Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o jednu preventivku, Děkuji

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
Uživatelský avatar
kodl74
Návštěvník
Návštěvník
Příspěvky: 178
Registrován: 10 kvě 2007 17:14

Prosím o jednu preventivku, Děkuji

#1 Příspěvek od kodl74 »

Logfile of random's system information tool 1.10 (written by random/random)
Run by kaPL74 at 2020-05-30 22:26:07
Microsoft Windows 10 Pro
System drive C: has 726 GB (76%) free of 953 GB
Total RAM: 32728 MB (86% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:26:30, on 30.05.2020
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.18362.0001)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey.exe
C:\Windows\SysWOW64\muachost.exe
C:\Program Files (x86)\MSI\Gaming APP\MSI_LED.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Program Files (x86)\Winstep\Nexus.exe
C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe
C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe
C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe
C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe
C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe
C:\Program Files (x86)\Steam\steam.exe
C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe
C:\Program Files\trend micro\kaPL74.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O3 - Toolbar: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll
O4 - HKLM\..\Run: [Wondershare Helper Compact.exe] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
O4 - HKLM\..\Run: [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
O4 - HKCU\..\Run: [Nexus] C:\Program Files (x86)\Winstep\Nexus.exe autostart
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Skype for Desktop] C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe
O4 - HKCU\..\Run: [CCXProcess] "C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe"
O4 - HKCU\..\Run: [EPLTarget\P0000000000000000] C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIUNE.EXE /EPT "EPLTarget\P0000000000000000" /M "L3150 Series"
O4 - HKCU\..\Run: [EPLTarget\P0000000000000001] C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIUNE.EXE /EPT "EPLTarget\P0000000000000001" /M "L3150 Series"
O4 - HKCU\..\RunOnce: [Application Restart #1] C:\Windows\SysWOW64\muachost.exe /RestartByRestartManager:012F26C8-DE85-4ea3-B8F4-4B83B7846881 /RestartByRestartManager:6D393DF7-B985-4f60-8F03-2A67B37DED76 /RestartByRestartManager:A7056F7D-6C51-4c55-947F-4D460A39F919 /RestartByRestartManager:613E69D8-146C-49da-B0D2-4DAD868882E6
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Startup: Poslat do aplikace OneNote.lnk = C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100 (CredentialEnrollmentManagerUserSvc) - Unknown owner - C:\Windows\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: CredentialEnrollmentManagerUserSvc_3e386 - Unknown owner - C:\Windows\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Security\ekrn.exe
O23 - Service: ESET Firewall Helper (ekrnEpfw) - ESET - C:\Program Files\ESET\ESET Security\ekrn.exe
O23 - Service: Epson Scanner Service (EpsonScanSvc) - Unknown owner - C:\Windows\system32\EscSvc64.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GamingApp_Service - Micro-Star Int'l Co., Ltd. - C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe
O23 - Service: MSI Gaming Hotkey Service (GamingHotkey_Service) - Micro-Star INT'L CO., LTD. - C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MSI_ActiveX_Service - Micro-Star INT'L CO., LTD. - C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d5216eae94436d77\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: @%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101 (perceptionsimulation) - Unknown owner - C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Universal Service (RtkAudioUniversalService) - Unknown owner - C:\Windows\System32\RtkAudUService64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\Windows\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: SetupARService - Unknown owner - C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\Windows\system32\SgrmBroker.exe (file missing)
O23 - Service: @firewallapi.dll,-50323 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\Windows\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\Windows\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: Winstep Xtreme Service - Unknown owner - C:\Program.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12233 bytes

