 Příspěvek od Dennis »

v normální nefunguje
píše: Službě služba profil uživatele se nepodařilo přihlásit
Nelfe načíst profil uživatele

v nouzovém jde

Conder
VIP
VIP
Příspěvky: 4399
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: win 7 , nejde přihlásit, pouze nouzový režim

#6 Příspěvek od Conder »

:arrow: Spusti teda PC v nudzovom rezime a pokracuj nasledovne:

:arrow: Otvor poznamkovy blok (Win+R -> notepad -> enter)
  • Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

    Kód: Vybrat vše

    Start
    Export: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
    End
  • Uloz na plochu s nazvom fixlist.txt
  • Spusti znovu FRST a klikni na Fix
  • Otvori sa Fixlog.txt (pripadne bude na ploche), jeho obsah sem skopiruj
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

Dennis
Návštěvník
Návštěvník
Příspěvky: 153
Registrován: 18 kvě 2009 06:38
Bydliště: Trutnov

Re: win 7 , nejde přihlásit, pouze nouzový režim

#7 Příspěvek od Dennis »

provedeno

přihlášení normálně stale nefunguje, nouzovový režim ano


Fix result of Farbar Recovery Scan Tool (x64) Version: 28.02.2018
Ran by katka (02-03-2018 08:55:41) Run:1
Running from C:\Windows\System32\config\systemprofile\Desktop
Loaded Profiles: False (Available Profiles: katka & Mcx1-KATKA-PC)
Boot Mode: Safe Mode (with Networking)
==============================================

fixlist content:
*****************
Start
Export: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
End
*****************

Export: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList => Error: No automatic fix found for this entry.

==== End of Fixlog 08:55:41 ====

Conder
VIP
VIP
Příspěvky: 4399
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: win 7 , nejde přihlásit, pouze nouzový režim

#8 Příspěvek od Conder »

:arrow: Ano, toto este nebol pokus o opravu.

:arrow: Poprosim spustit este raz tento fixlist (postup taky isty):

Kód: Vybrat vše

Start
ExportKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
End
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

Dennis
Návštěvník
Návštěvník
Příspěvky: 153
Registrován: 18 kvě 2009 06:38
Bydliště: Trutnov

Re: win 7 , nejde přihlásit, pouze nouzový režim

#9 Příspěvek od Dennis »

provedeno

v normalnim rezimu nefunguje

Fix result of Farbar Recovery Scan Tool (x64) Version: 28.02.2018
Ran by katka (02-03-2018 15:23:58) Run:2
Running from C:\Windows\System32\config\systemprofile\Desktop
Loaded Profiles: False (Available Profiles: katka & Mcx1-KATKA-PC)
Boot Mode: Safe Mode (with Networking)
==============================================

fixlist content:
*****************
Start
ExportKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
End
*****************

================== ExportKey: ===================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList]
"ProfilesDirectory"="%SystemDrive%\Users"
"Default"="%SystemDrive%\Users\Default"
"Public"="%SystemDrive%\Users\Public"
"ProgramData"="%SystemDrive%\ProgramData"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18]
"Flags"="12"
"State"="0"
"RefCount"="1"
"Sid"="010100000000000512000000"
"ProfileImagePath"="%systemroot%\system32\config\systemprofile"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19]
"ProfileImagePath"="C:\Windows\ServiceProfiles\LocalService"
"Flags"="0"
"State"="0"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20]
"ProfileImagePath"="C:\Windows\ServiceProfiles\NetworkService"
"Flags"="0"
"State"="0"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-4224010459-2142079050-1490898530-1000]
"ProfileImagePath"="C:\Users\TEMP"
"RunLogonScriptSync"="0"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-4224010459-2142079050-1490898530-1000.bak]
"ProfileImagePath"="C:\Users\katka"
"Flags"="0"
"State"="32768"
"Sid"="010500000000000515000000db48c5fb4a88ad7f624edd58e8030000"
"ProfileLoadTimeLow"="0"
"ProfileLoadTimeHigh"="0"
"RefCount"="0"
"RunLogonScriptSync"="0"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-4224010459-2142079050-1490898530-1093]
"ProfileImagePath"="C:\Users\Mcx1-KATKA-PC"
"Flags"="0"
"State"="516"
"Sid"="010500000000000515000000db48c5fb4a88ad7f624edd5845040000"
"ProfileLoadTimeLow"="0"
"ProfileLoadTimeHigh"="0"
"RefCount"="0"
"RunLogonScriptSync"="0"

=== End of ExportKey ===

==== End of Fixlog 15:23:58 ====

Conder
VIP
VIP
Příspěvky: 4399
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: win 7 , nejde přihlásit, pouze nouzový režim

#10 Příspěvek od Conder »

:arrow: OK, pokracuj stale v nudzovom rezime:

:arrow: Otvor poznamkovy blok (Win+R -> notepad -> enter)
  • Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

    Kód: Vybrat vše

    Start
    REG: reg export "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" C:\FRST\profilelist.reg /y
    DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-4224010459-2142079050-1490898530-1000
    REG: reg copy "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-4224010459-2142079050-1490898530-1000.bak" "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-4224010459-2142079050-1490898530-1000" /s /f
    REG: reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-4224010459-2142079050-1490898530-1000" /t REG_DWORD /v RefCount /d 0 /f
    REG: reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-4224010459-2142079050-1490898530-1000" /t REG_DWORD /v State /d 0 /f
    End
  • Uloz na plochu s nazvom fixlist.txt
  • Spusti znovu FRST a klikni na Fix
  • Po dokonceni sa otvori Fixlog.txt (pripadne bude na ploche), jeho obsah sem skopiruj
:arrow: Nasledne restartuj PC a vyskusaj, ci funguje prihlasenie. Ak to pojde, vytvor nove logy z FRST (moznost Scan) a posli v dalsej odpovedi, este docistime PC.
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

Dennis
Návštěvník
Návštěvník
Příspěvky: 153
Registrován: 18 kvě 2009 06:38
Bydliště: Trutnov

Re: win 7 , nejde přihlásit, pouze nouzový režim

#11 Příspěvek od Dennis »

super naběhlo v normální režimu

dávám oba logy
1. fixlist
2. scan

Fix result of Farbar Recovery Scan Tool (x64) Version: 28.02.2018
Ran by katka (02-03-2018 16:44:08) Run:3
Running from C:\Windows\System32\config\systemprofile\Desktop
Loaded Profiles: False (Available Profiles: katka & Mcx1-KATKA-PC)
Boot Mode: Safe Mode (with Networking)
==============================================

fixlist content:
*****************
Start
REG: reg export "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" C:\FRST\profilelist.reg /y
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-4224010459-2142079050-1490898530-1000
REG: reg copy "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-4224010459-2142079050-1490898530-1000.bak" "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-4224010459-2142079050-1490898530-1000" /s /f
REG: reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-4224010459-2142079050-1490898530-1000" /t REG_DWORD /v RefCount /d 0 /f
REG: reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-4224010459-2142079050-1490898530-1000" /t REG_DWORD /v State /d 0 /f
End
*****************


========= reg export "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" C:\FRST\profilelist.reg /y =========

Operace byla dokonźena ŁspŘçnŘ.



========= End of Reg: =========

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-4224010459-2142079050-1490898530-1000" => removed successfully

========= reg copy "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-4224010459-2142079050-1490898530-1000.bak" "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-4224010459-2142079050-1490898530-1000" /s /f =========

Operace byla dokonźena ŁspŘçnŘ.



========= End of Reg: =========


========= reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-4224010459-2142079050-1490898530-1000" /t REG_DWORD /v RefCount /d 0 /f =========

Operace byla dokonźena ŁspŘçnŘ.



========= End of Reg: =========


========= reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-4224010459-2142079050-1490898530-1000" /t REG_DWORD /v State /d 0 /f =========

Operace byla dokonźena ŁspŘçnŘ.