======Listing Processes======









C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch -p -s PlugPlay
C:\Windows\system32\svchost.exe -k DcomLaunch -p
"fontdrvhost.exe"
winlogon.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-6f456bc7-13ce-4550-a8a8-1b34fa40d8e8 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-04418be6-56b1-4f3b-b0b1-5b35f45a23bf -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-47d374dc-d03c-46a1-b96d-a69818bc7be2 -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-22f701e8-de7c-4585-89ce-2f1090899455 -LifetimeId:bb39e43b-398b-4e8e-b312-b987162a37c7 -DeviceGroupId: -HostArg:0
"fontdrvhost.exe"
C:\Windows\system32\svchost.exe -k RPCSS -p
C:\Windows\system32\svchost.exe -k DcomLaunch -p -s LSM
"dwm.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork -p
C:\Windows\system32\svchost.exe -k netsvcs -p -s Schedule
C:\Windows\system32\svchost.exe -k netsvcs -p -s ProfSvc
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s NcbService
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s TimeBrokerSvc
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s EventLog
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s hidserv
C:\Windows\system32\svchost.exe -k netsvcs -p -s UserManager
C:\Windows\system32\svchost.exe -k LocalService -p -s DispBrokerDesktopSvc
C:\Windows\system32\svchost.exe -k LocalService -p -s nsi
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s Dhcp
C:\Windows\system32\svchost.exe -k LocalService -p -s PhoneSvc

C:\Windows\System32\svchost.exe -k NetworkService -p -s NlaSvc
C:\Windows\system32\svchost.exe -k NetworkService -p -s Dnscache
C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d5216eae94436d77\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f C:\ProgramData\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d5216eae94436d77\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
C:\Windows\System32\svchost.exe -k LocalService -p -s netprofm
C:\Windows\system32\svchost.exe -k LocalService -p
C:\Windows\System32\svchost.exe -k netsvcs -p -s Themes
C:\Windows\system32\svchost.exe -k LocalService -p -s EventSystem
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s SysMain
C:\Windows\system32\svchost.exe -k netsvcs -p -s SENS

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s AudioEndpointBuilder
C:\Windows\system32\svchost.exe -k LocalService -p -s FontCache
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s WinHttpAutoProxySvc
"C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d5216eae94436d77\Display.NvContainer\NVDisplay.Container.exe" -f %ProgramData%\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d5216eae94436d77\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session -c
C:\Windows\system32\svchost.exe -k netsvcs -p -s Winmgmt
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\Windows\system32\svchost.exe -k appmodel -p -s StateRepository
sihost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p -s ShellHWDetection
C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc

C:\Windows\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup -s WpnUserService
C:\Windows\System32\svchost.exe -k NetworkService -p -s LanmanWorkstation
C:\Windows\system32\svchost.exe -k netsvcs -p -s TokenBroker
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey.exe" --normal
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
C:\Windows\SysWOW64\muachost.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s lmhosts
C:\Windows\System32\svchost.exe -k NetSvcs -p -s iphlpsvc
C:\Windows\system32\svchost.exe -k NetworkService -p -s CryptSvc
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
C:\Windows\System32\svchost.exe -k utcsvc -p
C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork -p -s DPS
C:\Windows\system32\svchost.exe -k netsvcs -p -s IKEEXT
C:\Windows\system32\svchost.exe -k LocalService -p -s SstpSvc
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k netsvcs -p -s LanmanServer
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TrkWks
C:\Windows\system32\svchost.exe -k netsvcs -p -s WpnService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s TabletInputService
C:\Windows\system32\EscSvc64.exe
"C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe"
"C:\Program Files (x86)\Winstep\WsxService"
"C:\Windows\System32\RtkAudUService64.exe"
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll"
"C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe"
"C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe"
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
C:\Windows\System32\svchost.exe -k LocalService -p -s WdiServiceHost
dashost.exe {4b1541a2-ebcc-4535-b07929d6ec7679cc}
"ctfmon.exe"
C:\Windows\System32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p
C:\Windows\system32\svchost.exe -k LocalService -p -s fdPHost
C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork -p -s NcdAutoSetup
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s SSDPSRV
rundll32.exe "c:\program files\nvidia corporation\nvstreamsrv\rxdiag.dll" RxDiagSetRuntimeMessagePump
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s FDResPub
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s StorSvc
C:\Windows\system32\svchost.exe -k LocalService -p -s CDPSvc
"C:\Program Files (x86)\MSI\Gaming APP\MSI_LED.exe" --start
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted -p -s PolicyAgent
C:\Windows\system32\svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
"C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\VideoCardMonitorII.exe"
"C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\EyeRest.exe"
"C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\TriggerModeMonitor.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA\NvContainerUser%d.log" -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\User" -r -l 3 -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll" -c
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20041.91.0_x64__8wekyb3d8bbwe\YourPhone.exe" -ServerName:App.AppX9yct9q388jvt4h7y0gn06smzkxcsnt8m.mca
C:\Windows\sysWOW64\wbem\wmiprvse.exe -Embedding
C:\Windows\system32\SettingSyncHost.exe -Embedding
"C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe" index.js
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\System32\RtkAudUService64.exe" -background
"C:\Program Files\ESET\ESET Security\eguiproxy.exe" /hide
C:\Windows\system32\svchost.exe -k netsvcs -p -s Appinfo
"C:\Program Files\Logitech\LogiOptions\LogiOptions.exe" /noui
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s PcaSvc
"C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.exe"
"C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOverlay.exe"
"C:\Program Files (x86)\Winstep\Nexus.exe" autostart
"C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe"
"C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe" --no-rate-limit --no-upload-gzip --type=crash-handler "--crashes-directory=C:\Users\kaPL74\AppData\Local\Temp\skype-preview Crashes" "--database=C:\Users\kaPL74\AppData\Local\Temp\skype-preview Crashes" "--metrics-dir=C:\Users\kaPL74\AppData\Local\Temp\skype-preview Crashes" --url=appcenter://generic?aid=a7417433-29d9-4bc0-8826-af367733939d&iid=d403ecb0-386e-4205-b827-f904f9d1bb0b&uid=1e2fe564-fc96-4334-6e68-acb71c6264ba --initial-client-data=0x5bc,0x5c0,0x5c4,0x5b8,0x5c8,0x6314150,0x6314160,0x631416c
"C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe" --type=gpu-process --field-trial-handle=2248,13570923778070293381,17022966584053134948,131072 --disable-features=PictureInPicture,SpareRendererForSitePerProcess --gpu-preferences=KAAAAAAAAADgAAAwAAAAAAAAYAAAAAAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --service-request-channel-token=2732608692034401296 --mojo-platform-channel-handle=2228 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe" --type=utility --field-trial-handle=2248,13570923778070293381,17022966584053134948,131072 --disable-features=PictureInPicture,SpareRendererForSitePerProcess --lang=cs --service-sandbox-type=network --service-request-channel-token=7667135088018578707 --mojo-platform-channel-handle=2540 /prefetch:8
"C:\Windows\System32\spool\drivers\x64\3\E_YATIUNE.EXE" /EPT "EPLTarget\P0000000000000000" /M "L3150 Series"
"C:\Windows\System32\spool\drivers\x64\3\E_YATIUNE.EXE" /EPT "EPLTarget\P0000000000000001" /M "L3150 Series"
"C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe" --type=utility --field-trial-handle=2248,13570923778070293381,17022966584053134948,131072 --disable-features=PictureInPicture,SpareRendererForSitePerProcess --lang=cs --service-sandbox-type=audio --service-request-channel-token=3653016482635427237 --mojo-platform-channel-handle=3472 /prefetch:8
C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\svchost.exe -k UnistackSvcGroup
"C:\Program Files\WindowsApps\Microsoft.WindowsStore_12005.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe" -ServerName:App.AppXc75wvwned5vhz4xyxxecvgdjhdkgsdza.mca
C:\Windows\system32\ApplicationFrameHost.exe -Embedding
C:\Windows\System32\svchost.exe -k netsvcs -p