========= End of Reg: =========


==== End of Fixlog 16:44:08 ====


2 scan :

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28.02.2018
Ran by katka (administrator) on KATKA-PC (02-03-2018 16:50:48)
Running from C:\Users\katka\Desktop
Loaded Profiles: katka (Available Profiles: katka & Mcx1-KATKA-PC)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnWMI.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
() C:\Program Files\ASUS\ASUS Secure Delete\ADDEL.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS PowerWiz\PowerWiz.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTray.exe
() C:\CPP\CppKalkulacky\CppCalcServer.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDGesture.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(Windows (R) Win 7 DDK provider) C:\Program Files\Fresco Logic\Fresco Logic USB3.0 Host Controller\amd64_host\FLxHCIm.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [961184 2011-08-02] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [798880 2011-08-02] (Atheros Commnucations)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2661672 2012-02-20] (ELAN Microelectronics Corp.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [243496 2018-02-25] (AVAST Software)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3331312 2011-10-19] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe [737104 2011-07-29] (ecareme)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [322208 2012-06-25] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [174752 2012-06-19] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [FLxHCIm64] => C:\Program Files\Fresco Logic\Fresco Logic USB3.0 Host Controller\amd64_host\FLxHCIm.exe [48128 2012-05-21] (Windows (R) Win 7 DDK provider)
HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2321584 2012-04-28] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\...\Run: [KiesAirMessage] => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe [578560 2012-12-18] (Samsung Electronics)
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844296 2012-12-20] (Samsung)
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\...\Run: [AGupdate] => C:\Program Files (x86)\AppGraffiti\AGupdate.exe
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\...\Run: [Advanced SystemCare 9] => "C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe" /Auto
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTRAY.EXE [563416 2015-07-12] (ZONER software)
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\...\MountPoints2: {5935007e-17a7-11e6-a52d-e0b9a5d2a15d} - D:\HiSuiteDownLoader.exe
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\...\MountPoints2: {8e893de4-5edc-11e1-a4b0-956562494656} - D:\unlock.exe autoplay=true
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\...\MountPoints2: {ce602799-7480-11e4-8311-e0b9a5d2a15d} - D:\LaunchU3.exe -a
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk [2011-10-20]
ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe (ASUSTeK Computer Inc.)
Startup: C:\Users\katka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CPP - CalcServer.lnk [2014-12-18]
ShortcutTarget: CPP - CalcServer.lnk -> C:\CPP\CppKalkulacky\CppCalcServer.exe ()
GroupPolicy: Restriction <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: 127.0.0.1 asc55.iobit.com
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 194.12.32.193
Tcpip\..\Interfaces\{CAE83C90-F142-47E5-A149-BCE919377C0F}: [DhcpNameServer] 8.8.8.8 194.12.32.193

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com/
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-4224010459-2142079050-1490898530-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-4224010459-2142079050-1490898530-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2018-02-25] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll [2017-09-23] (Oracle Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-08-02] (Atheros Commnucations)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2018-02-25] (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-09-23] (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File

FireFox:
========
FF DefaultProfile: d7qrx9wl.default-1518588796553
FF ProfilePath: C:\Users\katka\AppData\Roaming\Mozilla\Firefox\Profiles\jxa31axu.default [2018-02-17]
FF ProfilePath: C:\Users\katka\AppData\Roaming\Mozilla\Firefox\Profiles\d7qrx9wl.default-1518588796553 [2018-02-17]
FF HKLM-x32\...\Firefox\Extensions: [siteranker@siteranker.com] - C:\Program Files (x86)\SiteRanker\firefox => not found
FF HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\...\Firefox\Extensions: [rebate_informer_wp@rebateblast.com] - C:\Program Files (x86)\RebateInformer\Firefox => not found
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_28_0_0_161.dll [2018-02-06] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_161.dll [2018-02-06] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-09-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-09-23] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-13] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-13] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-05-08] (Adobe Systems Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll [2010-01-23] (Zeon Corporation)
StartMenuInternet: Firefox-48A8B1C46EA8071B - C:\Users\katka\AppData\Local\Mozilla Firefox\firefox.exe

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.google.com
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Profile: C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default [2018-02-28]
CHR Extension: (IObit Surfing Protection & Ads Removal) - C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbmegnmpleoagolcnjnejdacakedpcgd [2017-09-08]
CHR Extension: (YouTube) - C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-31]
CHR Extension: (Vyhledávání Google) - C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-05-31]
CHR Extension: (Avast SafePrice) - C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2018-01-15]
CHR Extension: (AdBlock) - C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-02-14]
CHR Extension: (Avast Online Security) - C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2018-01-15]
CHR Extension: (New tabs to the foreground) - C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikgdcelplfiemfcjaocfkocnapkdfbho [2014-05-24]
CHR Extension: (Glossy Blue) - C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nheaocaplknjkpcnbadlgfpdfjaabiml [2014-05-24]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-09-09]
CHR Extension: (Gmail) - C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-13]
CHR Extension: (Chrome Media Router) - C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-02-14]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [277120 2012-02-16] (ASUS)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7564512 2018-02-25] (AVAST Software)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-08-02] (Atheros) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [103584 2011-08-02] (Atheros Commnucations) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [300600 2018-02-25] (AVAST Software)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [3046688 2016-07-29] (IObit)
S3 MozillaMaintenance; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [194512 2018-02-13] () [File not signed]
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [1050904 2013-12-11] () [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AiCharger; C:\Windows\SysWOW64\DRIVERS\AiCharger.sys [17152 2012-02-29] (ASUSTek Computer Inc.)
R0 assd; C:\Windows\System32\Drivers\assd.sys [27056 2011-10-28] (ASUS Corporation) [File not signed]
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [192944 2018-02-25] (AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [321512 2018-01-09] (AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [199448 2018-01-09] (AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [343768 2018-01-09] (AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [57696 2018-01-09] (AVAST Software)
R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [190440 2018-02-25] (AVAST Software)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [46968 2018-02-25] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [41832 2017-09-10] (AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [146648 2018-02-25] (AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [110328 2018-02-25] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [84368 2018-02-25] (AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1026696 2018-02-25] (AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [459952 2018-02-25] (AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [205464 2018-02-25] (AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [379448 2018-02-25] (AVAST Software)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 FLxHCIh; C:\Windows\System32\DRIVERS\FLxHCIh.sys [72448 2012-05-28] (Fresco Logic)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-07-24] (REALiX(tm))
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2014-05-23] (Intel Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [34544 2014-05-23] (Synaptics Incorporated)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [221824 2016-04-24] (Samsung Electronics Co., Ltd.)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
S4 IMFFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\IMFFilter.sys [X]
S1 nlfpmdnb; \??\C:\Windows\system32\drivers\nlfpmdnb.sys [X]
S3 RegFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-03-02 16:50 - 2018-03-02 16:51 - 000022233 _____ C:\Users\katka\Desktop\FRST.txt
2018-03-02 16:50 - 2018-03-02 16:50 - 002403840 _____ (Farbar) C:\Users\katka\Desktop\FRST64.exe
2018-03-02 16:50 - 2018-03-02 16:50 - 000000000 ____D C:\Users\katka\Desktop\FRST-OlderVersion
2018-02-28 11:35 - 2018-03-02 16:50 - 000000000 ____D C:\FRST
2018-02-27 15:56 - 2018-02-27 15:56 - 000000000 ____D C:\Windows\system32\%LOCALAPPDATA%
2018-02-27 15:54 - 2018-02-27 15:54 - 000000000 ____D C:\Users\TEMP\AppData\Roaming\Adobe
2018-02-27 15:06 - 2018-03-02 16:43 - 001095086 _____ C:\Windows\ntbtlog.txt
2018-02-27 15:02 - 2018-02-27 15:02 - 000000824 _____ C:\Users\Public\Desktop\CCleaner.lnk
2018-02-27 15:02 - 2018-02-27 15:02 - 000000300 ____H C:\Windows\Tasks\CCleaner Update.job
2018-02-27 15:02 - 2018-02-27 15:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2018-02-27 15:02 - 2018-02-27 15:02 - 000000000 ____D C:\Program Files\CCleaner
2018-02-27 13:19 - 2018-02-28 09:07 - 000000000 ____D C:\AdwCleaner
2018-02-26 16:34 - 2018-02-25 11:20 - 000380768 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2018-02-25 11:20 - 2018-02-26 16:34 - 000000000 ____D C:\Users\TEMP
2018-02-25 11:20 - 2015-09-15 21:05 - 000000000 ____D C:\Users\TEMP\AppData\Roaming\IObit
2018-02-25 11:20 - 2012-02-27 10:23 - 000000000 ____D C:\Users\TEMP\AppData\Local\Microsoft Help
2018-02-25 11:20 - 2012-02-25 12:18 - 000000000 ____D C:\Users\TEMP\AppData\Roaming\Macromedia
2018-02-25 11:20 - 2009-07-14 08:44 - 000000000 ____D C:\Users\TEMP\AppData\Roaming\Media Center Programs
2018-02-17 10:22 - 2018-02-10 20:52 - 000395928 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2018-02-17 10:22 - 2018-02-10 20:03 - 000347296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-02-17 10:22 - 2018-02-10 09:44 - 025740288 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-02-17 10:22 - 2018-02-10 08:30 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2018-02-17 10:22 - 2018-02-10 08:29 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2018-02-17 10:22 - 2018-02-10 08:19 - 002900480 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-02-17 10:22 - 2018-02-10 08:17 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2018-02-17 10:22 - 2018-02-10 08:17 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2018-02-17 10:22 - 2018-02-10 08:17 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2018-02-17 10:22 - 2018-02-10 08:16 - 000577536 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-02-17 10:22 - 2018-02-10 08:16 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2018-02-17 10:22 - 2018-02-10 08:10 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2018-02-17 10:22 - 2018-02-10 08:10 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2018-02-17 10:22 - 2018-02-10 08:09 - 005782016 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-02-17 10:22 - 2018-02-10 08:07 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2018-02-17 10:22 - 2018-02-10 08:06 - 000816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-02-17 10:22 - 2018-02-10 08:06 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-02-17 10:22 - 2018-02-10 08:06 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2018-02-17 10:22 - 2018-02-10 08:06 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2018-02-17 10:22 - 2018-02-10 08:01 - 000969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2018-02-17 10:22 - 2018-02-10 07:58 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2018-02-17 10:22 - 2018-02-10 07:52 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2018-02-17 10:22 - 2018-02-10 07:52 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-02-17 10:22 - 2018-02-10 07:51 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2018-02-17 10:22 - 2018-02-10 07:49 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2018-02-17 10:22 - 2018-02-10 07:48 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2018-02-17 10:22 - 2018-02-10 07:46 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2018-02-17 10:22 - 2018-02-10 07:45 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2018-02-17 10:22 - 2018-02-10 07:36 - 015283712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-02-17 10:22 - 2018-02-10 07:36 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2018-02-17 10:22 - 2018-02-10 07:34 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-02-17 10:22 - 2018-02-10 07:34 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2018-02-17 10:22 - 2018-02-10 07:33 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2018-02-17 10:22 - 2018-02-10 07:32 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-02-17 10:22 - 2018-02-10 07:27 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-02-17 10:22 - 2018-02-10 07:20 - 020274176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-02-17 10:22 - 2018-02-10 07:14 - 001546240 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-02-17 10:22 - 2018-02-10 07:08 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2018-02-17 10:22 - 2018-02-10 07:02 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-02-17 10:22 - 2018-02-10 06:57 - 000499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-02-17 10:22 - 2018-02-10 06:57 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2018-02-17 10:22 - 2018-02-10 06:57 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2018-02-17 10:22 - 2018-02-10 06:57 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2018-02-17 10:22 - 2018-02-10 06:56 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2018-02-17 10:22 - 2018-02-10 06:54 - 002294272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2018-02-17 10:22 - 2018-02-10 06:52 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2018-02-17 10:22 - 2018-02-10 06:51 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2018-02-17 10:22 - 2018-02-10 06:50 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2018-02-17 10:22 - 2018-02-10 06:49 - 000662528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-02-17 10:22 - 2018-02-10 06:49 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2018-02-17 10:22 - 2018-02-10 06:49 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2018-02-17 10:22 - 2018-02-10 06:42 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2018-02-17 10:22 - 2018-02-10 06:39 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2018-02-17 10:22 - 2018-02-10 06:38 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2018-02-17 10:22 - 2018-02-10 06:38 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2018-02-17 10:22 - 2018-02-10 06:36 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2018-02-17 10:22 - 2018-02-10 06:35 - 004498944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-02-17 10:22 - 2018-02-10 06:35 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2018-02-17 10:22 - 2018-02-10 06:35 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2018-02-17 10:22 - 2018-02-10 06:34 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2018-02-17 10:22 - 2018-02-10 06:33 - 013680640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-02-17 10:22 - 2018-02-10 06:29 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2018-02-17 10:22 - 2018-02-10 06:27 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2018-02-17 10:22 - 2018-02-10 06:27 - 000694784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-02-17 10:22 - 2018-02-10 06:26 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2018-02-17 10:22 - 2018-02-10 06:14 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-02-17 10:22 - 2018-02-10 06:10 - 001314304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-02-17 10:22 - 2018-02-10 06:08 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-02-17 10:22 - 2018-01-12 17:46 - 000631680 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-02-17 10:22 - 2018-01-12 17:44 - 005581544 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-02-17 10:22 - 2018-01-12 17:44 - 001894120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2018-02-17 10:22 - 2018-01-12 17:44 - 000708328 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-02-17 10:22 - 2018-01-12 17:44 - 000377064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2018-02-17 10:22 - 2018-01-12 17:44 - 000371432 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2018-02-17 10:22 - 2018-01-12 17:44 - 000287976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2018-02-17 10:22 - 2018-01-12 17:44 - 000262376 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2018-02-17 10:22 - 2018-01-12 17:44 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2018-02-17 10:22 - 2018-01-12 17:44 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2018-02-17 10:22 - 2018-01-12 17:40 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000484864 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:33 - 001665384 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-02-17 10:22 - 2018-01-12 17:29 - 004014312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2018-02-17 10:22 - 2018-01-12 17:29 - 003959016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2018-02-17 10:22 - 2018-01-12 17:27 - 004834816 _____ (Microsoft Corporation) C:\Windows\system32\xpsrchvw.exe
2018-02-17 10:22 - 2018-01-12 17:27 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:16 - 003405824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xpsrchvw.exe
2018-02-17 10:22 - 2018-01-12 17:16 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2018-02-17 10:22 - 2018-01-12 17:16 - 000030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2018-02-17 10:22 - 2018-01-12 17:15 - 000032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2018-02-17 10:22 - 2018-01-12 17:11 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2018-02-17 10:22 - 2018-01-12 17:11 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2018-02-17 10:22 - 2018-01-12 17:11 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2018-02-17 10:22 - 2018-01-12 17:10 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2018-02-17 10:22 - 2018-01-12 17:07 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2018-02-17 10:22 - 2018-01-12 17:06 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2018-02-17 10:22 - 2018-01-12 17:03 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-02-17 10:22 - 2018-01-12 17:02 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2018-02-17 10:22 - 2018-01-12 17:02 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2018-02-17 10:22 - 2018-01-12 17:02 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2018-02-17 10:22 - 2018-01-12 17:01 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2018-02-17 10:22 - 2018-01-12 17:01 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2018-02-17 10:22 - 2018-01-12 16:57 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2018-02-17 10:22 - 2018-01-12 16:57 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2018-02-17 10:22 - 2018-01-12 16:57 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2018-02-17 10:22 - 2018-01-12 16:57 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2018-02-17 10:22 - 2018-01-12 16:57 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2018-02-17 10:22 - 2018-01-12 16:56 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 16:56 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 16:56 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 16:56 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2018-02-17 10:22 - 2018-01-11 17:41 - 001133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2018-02-17 10:22 - 2018-01-11 17:22 - 000805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2018-02-17 10:22 - 2018-01-11 17:09 - 003224064 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-02-17 10:22 - 2018-01-05 17:31 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2018-02-17 10:22 - 2018-01-05 17:31 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2018-02-17 10:22 - 2018-01-05 17:30 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2018-02-17 10:22 - 2018-01-05 17:30 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2018-02-17 10:22 - 2018-01-05 17:30 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2018-02-17 10:22 - 2018-01-05 17:25 - 000383720 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2018-02-17 10:22 - 2018-01-05 17:14 - 000309480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2018-02-17 10:22 - 2018-01-05 17:11 - 000111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2018-02-17 10:22 - 2018-01-05 17:11 - 000071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2018-02-17 10:22 - 2018-01-05 17:11 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2018-02-17 10:22 - 2018-01-05 17:11 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2018-02-17 10:22 - 2018-01-05 16:50 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2018-02-17 10:22 - 2017-12-05 18:36 - 001484288 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2018-02-17 10:22 - 2017-12-05 18:36 - 000229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2018-02-17 10:22 - 2017-12-05 18:36 - 000218112 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2018-02-17 10:22 - 2017-12-05 18:36 - 000190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2018-02-17 10:22 - 2017-12-05 18:36 - 000141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2018-02-17 10:22 - 2017-12-05 18:36 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
2018-02-17 10:22 - 2017-12-05 18:08 - 001176576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2018-02-17 10:22 - 2017-12-05 18:08 - 000179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2018-02-17 10:22 - 2017-12-05 18:08 - 000145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2018-02-17 10:22 - 2017-12-05 18:08 - 000135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2018-02-17 10:22 - 2017-12-05 18:08 - 000106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2018-02-17 10:22 - 2017-12-05 17:04 - 000404992 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe
2018-02-17 10:21 - 2018-01-22 00:50 - 000136424 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2018-02-17 10:21 - 2018-01-22 00:40 - 000654336 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2018-02-17 10:21 - 2018-01-19 15:05 - 001994752 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2018-02-17 10:21 - 2018-01-19 15:05 - 001569280 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2018-02-17 10:21 - 2018-01-19 15:05 - 000749568 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2018-02-17 10:21 - 2018-01-19 15:05 - 000604672 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2018-02-17 10:21 - 2018-01-19 15:05 - 000450048 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2018-02-17 10:21 - 2018-01-19 15:05 - 000378880 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2018-02-17 10:21 - 2018-01-19 15:05 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2018-02-17 10:21 - 2018-01-19 15:05 - 000236544 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2018-02-14 07:11 - 2018-02-14 07:13 - 000000000 ____D C:\Users\katka\AppData\Local\Mozilla Firefox
2018-02-14 07:11 - 2018-02-14 07:11 - 000001208 _____ C:\Users\katka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-02-14 07:10 - 2018-02-14 07:10 - 000313544 _____ (Mozilla) C:\Users\katka\Downloads\Firefox Installer (1).exe
2018-02-14 07:07 - 2018-02-14 07:07 - 000313544 _____ (Mozilla) C:\Users\katka\Downloads\Firefox Installer.exe
2018-02-10 23:20 - 2018-02-11 00:45 - 1570310828 _____ C:\Users\katka\Downloads\Bohové Egypta-(2016)cz.dabing.mkv