C:\Windows\system32\svchost.exe -k netsvcs -p -s UsoSvc


"C:\Program Files (x86)\Steam\steam.exe" -- "steam://rungameid/227300"
"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" "-lang=cs_CZ" "-cachedir=C:\Users\kaPL74\AppData\Local\Steam\htmlcache" "-steampid=5596" "-buildid=1589513816" "-steamid=0" "-steamuniverse=Public" "-clientui=C:\Program Files (x86)\Steam\clientui" --enable-blink-features=ResizeObserver,Worklet,AudioWorklet --enable-media-stream --enable-smooth-scrolling --enable-direct-write "--log-file=C:\Program Files (x86)\Steam\logs\cef_log.txt"
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=crashpad-handler /prefetch:7 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files (x86)\Steam\dumps" "--metrics-dir=C:\Users\kaPL74\AppData\Local\CEF\User Data" --url=http://crash.steampowered.com/submit --annotation=platform=win64 --annotation=product=cefwebhelper --annotation=version=1589513816 --initial-client-data=0x2dc,0x2e0,0x2ec,0x2e8,0x2f4,0x7ff8cad9bed0,0x7ff8cad9bee0,0x7ff8cad9bef0
"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --field-trial-handle=1516,10837697617106000034,3484580622437956468,131072 --disable-features=CalculateNativeWinOcclusion,MimeHandlerViewInCrossProcessFrame --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --lang=cs-CZ --buildid=1589513816 --steamid=0 --gpu-preferences=KAAAAAAAAADgAAAwAAAAAAAAYAAAAAAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --service-request-channel-token=8473558932734410446 --mojo-platform-channel-handle=1524 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --field-trial-handle=1516,10837697617106000034,3484580622437956468,131072 --disable-features=CalculateNativeWinOcclusion,MimeHandlerViewInCrossProcessFrame --lang=cs --service-sandbox-type=network --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --lang=cs-CZ --buildid=1589513816 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --service-request-channel-token=4641882448927432157 --mojo-platform-channel-handle=2136 /prefetch:8
"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --field-trial-handle=1516,10837697617106000034,3484580622437956468,131072 --disable-features=CalculateNativeWinOcclusion,MimeHandlerViewInCrossProcessFrame --enable-blink-features=ResizeObserver,Worklet,AudioWorklet --lang=cs --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --buildid=1589513816 --steamid=0 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=2356115473523185336 --renderer-client-id=5 --mojo-platform-channel-handle=2652 /prefetch:1
"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --field-trial-handle=1516,10837697617106000034,3484580622437956468,131072 --disable-features=CalculateNativeWinOcclusion,MimeHandlerViewInCrossProcessFrame --enable-blink-features=ResizeObserver,Worklet,AudioWorklet --lang=cs --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --buildid=1589513816 --steamid=0 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=11599082316669238979 --renderer-client-id=6 --mojo-platform-channel-handle=2732 /prefetch:1
"C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --field-trial-handle=1516,10837697617106000034,3484580622437956468,131072 --disable-features=CalculateNativeWinOcclusion,MimeHandlerViewInCrossProcessFrame --enable-blink-features=ResizeObserver,Worklet,AudioWorklet --lang=cs --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --buildid=1589513816 --steamid=0 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=14203610248787659800 --renderer-client-id=7 --mojo-platform-channel-handle=2976 /prefetch:1
C:\Windows\system32\svchost.exe -k LocalService -p -s BthAvctpSvc
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Windows\system32\svchost.exe -k netsvcs -p -s lfsvc
"C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.20022.11011.0_x64__8wekyb3d8bbwe\Video.UI.exe" -ServerName:Microsoft.ZuneVideo.AppX758ya5sqdjd98rx6z7g95nw6jy7bqx9y.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2020.19111.24110.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s DsSvc
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\InputApp_cw5n1h2txyewy\WindowsInternal.ComposableShell.Experiences.TextInput.InputApp.exe" -ServerName:App.AppXagta193n5rpf7mheremt3yyfa1g555vc.mca
C:\Windows\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DisplayEnhancementService
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
C:\Windows\system32\svchost.exe -k appmodel -p -s camsvc
C:\Windows\system32\svchost.exe -k netsvcs -p -s wuauserv
C:\Windows\System32\DataExchangeHost.exe -Embedding
C:\Windows\system32\svchost.exe -k DevicesFlow -s DevicesFlowUserSvc
C:\Windows\system32\svchost.exe -k DevicesFlow -s DevicePickerUserSvc
"C:\Windows\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
"C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe" --type=renderer --autoplay-policy=no-user-gesture-required --disable-background-timer-throttling --ms-disable-indexeddb-transaction-timeout --field-trial-handle=2248,13570923778070293381,17022966584053134948,131072 --disable-features=PictureInPicture,SpareRendererForSitePerProcess --lang=cs --app-user-model-id=Microsoft.Skype.SkypeDesktop --app-path="C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar" --webview-tag --no-sandbox --no-zygote --native-window-open --preload="C:\Program Files (x86)\Microsoft\Skype for Desktop\resources\app.asar\Preload.js" --background-color=#fff --node-integration-in-subframes --enable-spellcheck --electron-shared-settings=eyJjci5jb21wYW55IjoiRWxlY3Ryb24iLCJjci5kdW1wcyI6IiIsImNyLmVuYWJsZWQiOmZhbHNlLCJjci5wcm9kdWN0IjoiRWxlY3Ryb24iLCJjci5zZXNzaW9uIjoiIiwiY3IudXJsIjoiIiwiY3IudmVyc2lvbiI6IiJ9 --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=2077843340614119263 --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3888 /prefetch:1 --skype-process-type=Main --skype-window-id=__MAIN_ROOT_VIEW_ID__
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s WdiSystemHost
C:\Windows\System32\smartscreen.exe -Embedding