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-03-02 16:51 - 2011-02-19 06:36 - 007710834 _____ C:\Windows\system32\perfh005.dat
2018-03-02 16:51 - 2011-02-19 06:36 - 002608558 _____ C:\Windows\system32\perfc005.dat
2018-03-02 16:51 - 2009-07-14 06:13 - 000006504 _____ C:\Windows\system32\PerfStringBackup.INI
2018-03-02 16:49 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\NDF
2018-03-02 16:45 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-03-02 09:08 - 2009-07-14 05:45 - 000018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-03-02 09:08 - 2009-07-14 05:45 - 000018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-03-01 15:05 - 2014-05-23 21:09 - 000000000 ____D C:\Program Files (x86)\IObit
2018-03-01 15:03 - 2014-05-23 21:18 - 000000000 ____D C:\ProgramData\ProductData
2018-02-28 09:20 - 2014-05-23 21:09 - 000000000 ____D C:\ProgramData\IObit
2018-02-27 15:54 - 2012-03-18 20:13 - 000000000 ____D C:\Program Files (x86)\Google
2018-02-27 15:03 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2018-02-27 13:27 - 2014-05-23 21:09 - 000000000 ____D C:\Users\katka\AppData\Roaming\IObit
2018-02-27 13:22 - 2014-05-23 21:18 - 000000000 ____D C:\Users\katka\AppData\LocalLow\IObit
2018-02-27 01:32 - 2015-10-17 16:57 - 000000000 ____D C:\Users\Mcx1-KATKA-PC
2018-02-27 01:32 - 2012-02-24 12:42 - 000000000 ____D C:\Users\katka
2018-02-27 01:32 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\registration
2018-02-26 16:34 - 2017-03-16 07:37 - 000003910 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2018-02-26 16:34 - 2016-07-09 04:13 - 000001924 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2018-02-25 12:06 - 2016-06-02 14:54 - 000000000 ____D C:\Windows\rescache
2018-02-25 11:20 - 2017-11-20 13:20 - 000192944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2018-02-25 11:20 - 2017-09-20 08:16 - 000190440 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 001026696 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 000459952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 000379448 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 000205464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 000146648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 000110328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 000084368 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 000046968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2018-02-25 11:19 - 2009-07-14 05:45 - 011648520 _____ C:\Windows\system32\FNTCACHE.DAT
2018-02-25 11:18 - 2014-12-13 03:15 - 000000000 ____D C:\Windows\system32\appraiser
2018-02-17 10:39 - 2017-10-17 08:39 - 130067560 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2018-02-17 10:39 - 2013-09-09 08:15 - 000000000 ____D C:\Windows\system32\MRT
2018-02-17 10:39 - 2013-09-09 08:14 - 130067560 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-02-17 10:33 - 2016-11-22 21:11 - 000000000 ____D C:\Users\katka\AppData\LocalLow\Mozilla
2018-02-17 10:33 - 2012-02-25 11:46 - 000000000 ____D C:\Users\katka\Documents\Soubory aplikace Outlook
2018-02-17 10:09 - 2012-02-25 11:46 - 000000000 ____D C:\Users\katka\AppData\Local\Deployment
2018-02-14 07:18 - 2017-06-06 08:34 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-02-14 07:08 - 2017-11-17 07:55 - 000000946 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-02-14 07:08 - 2017-11-17 07:55 - 000000934 _____ C:\Users\Public\Desktop\Firefox.lnk
2018-02-13 18:12 - 2014-11-20 09:26 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-02-08 20:43 - 2014-05-23 21:09 - 000002886 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (katka)
2018-02-06 14:05 - 2012-09-25 21:35 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-02-06 14:05 - 2012-09-25 21:35 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-02-06 14:05 - 2012-09-25 21:35 - 000004396 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-02-06 14:05 - 2012-09-25 21:35 - 000000000 ____D C:\Windows\system32\Macromed
2018-02-06 14:05 - 2011-10-19 23:59 - 000000000 ____D C:\Windows\SysWOW64\Macromed

==================== Files in the root of some directories =======

2012-12-16 21:59 - 2012-12-17 16:47 - 004096000 _____ () C:\Program Files (x86)\GUT102D.tmp
2012-12-10 14:23 - 2012-12-10 14:25 - 000000132 _____ () C:\Users\katka\AppData\Roaming\Adobe Formát PNG CS5 – předvolby
2013-04-25 13:11 - 2013-04-25 13:11 - 000001480 _____ () C:\Users\katka\AppData\Local\Adobe Uložit pro web 12.0 Prefs
2012-02-26 09:06 - 2014-01-29 16:16 - 000042496 _____ () C:\Users\katka\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-02-27 15:34

==================== End of FRST.txt ============================

Conder
VIP
VIP
Příspěvky: 4399
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: win 7 , nejde přihlásit, pouze nouzový režim

#12 Příspěvek od Conder »

:arrow: Stiahni AdwCleaner: https://toolslib.net/downloads/finish/1/
  • Uloz na plochu a ukonci vsetky programy
  • Spusti AdwCleaner ako spravca
  • Odsuhlas licencne podmienky
  • Klikni na Scan (Skenovanie) a pockaj na dokoncenie
  • Klikni na Clean (Cistenie) a potvrd kliknutim na OK
  • AdwCleaner si vyziada restart PC, potvrd kliknutim na Restart Now (Restartovat teraz)
  • Po dokonceni a restartovani PC vyskoci log, jeho obsah sem skopiruj
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

Dennis
Návštěvník
Návštěvník
Příspěvky: 153
Registrován: 18 kvě 2009 06:38
Bydliště: Trutnov

Re: win 7 , nejde přihlásit, pouze nouzový režim

#13 Příspěvek od Dennis »

# AdwCleaner 7.0.8.0 - Logfile created on Fri Mar 02 16:33:15 2018
# Updated on 2018/08/02 by Malwarebytes
# Running on Windows 7 Home Premium (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

Deleted: C:\ProgramData\IObit\Advanced SystemCare
Deleted: C:\ProgramData\Application Data\IObit\Advanced SystemCare
Deleted: C:\Windows\System32\config\systemprofile\AppData\Roaming\IObit\Advanced SystemCare
Deleted: C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\IObit\Advanced SystemCare
Deleted: C:\Users\All Users\IObit\Advanced SystemCare
Deleted: C:\ProgramData\IObit\Advanced SystemCare
Deleted: C:\ProgramData\Application Data\IObit\Advanced SystemCare
Deleted: C:\Windows\System32\config\systemprofile\AppData\Roaming\IObit\Advanced SystemCare
Deleted: C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\IObit\Advanced SystemCare
Deleted: C:\Users\All Users\IObit\Advanced SystemCare


***** [ Files ] *****

No malicious files deleted.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks deleted.

***** [ Registry ] *****

Deleted: [Value] - HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Microsoft\Windows\CurrentVersion\Run|Advanced SystemCare 9
Deleted: [Value] - HKCU\Software\Microsoft\Windows\CurrentVersion\Run|Advanced SystemCare 9
Deleted: [Key] - HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\distromatic
Deleted: [Key] - HKCU\Software\distromatic
Deleted: [Key] - HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Myfree Codec
Deleted: [Key] - HKCU\Software\Myfree Codec
Deleted: [Key] - HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\SiteRanker
Deleted: [Key] - HKCU\Software\SiteRanker
Deleted: [Key] - HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{042DA63B-0933-403D-9395-B49307691690}
Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B6}
Deleted: [Key] - HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BD6ECB00-7C4A-4F97-B425-44117F2A7AAE}
Deleted: [Value] - HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Microsoft\Windows\CurrentVersion\Run|agupdate
Deleted: [Value] - HKCU\Software\Microsoft\Windows\CurrentVersion\Run|agupdate
Deleted: [Key] - HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Rebate Informer
Deleted: [Key] - HKCU\Software\Rebate Informer
Deleted: [Key] - HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\AppGraffiti
Deleted: [Key] - HKCU\Software\AppGraffiti


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

Plugin deleted: IObit Surfing Protection & Ads Removal -


*************************

::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0



*************************

C:/AdwCleaner/AdwCleaner[C0].txt - [8429 B] - [2018/2/27 12:22:55]
C:/AdwCleaner/AdwCleaner[C10].txt - [2519 B] - [2018/2/27 15:17:20]
C:/AdwCleaner/AdwCleaner[C1].txt - [3794 B] - [2018/2/27 12:27:49]
C:/AdwCleaner/AdwCleaner[C2].txt - [1751 B] - [2018/2/27 12:36:39]
C:/AdwCleaner/AdwCleaner[C3].txt - [1568 B] - [2018/2/27 12:40:47]
C:/AdwCleaner/AdwCleaner[C4].txt - [1704 B] - [2018/2/27 13:2:8]
C:/AdwCleaner/AdwCleaner[C5].txt - [1838 B] - [2018/2/27 13:59:42]
C:/AdwCleaner/AdwCleaner[C6].txt - [1974 B] - [2018/2/27 14:15:48]
C:/AdwCleaner/AdwCleaner[C7].txt - [2429 B] - [2018/2/27 14:49:48]
C:/AdwCleaner/AdwCleaner[C8].txt - [2246 B] - [2018/2/27 14:55:10]
C:/AdwCleaner/AdwCleaner[C9].txt - [2382 B] - [2018/2/27 14:58:36]
C:/AdwCleaner/AdwCleaner[S0].txt - [10026 B] - [2018/2/27 12:22:1]
C:/AdwCleaner/AdwCleaner[S10].txt - [2496 B] - [2018/2/27 15:1:18]
C:/AdwCleaner/AdwCleaner[S11].txt - [2633 B] - [2018/2/28 8:7:11]
C:/AdwCleaner/AdwCleaner[S12].txt - [6611 B] - [2018/3/2 16:32:48]
C:/AdwCleaner/AdwCleaner[S1].txt - [4355 B] - [2018/2/27 12:27:20]
C:/AdwCleaner/AdwCleaner[S2].txt - [1874 B] - [2018/2/27 12:36:13]
C:/AdwCleaner/AdwCleaner[S3].txt - [1545 B] - [2018/2/27 12:40:20]
C:/AdwCleaner/AdwCleaner[S4].txt - [1681 B] - [2018/2/27 12:44:39]
C:/AdwCleaner/AdwCleaner[S5].txt - [1815 B] - [2018/2/27 13:58:42]
C:/AdwCleaner/AdwCleaner[S6].txt - [1951 B] - [2018/2/27 14:14:38]
C:/AdwCleaner/AdwCleaner[S7].txt - [2552 B] - [2018/2/27 14:46:52]
C:/AdwCleaner/AdwCleaner[S8].txt - [2223 B] - [2018/2/27 14:52:39]
C:/AdwCleaner/AdwCleaner[S9].txt - [2359 B] - [2018/2/27 14:58:25]


########## EOF - C:\AdwCleaner\AdwCleaner[C11].txt ##########

Conder
VIP
VIP
Příspěvky: 4399
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: win 7 , nejde přihlásit, pouze nouzový režim

#14 Příspěvek od Conder »

:arrow: Poprosim o nove logy z FRST, vratane logu Addition.txt
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

Dennis
Návštěvník
Návštěvník
Příspěvky: 153
Registrován: 18 kvě 2009 06:38
Bydliště: Trutnov