"C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe"
C:\Windows\system32\AUDIODG.EXE 0x6ac
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe33_ Global\UsGthrCtrlFltPipeMssGthrPipe33 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 780 784 792 8192 788
"C:\Users\kaPL74\Desktop\RSITx64.exe"
C:\Windows\System32\svchost.exe -k WerSvcGroup

======Scheduled tasks folder======

C:\Windows\tasks\EPSON L3150 Series Update {8EB7930A-DB32-4F75-BBF2-B09321E48960}.job - C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSUNE.EXE /EXE:"{8EB7930A-DB32-4F75-BBF2-B09321E48960}" /F:"Update"
C:\Windows\tasks\EPSON L3150 Series Update {BD2837DA-20B0-40AF-A8FE-8F821B310009}.job - C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSUNE.EXE /EXE:"{BD2837DA-20B0-40AF-A8FE-8F821B310009}" /F:"Update"
C:\Windows\tasks\TrackerAutoUpdate.job - C:\Program Files\Tracker Software\Update\TrackerUpdate.exe -CheckUpdate

=========Mozilla firefox=========

ProfilePath - C:\Users\kaPL74\AppData\Roaming\Mozilla\Firefox\Profiles\bdftw427.default-release

prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=3.0.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2020-02-29 210632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]
Easy Photo Print - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31 471536]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201CF130-E29C-4E5C-A73F-CD197DEFA6AE}]
E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27 238576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2020-02-29 157904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - Easy Photo Print - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31 471536]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27 238576]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Windows\system32\SecurityHealthSystray.exe [2020-02-29 84992]
"RtkAudUService"=C:\Windows\System32\RtkAudUService64.exe [2019-10-30 856288]
"egui"=C:\Program Files\ESET\ESET Security\ecmds.exe [2020-04-03 185648]
"Wondershare Helper Compact.exe"=C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe []
"LogiOptions"=C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [2020-04-27 2109064]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Nexus"=C:\Program Files (x86)\Winstep\Nexus.exe [2019-03-01 17959552]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2020-05-15 3372832]
"Skype for Desktop"=C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [2020-05-12 91667312]
"CCXProcess"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [2019-11-26 144008]
"EPLTarget\P0000000000000000"=C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIUNE.EXE [2017-09-22 416896]
"EPLTarget\P0000000000000001"=C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIUNE.EXE [2017-09-22 416896]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Application Restart #1"=C:\Windows\SysWOW64\muachost.exe [2015-08-18 1692840]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Wondershare Helper Compact.exe"=C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe []
"EEventManager"=C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [2019-05-31 1319208]