Re: win 7 , nejde přihlásit, pouze nouzový režim

#15 Příspěvek od Dennis »

logy, addition v příloze
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28.02.2018
Ran by katka (administrator) on KATKA-PC (02-03-2018 18:03:15)
Running from C:\Users\katka\Desktop
Loaded Profiles: katka (Available Profiles: katka & Mcx1-KATKA-PC)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(ASUS) C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnWMI.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
() C:\Program Files\ASUS\ASUS Secure Delete\ADDEL.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS PowerWiz\PowerWiz.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Samsung Electronics) C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTray.exe
() C:\CPP\CppKalkulacky\CppCalcServer.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDGesture.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(Windows (R) Win 7 DDK provider) C:\Program Files\Fresco Logic\Fresco Logic USB3.0 Host Controller\amd64_host\FLxHCIm.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [961184 2011-08-02] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [798880 2011-08-02] (Atheros Commnucations)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2661672 2012-02-20] (ELAN Microelectronics Corp.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [243496 2018-02-25] (AVAST Software)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3331312 2011-10-19] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe [737104 2011-07-29] (ecareme)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [322208 2012-06-25] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [174752 2012-06-19] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [FLxHCIm64] => C:\Program Files\Fresco Logic\Fresco Logic USB3.0 Host Controller\amd64_host\FLxHCIm.exe [48128 2012-05-21] (Windows (R) Win 7 DDK provider)
HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2321584 2012-04-28] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\...\Run: [KiesAirMessage] => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe [578560 2012-12-18] (Samsung Electronics)
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844296 2012-12-20] (Samsung)
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 17\Program32\ZPSTRAY.EXE [563416 2015-07-12] (ZONER software)
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\...\MountPoints2: {5935007e-17a7-11e6-a52d-e0b9a5d2a15d} - D:\HiSuiteDownLoader.exe
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\...\MountPoints2: {8e893de4-5edc-11e1-a4b0-956562494656} - D:\unlock.exe autoplay=true
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\...\MountPoints2: {ce602799-7480-11e4-8311-e0b9a5d2a15d} - D:\LaunchU3.exe -a
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk [2011-10-20]
ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe (ASUSTeK Computer Inc.)
Startup: C:\Users\katka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CPP - CalcServer.lnk [2014-12-18]
ShortcutTarget: CPP - CalcServer.lnk -> C:\CPP\CppKalkulacky\CppCalcServer.exe ()
GroupPolicy: Restriction <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: 127.0.0.1 asc55.iobit.com
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 194.12.32.193
Tcpip\..\Interfaces\{CAE83C90-F142-47E5-A149-BCE919377C0F}: [DhcpNameServer] 8.8.8.8 194.12.32.193

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com/
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-4224010459-2142079050-1490898530-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-4224010459-2142079050-1490898530-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2018-02-25] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll [2017-09-23] (Oracle Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-08-02] (Atheros Commnucations)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2018-02-25] (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-09-23] (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File

FireFox:
========
FF DefaultProfile: d7qrx9wl.default-1518588796553
FF ProfilePath: C:\Users\katka\AppData\Roaming\Mozilla\Firefox\Profiles\jxa31axu.default [2018-02-17]
FF ProfilePath: C:\Users\katka\AppData\Roaming\Mozilla\Firefox\Profiles\d7qrx9wl.default-1518588796553 [2018-02-17]
FF HKLM-x32\...\Firefox\Extensions: [siteranker@siteranker.com] - C:\Program Files (x86)\SiteRanker\firefox => not found
FF HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\...\Firefox\Extensions: [rebate_informer_wp@rebateblast.com] - C:\Program Files (x86)\RebateInformer\Firefox => not found
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_28_0_0_161.dll [2018-02-06] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_161.dll [2018-02-06] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-09-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-09-23] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-13] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-13] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-05-08] (Adobe Systems Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll [2010-01-23] (Zeon Corporation)
StartMenuInternet: Firefox-48A8B1C46EA8071B - C:\Users\katka\AppData\Local\Mozilla Firefox\firefox.exe

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.google.com
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Profile: C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default [2018-03-02]
CHR Extension: (IObit Surfing Protection & Ads Removal) - C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbmegnmpleoagolcnjnejdacakedpcgd [2017-09-08]
CHR Extension: (YouTube) - C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-31]
CHR Extension: (Vyhledávání Google) - C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-05-31]
CHR Extension: (Avast SafePrice) - C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2018-01-15]
CHR Extension: (AdBlock) - C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-02-14]
CHR Extension: (Avast Online Security) - C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2018-01-15]
CHR Extension: (New tabs to the foreground) - C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikgdcelplfiemfcjaocfkocnapkdfbho [2014-05-24]
CHR Extension: (Glossy Blue) - C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nheaocaplknjkpcnbadlgfpdfjaabiml [2014-05-24]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-09-09]
CHR Extension: (Gmail) - C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-13]
CHR Extension: (Chrome Media Router) - C:\Users\katka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-02-14]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [277120 2012-02-16] (ASUS)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7564512 2018-02-25] (AVAST Software)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-08-02] (Atheros) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [103584 2011-08-02] (Atheros Commnucations) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [300600 2018-02-25] (AVAST Software)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [3046688 2016-07-29] (IObit)
S3 MozillaMaintenance; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [194512 2018-02-13] () [File not signed]
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [1050904 2013-12-11] () [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AiCharger; C:\Windows\SysWOW64\DRIVERS\AiCharger.sys [17152 2012-02-29] (ASUSTek Computer Inc.)
R0 assd; C:\Windows\System32\Drivers\assd.sys [27056 2011-10-28] (ASUS Corporation) [File not signed]
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [192944 2018-02-25] (AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [321512 2018-01-09] (AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [199448 2018-01-09] (AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [343768 2018-01-09] (AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [57696 2018-01-09] (AVAST Software)
R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [190440 2018-02-25] (AVAST Software)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [46968 2018-02-25] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [41832 2017-09-10] (AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [146648 2018-02-25] (AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [110328 2018-02-25] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [84368 2018-02-25] (AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1026696 2018-02-25] (AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [459952 2018-02-25] (AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [205464 2018-02-25] (AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [379448 2018-02-25] (AVAST Software)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 FLxHCIh; C:\Windows\System32\DRIVERS\FLxHCIh.sys [72448 2012-05-28] (Fresco Logic)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-07-24] (REALiX(tm))
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2014-05-23] (Intel Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [34544 2014-05-23] (Synaptics Incorporated)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [221824 2016-04-24] (Samsung Electronics Co., Ltd.)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(http://www.devguru.co.kr))
S4 IMFFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\IMFFilter.sys [X]
S1 nlfpmdnb; \??\C:\Windows\system32\drivers\nlfpmdnb.sys [X]
S3 RegFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-03-02 17:30 - 2018-02-27 13:18 - 008222496 _____ (Malwarebytes) C:\Users\katka\Desktop\adwcleaner_7.0.8.0.exe
2018-03-02 16:51 - 2018-03-02 16:51 - 000041829 _____ C:\Users\katka\Desktop\Addition.txt
2018-03-02 16:50 - 2018-03-02 18:03 - 000021891 _____ C:\Users\katka\Desktop\FRST.txt
2018-03-02 16:50 - 2018-03-02 16:50 - 002403840 _____ (Farbar) C:\Users\katka\Desktop\FRST64.exe
2018-03-02 16:50 - 2018-03-02 16:50 - 000000000 ____D C:\Users\katka\Desktop\FRST-OlderVersion
2018-02-28 11:35 - 2018-03-02 18:03 - 000000000 ____D C:\FRST
2018-02-27 15:56 - 2018-02-27 15:56 - 000000000 ____D C:\Windows\system32\%LOCALAPPDATA%
2018-02-27 15:54 - 2018-02-27 15:54 - 000000000 ____D C:\Users\TEMP\AppData\Roaming\Adobe
2018-02-27 15:06 - 2018-03-02 16:43 - 001095086 _____ C:\Windows\ntbtlog.txt
2018-02-27 15:02 - 2018-02-27 15:02 - 000000824 _____ C:\Users\Public\Desktop\CCleaner.lnk
2018-02-27 15:02 - 2018-02-27 15:02 - 000000300 ____H C:\Windows\Tasks\CCleaner Update.job
2018-02-27 15:02 - 2018-02-27 15:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2018-02-27 15:02 - 2018-02-27 15:02 - 000000000 ____D C:\Program Files\CCleaner
2018-02-27 13:19 - 2018-03-02 17:33 - 000000000 ____D C:\AdwCleaner
2018-02-26 16:34 - 2018-02-25 11:20 - 000380768 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2018-02-25 11:20 - 2018-02-26 16:34 - 000000000 ____D C:\Users\TEMP
2018-02-25 11:20 - 2015-09-15 21:05 - 000000000 ____D C:\Users\TEMP\AppData\Roaming\IObit
2018-02-25 11:20 - 2012-02-27 10:23 - 000000000 ____D C:\Users\TEMP\AppData\Local\Microsoft Help
2018-02-25 11:20 - 2012-02-25 12:18 - 000000000 ____D C:\Users\TEMP\AppData\Roaming\Macromedia
2018-02-25 11:20 - 2009-07-14 08:44 - 000000000 ____D C:\Users\TEMP\AppData\Roaming\Media Center Programs
2018-02-17 10:22 - 2018-02-10 20:52 - 000395928 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2018-02-17 10:22 - 2018-02-10 20:03 - 000347296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-02-17 10:22 - 2018-02-10 09:44 - 025740288 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-02-17 10:22 - 2018-02-10 08:30 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2018-02-17 10:22 - 2018-02-10 08:29 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2018-02-17 10:22 - 2018-02-10 08:19 - 002900480 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-02-17 10:22 - 2018-02-10 08:17 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2018-02-17 10:22 - 2018-02-10 08:17 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2018-02-17 10:22 - 2018-02-10 08:17 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2018-02-17 10:22 - 2018-02-10 08:16 - 000577536 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-02-17 10:22 - 2018-02-10 08:16 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2018-02-17 10:22 - 2018-02-10 08:10 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2018-02-17 10:22 - 2018-02-10 08:10 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2018-02-17 10:22 - 2018-02-10 08:09 - 005782016 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-02-17 10:22 - 2018-02-10 08:07 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2018-02-17 10:22 - 2018-02-10 08:06 - 000816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-02-17 10:22 - 2018-02-10 08:06 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-02-17 10:22 - 2018-02-10 08:06 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2018-02-17 10:22 - 2018-02-10 08:06 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2018-02-17 10:22 - 2018-02-10 08:01 - 000969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2018-02-17 10:22 - 2018-02-10 07:58 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2018-02-17 10:22 - 2018-02-10 07:52 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2018-02-17 10:22 - 2018-02-10 07:52 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-02-17 10:22 - 2018-02-10 07:51 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2018-02-17 10:22 - 2018-02-10 07:49 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2018-02-17 10:22 - 2018-02-10 07:48 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2018-02-17 10:22 - 2018-02-10 07:46 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2018-02-17 10:22 - 2018-02-10 07:45 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2018-02-17 10:22 - 2018-02-10 07:36 - 015283712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-02-17 10:22 - 2018-02-10 07:36 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2018-02-17 10:22 - 2018-02-10 07:34 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-02-17 10:22 - 2018-02-10 07:34 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2018-02-17 10:22 - 2018-02-10 07:33 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2018-02-17 10:22 - 2018-02-10 07:32 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-02-17 10:22 - 2018-02-10 07:27 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-02-17 10:22 - 2018-02-10 07:20 - 020274176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-02-17 10:22 - 2018-02-10 07:14 - 001546240 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-02-17 10:22 - 2018-02-10 07:08 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2018-02-17 10:22 - 2018-02-10 07:02 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-02-17 10:22 - 2018-02-10 06:57 - 000499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-02-17 10:22 - 2018-02-10 06:57 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2018-02-17 10:22 - 2018-02-10 06:57 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2018-02-17 10:22 - 2018-02-10 06:57 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2018-02-17 10:22 - 2018-02-10 06:56 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2018-02-17 10:22 - 2018-02-10 06:54 - 002294272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2018-02-17 10:22 - 2018-02-10 06:52 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2018-02-17 10:22 - 2018-02-10 06:51 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2018-02-17 10:22 - 2018-02-10 06:50 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2018-02-17 10:22 - 2018-02-10 06:49 - 000662528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-02-17 10:22 - 2018-02-10 06:49 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2018-02-17 10:22 - 2018-02-10 06:49 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2018-02-17 10:22 - 2018-02-10 06:42 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2018-02-17 10:22 - 2018-02-10 06:39 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2018-02-17 10:22 - 2018-02-10 06:38 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2018-02-17 10:22 - 2018-02-10 06:38 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2018-02-17 10:22 - 2018-02-10 06:36 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2018-02-17 10:22 - 2018-02-10 06:35 - 004498944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-02-17 10:22 - 2018-02-10 06:35 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2018-02-17 10:22 - 2018-02-10 06:35 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2018-02-17 10:22 - 2018-02-10 06:34 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2018-02-17 10:22 - 2018-02-10 06:33 - 013680640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-02-17 10:22 - 2018-02-10 06:29 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2018-02-17 10:22 - 2018-02-10 06:27 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2018-02-17 10:22 - 2018-02-10 06:27 - 000694784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-02-17 10:22 - 2018-02-10 06:26 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2018-02-17 10:22 - 2018-02-10 06:14 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-02-17 10:22 - 2018-02-10 06:10 - 001314304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-02-17 10:22 - 2018-02-10 06:08 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-02-17 10:22 - 2018-01-12 17:46 - 000631680 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-02-17 10:22 - 2018-01-12 17:44 - 005581544 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-02-17 10:22 - 2018-01-12 17:44 - 001894120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2018-02-17 10:22 - 2018-01-12 17:44 - 000708328 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-02-17 10:22 - 2018-01-12 17:44 - 000377064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2018-02-17 10:22 - 2018-01-12 17:44 - 000371432 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2018-02-17 10:22 - 2018-01-12 17:44 - 000287976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2018-02-17 10:22 - 2018-01-12 17:44 - 000262376 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2018-02-17 10:22 - 2018-01-12 17:44 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2018-02-17 10:22 - 2018-01-12 17:44 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2018-02-17 10:22 - 2018-01-12 17:40 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000484864 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:33 - 001665384 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-02-17 10:22 - 2018-01-12 17:29 - 004014312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2018-02-17 10:22 - 2018-01-12 17:29 - 003959016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2018-02-17 10:22 - 2018-01-12 17:27 - 004834816 _____ (Microsoft Corporation) C:\Windows\system32\xpsrchvw.exe
2018-02-17 10:22 - 2018-01-12 17:27 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:26 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 17:16 - 003405824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xpsrchvw.exe
2018-02-17 10:22 - 2018-01-12 17:16 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2018-02-17 10:22 - 2018-01-12 17:16 - 000030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2018-02-17 10:22 - 2018-01-12 17:15 - 000032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2018-02-17 10:22 - 2018-01-12 17:11 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2018-02-17 10:22 - 2018-01-12 17:11 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2018-02-17 10:22 - 2018-01-12 17:11 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2018-02-17 10:22 - 2018-01-12 17:10 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2018-02-17 10:22 - 2018-01-12 17:07 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2018-02-17 10:22 - 2018-01-12 17:06 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2018-02-17 10:22 - 2018-01-12 17:03 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-02-17 10:22 - 2018-01-12 17:02 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2018-02-17 10:22 - 2018-01-12 17:02 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2018-02-17 10:22 - 2018-01-12 17:02 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2018-02-17 10:22 - 2018-01-12 17:01 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2018-02-17 10:22 - 2018-01-12 17:01 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2018-02-17 10:22 - 2018-01-12 16:57 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2018-02-17 10:22 - 2018-01-12 16:57 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2018-02-17 10:22 - 2018-01-12 16:57 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2018-02-17 10:22 - 2018-01-12 16:57 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2018-02-17 10:22 - 2018-01-12 16:57 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2018-02-17 10:22 - 2018-01-12 16:56 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 16:56 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 16:56 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2018-02-17 10:22 - 2018-01-12 16:56 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2018-02-17 10:22 - 2018-01-11 17:41 - 001133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2018-02-17 10:22 - 2018-01-11 17:22 - 000805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2018-02-17 10:22 - 2018-01-11 17:09 - 003224064 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-02-17 10:22 - 2018-01-05 17:31 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2018-02-17 10:22 - 2018-01-05 17:31 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2018-02-17 10:22 - 2018-01-05 17:30 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2018-02-17 10:22 - 2018-01-05 17:30 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2018-02-17 10:22 - 2018-01-05 17:30 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2018-02-17 10:22 - 2018-01-05 17:25 - 000383720 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2018-02-17 10:22 - 2018-01-05 17:14 - 000309480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2018-02-17 10:22 - 2018-01-05 17:11 - 000111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2018-02-17 10:22 - 2018-01-05 17:11 - 000071168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2018-02-17 10:22 - 2018-01-05 17:11 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2018-02-17 10:22 - 2018-01-05 17:11 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2018-02-17 10:22 - 2018-01-05 16:50 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2018-02-17 10:22 - 2017-12-05 18:36 - 001484288 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2018-02-17 10:22 - 2017-12-05 18:36 - 000229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2018-02-17 10:22 - 2017-12-05 18:36 - 000218112 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2018-02-17 10:22 - 2017-12-05 18:36 - 000190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2018-02-17 10:22 - 2017-12-05 18:36 - 000141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2018-02-17 10:22 - 2017-12-05 18:36 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
2018-02-17 10:22 - 2017-12-05 18:08 - 001176576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2018-02-17 10:22 - 2017-12-05 18:08 - 000179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2018-02-17 10:22 - 2017-12-05 18:08 - 000145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2018-02-17 10:22 - 2017-12-05 18:08 - 000135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2018-02-17 10:22 - 2017-12-05 18:08 - 000106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2018-02-17 10:22 - 2017-12-05 17:04 - 000404992 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe
2018-02-17 10:21 - 2018-01-22 00:50 - 000136424 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2018-02-17 10:21 - 2018-01-22 00:40 - 000654336 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2018-02-17 10:21 - 2018-01-19 15:05 - 001994752 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2018-02-17 10:21 - 2018-01-19 15:05 - 001569280 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2018-02-17 10:21 - 2018-01-19 15:05 - 000749568 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2018-02-17 10:21 - 2018-01-19 15:05 - 000604672 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2018-02-17 10:21 - 2018-01-19 15:05 - 000450048 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2018-02-17 10:21 - 2018-01-19 15:05 - 000378880 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2018-02-17 10:21 - 2018-01-19 15:05 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2018-02-17 10:21 - 2018-01-19 15:05 - 000236544 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2018-02-14 07:11 - 2018-02-14 07:13 - 000000000 ____D C:\Users\katka\AppData\Local\Mozilla Firefox
2018-02-14 07:11 - 2018-02-14 07:11 - 000001208 _____ C:\Users\katka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-02-14 07:10 - 2018-02-14 07:10 - 000313544 _____ (Mozilla) C:\Users\katka\Downloads\Firefox Installer (1).exe
2018-02-14 07:07 - 2018-02-14 07:07 - 000313544 _____ (Mozilla) C:\Users\katka\Downloads\Firefox Installer.exe
2018-02-10 23:20 - 2018-02-11 00:45 - 1570310828 _____ C:\Users\katka\Downloads\Bohové Egypta-(2016)cz.dabing.mkv