C:\Users\kaPL74\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Poslat do aplikace OneNote.lnk - C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CBDHSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CBDHSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinQuic]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"aux"=wdmaud.drv
"midi"=wdmaud.drv
"midimapper"=midimap.dll
"mixer"=wdmaud.drv
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wave"=wdmaud.drv
"wavemapper"=msacm32.drv
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2020-05-30 22:26:17 ----D---- C:\Program Files\trend micro
2020-05-30 22:26:07 ----D---- C:\rsit
2020-05-30 10:16:00 ----D---- C:\Windows\LastGood.Tmp
2020-05-30 10:12:39 ----A---- C:\Windows\SYSWOW64\vulkaninfo-1-999-0-0-0.exe
2020-05-30 10:12:39 ----A---- C:\Windows\SYSWOW64\vulkaninfo.exe
2020-05-30 10:12:39 ----A---- C:\Windows\SYSWOW64\vulkan-1-999-0-0-0.dll
2020-05-30 10:12:39 ----A---- C:\Windows\SYSWOW64\vulkan-1.dll
2020-05-30 10:12:39 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2020-05-30 10:12:39 ----A---- C:\Windows\SYSWOW64\nvptxJitCompiler.dll
2020-05-30 10:12:39 ----A---- C:\Windows\SYSWOW64\nvofapi.dll
2020-05-30 10:12:39 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2020-05-30 10:12:39 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2020-05-30 10:12:39 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2020-05-30 10:12:39 ----A---- C:\Windows\SYSWOW64\nvfatbinaryLoader.dll
2020-05-30 10:12:39 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2020-05-30 10:12:39 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2020-05-30 10:12:39 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2020-05-30 10:12:39 ----A---- C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe
2020-05-30 10:12:39 ----A---- C:\Windows\system32\vulkaninfo.exe
2020-05-30 10:12:39 ----A---- C:\Windows\system32\vulkan-1-999-0-0-0.dll
2020-05-30 10:12:39 ----A---- C:\Windows\system32\vulkan-1.dll
2020-05-30 10:12:39 ----A---- C:\Windows\system32\OpenCL.dll
2020-05-30 10:12:39 ----A---- C:\Windows\system32\nvptxJitCompiler.dll
2020-05-30 10:12:39 ----A---- C:\Windows\system32\nvofapi64.dll
2020-05-30 10:12:39 ----A---- C:\Windows\system32\nvml.dll
2020-05-30 10:12:39 ----A---- C:\Windows\system32\nvmcumd.dll
2020-05-30 10:12:39 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2020-05-30 10:12:39 ----A---- C:\Windows\system32\NvIFR64.dll
2020-05-30 10:12:39 ----A---- C:\Windows\system32\nvidia-smi.exe
2020-05-30 10:12:39 ----A---- C:\Windows\system32\NvFBC64.dll
2020-05-30 10:12:39 ----A---- C:\Windows\system32\nvfatbinaryLoader.dll
2020-05-30 10:12:39 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2020-05-30 10:12:39 ----A---- C:\Windows\system32\nvdebugdump.exe
2020-05-30 10:12:39 ----A---- C:\Windows\system32\nvcuvid.dll
2020-05-30 10:12:39 ----A---- C:\Windows\system32\nvcuda.dll
2020-05-30 10:12:39 ----A---- C:\Windows\system32\MCU.exe
2020-05-30 09:38:47 ----D---- C:\Program Files\UNP
2020-05-27 18:09:44 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
2020-05-27 18:09:44 ----A---- C:\Windows\system32\drivers\MbamChameleon.sys
2020-05-26 20:23:59 ----D---- C:\Users\kaPL74\AppData\Roaming\uTorrent
2020-05-20 07:50:57 ----D---- C:\Program Files\Logitech
2020-05-20 07:40:57 ----D---- C:\Users\kaPL74\AppData\Roaming\Skype
2020-05-15 15:06:37 ----D---- C:\PerfLogs
2020-05-15 14:31:58 ----A---- C:\Windows\SYSWOW64\Windows.Media.Streaming.dll
2020-05-15 14:31:58 ----A---- C:\Windows\SYSWOW64\Windows.Media.Editing.dll
2020-05-15 14:31:58 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Picker.dll
2020-05-15 14:31:58 ----A---- C:\Windows\SYSWOW64\MixedRealityRuntime.dll
2020-05-15 14:31:58 ----A---- C:\Windows\SYSWOW64\HoloShellRuntime.dll
2020-05-15 14:31:58 ----A---- C:\Windows\SYSWOW64\ConsoleLogon.dll
2020-05-15 14:31:58 ----A---- C:\Windows\SYSWOW64\AccountsRt.dll
2020-05-15 14:31:58 ----A---- C:\Windows\system32\Windows.UI.BioFeedback.dll
2020-05-15 14:31:58 ----A---- C:\Windows\system32\Windows.Devices.Picker.dll
2020-05-15 14:31:58 ----A---- C:\Windows\system32\WinBioDataModel.dll
2020-05-15 14:31:58 ----A---- C:\Windows\system32\wbengine.exe
2020-05-15 14:31:58 ----A---- C:\Windows\system32\wbadmin.exe
2020-05-15 14:31:58 ----A---- C:\Windows\system32\TSSessionUX.dll
2020-05-15 14:31:58 ----A---- C:\Windows\system32\RDXService.dll
2020-05-15 14:31:58 ----A---- C:\Windows\system32\ConsoleLogon.dll
2020-05-15 14:31:58 ----A---- C:\Windows\system32\AccountsRt.dll
2020-05-15 14:31:57 ----A---- C:\Windows\SYSWOW64\Windows.Media.dll
2020-05-15 14:31:57 ----A---- C:\Windows\SYSWOW64\Windows.Media.Audio.dll
2020-05-15 14:31:57 ----A---- C:\Windows\SYSWOW64\MSPhotography.dll
2020-05-15 14:31:57 ----A---- C:\Windows\SYSWOW64\mfsrcsnk.dll
2020-05-15 14:31:57 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2020-05-15 14:31:57 ----A---- C:\Windows\SYSWOW64\mfds.dll
2020-05-15 14:31:57 ----A---- C:\Windows\system32\MixedRealityRuntime.dll
2020-05-15 14:31:57 ----A---- C:\Windows\system32\MixedReality.Broker.dll
2020-05-15 14:31:57 ----A---- C:\Windows\system32\HoloSI.PCShell.dll
2020-05-15 14:31:57 ----A---- C:\Windows\system32\HologramCompositor.dll
2020-05-15 14:31:56 ----A---- C:\Windows\system32\Windows.Media.Streaming.dll
2020-05-15 14:31:56 ----A---- C:\Windows\system32\Windows.Media.Editing.dll
2020-05-15 14:31:56 ----A---- C:\Windows\system32\Windows.Media.dll
2020-05-15 14:31:56 ----A---- C:\Windows\system32\mfsrcsnk.dll
2020-05-15 14:31:56 ----A---- C:\Windows\system32\mfplat.dll
2020-05-15 14:31:56 ----A---- C:\Windows\system32\Hydrogen.dll
2020-05-15 14:31:56 ----A---- C:\Windows\system32\HoloShellRuntime.dll
2020-05-15 14:31:56 ----A---- C:\Windows\system32\HologramWorld.dll
2020-05-15 14:31:56 ----A---- C:\Windows\system32\DMRServer.dll
2020-05-15 14:31:55 ----A---- C:\Windows\SYSWOW64\AppVEntSubsystems32.dll
2020-05-15 14:31:55 ----A---- C:\Windows\system32\Windows.Media.Audio.dll
2020-05-15 14:31:55 ----A---- C:\Windows\system32\tspubwmi.dll
2020-05-15 14:31:55 ----A---- C:\Windows\system32\RDVGHelper.exe
2020-05-15 14:31:55 ----A---- C:\Windows\system32\rdpsign.exe