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-03-02 17:41 - 2009-07-14 05:45 - 000018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-03-02 17:41 - 2009-07-14 05:45 - 000018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-03-02 17:38 - 2011-02-19 06:36 - 007723624 _____ C:\Windows\system32\perfh005.dat
2018-03-02 17:38 - 2011-02-19 06:36 - 002613134 _____ C:\Windows\system32\perfc005.dat
2018-03-02 17:38 - 2009-07-14 06:13 - 000006504 _____ C:\Windows\system32\PerfStringBackup.INI
2018-03-02 17:33 - 2014-05-23 21:09 - 000000000 ____D C:\ProgramData\IObit
2018-03-02 17:33 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-03-02 16:49 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\NDF
2018-03-01 15:05 - 2014-05-23 21:09 - 000000000 ____D C:\Program Files (x86)\IObit
2018-03-01 15:03 - 2014-05-23 21:18 - 000000000 ____D C:\ProgramData\ProductData
2018-02-27 15:54 - 2012-03-18 20:13 - 000000000 ____D C:\Program Files (x86)\Google
2018-02-27 15:03 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2018-02-27 13:27 - 2014-05-23 21:09 - 000000000 ____D C:\Users\katka\AppData\Roaming\IObit
2018-02-27 13:22 - 2014-05-23 21:18 - 000000000 ____D C:\Users\katka\AppData\LocalLow\IObit
2018-02-27 01:32 - 2015-10-17 16:57 - 000000000 ____D C:\Users\Mcx1-KATKA-PC
2018-02-27 01:32 - 2012-02-24 12:42 - 000000000 ____D C:\Users\katka
2018-02-27 01:32 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\registration
2018-02-26 16:34 - 2017-03-16 07:37 - 000003910 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2018-02-26 16:34 - 2016-07-09 04:13 - 000001924 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2018-02-25 12:06 - 2016-06-02 14:54 - 000000000 ____D C:\Windows\rescache
2018-02-25 11:20 - 2017-11-20 13:20 - 000192944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2018-02-25 11:20 - 2017-09-20 08:16 - 000190440 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 001026696 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 000459952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 000379448 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 000205464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 000146648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 000110328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 000084368 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2018-02-25 11:20 - 2016-06-10 07:49 - 000046968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2018-02-25 11:19 - 2009-07-14 05:45 - 011648520 _____ C:\Windows\system32\FNTCACHE.DAT
2018-02-25 11:18 - 2014-12-13 03:15 - 000000000 ____D C:\Windows\system32\appraiser
2018-02-17 10:39 - 2017-10-17 08:39 - 130067560 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2018-02-17 10:39 - 2013-09-09 08:15 - 000000000 ____D C:\Windows\system32\MRT
2018-02-17 10:39 - 2013-09-09 08:14 - 130067560 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-02-17 10:33 - 2016-11-22 21:11 - 000000000 ____D C:\Users\katka\AppData\LocalLow\Mozilla
2018-02-17 10:33 - 2012-02-25 11:46 - 000000000 ____D C:\Users\katka\Documents\Soubory aplikace Outlook
2018-02-17 10:09 - 2012-02-25 11:46 - 000000000 ____D C:\Users\katka\AppData\Local\Deployment
2018-02-14 07:18 - 2017-06-06 08:34 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-02-14 07:08 - 2017-11-17 07:55 - 000000946 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-02-14 07:08 - 2017-11-17 07:55 - 000000934 _____ C:\Users\Public\Desktop\Firefox.lnk
2018-02-13 18:12 - 2014-11-20 09:26 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-02-08 20:43 - 2014-05-23 21:09 - 000002886 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (katka)
2018-02-06 14:05 - 2012-09-25 21:35 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-02-06 14:05 - 2012-09-25 21:35 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-02-06 14:05 - 2012-09-25 21:35 - 000004396 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-02-06 14:05 - 2012-09-25 21:35 - 000000000 ____D C:\Windows\system32\Macromed
2018-02-06 14:05 - 2011-10-19 23:59 - 000000000 ____D C:\Windows\SysWOW64\Macromed

==================== Files in the root of some directories =======

2012-12-16 21:59 - 2012-12-17 16:47 - 004096000 _____ () C:\Program Files (x86)\GUT102D.tmp
2012-12-10 14:23 - 2012-12-10 14:25 - 000000132 _____ () C:\Users\katka\AppData\Roaming\Adobe Formát PNG CS5 – předvolby
2013-04-25 13:11 - 2013-04-25 13:11 - 000001480 _____ () C:\Users\katka\AppData\Local\Adobe Uložit pro web 12.0 Prefs
2012-02-26 09:06 - 2014-01-29 16:16 - 000042496 _____ () C:\Users\katka\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-02-27 15:34

==================== End of FRST.txt ============================
Přílohy
Additions.zip
(11.88 KiB) Staženo 51 x

Zamčeno