2020-05-15 14:31:55 ----A---- C:\Windows\system32\rdpshell.exe
2020-05-15 14:31:55 ----A---- C:\Windows\system32\rdpinit.exe
2020-05-15 14:31:55 ----A---- C:\Windows\system32\MSPhotography.dll
2020-05-15 14:31:55 ----A---- C:\Windows\system32\mfmpeg2srcsnk.dll
2020-05-15 14:31:55 ----A---- C:\Windows\system32\mfds.dll
2020-05-15 14:31:55 ----A---- C:\Windows\system32\mfcore.dll
2020-05-15 14:31:55 ----A---- C:\Windows\system32\assignedaccessmanagersvc.dll
2020-05-15 14:31:55 ----A---- C:\Windows\system32\AssignedAccessManager.dll
2020-05-15 14:31:55 ----A---- C:\Windows\system32\AssignedAccessCsp.dll
2020-05-15 14:31:55 ----A---- C:\Windows\system32\AppVReporting.dll
2020-05-15 14:31:55 ----A---- C:\Windows\system32\appvetwstreamingux.dll
2020-05-15 14:31:55 ----A---- C:\Windows\system32\appvetwclientres.dll
2020-05-15 14:31:55 ----A---- C:\Windows\system32\AppVEntSubsystems64.dll
2020-05-15 14:31:54 ----A---- C:\Windows\SYSWOW64\wkspbrokerAx.dll
2020-05-15 14:31:54 ----A---- C:\Windows\SYSWOW64\Windows.Mirage.Internal.dll
2020-05-15 14:31:54 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2020-05-15 14:31:54 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2020-05-15 14:31:54 ----A---- C:\Windows\SYSWOW64\tapi32.dll
2020-05-15 14:31:54 ----A---- C:\Windows\SYSWOW64\RdpSaProxy.exe
2020-05-15 14:31:54 ----A---- C:\Windows\SYSWOW64\RdpSa.exe
2020-05-15 14:31:54 ----A---- C:\Windows\SYSWOW64\rdpendp.dll
2020-05-15 14:31:54 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2020-05-15 14:31:54 ----A---- C:\Windows\SYSWOW64\pla.dll
2020-05-15 14:31:54 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2020-05-15 14:31:54 ----A---- C:\Windows\SYSWOW64\msimsg.dll
2020-05-15 14:31:54 ----A---- C:\Windows\SYSWOW64\msi.dll
2020-05-15 14:31:54 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2020-05-15 14:31:54 ----A---- C:\Windows\system32\TransportDSA.dll
2020-05-15 14:31:54 ----A---- C:\Windows\system32\SyncAppvPublishingServer.exe
2020-05-15 14:31:54 ----A---- C:\Windows\system32\ScriptRunner.exe
2020-05-15 14:31:54 ----A---- C:\Windows\system32\AppVStreamMap.dll
2020-05-15 14:31:54 ----A---- C:\Windows\system32\AppVStreamingUX.dll
2020-05-15 14:31:54 ----A---- C:\Windows\system32\AppVShNotify.exe
2020-05-15 14:31:54 ----A---- C:\Windows\system32\AppVScripting.dll
2020-05-15 14:31:54 ----A---- C:\Windows\system32\AppVPublishing.dll
2020-05-15 14:31:54 ----A---- C:\Windows\system32\AppVPolicy.dll
2020-05-15 14:31:54 ----A---- C:\Windows\system32\AppVOrchestration.dll
2020-05-15 14:31:54 ----A---- C:\Windows\system32\AppVNice.exe
2020-05-15 14:31:54 ----A---- C:\Windows\system32\AppVManifest.dll
2020-05-15 14:31:54 ----A---- C:\Windows\system32\AppVIntegration.dll
2020-05-15 14:31:54 ----A---- C:\Windows\system32\AppVFileSystemMetadata.dll
2020-05-15 14:31:54 ----A---- C:\Windows\system32\AppVEntVirtualization.dll
2020-05-15 14:31:54 ----A---- C:\Windows\system32\AppVEntSubsystemController.dll
2020-05-15 14:31:54 ----A---- C:\Windows\system32\AppVEntStreamingManager.dll
2020-05-15 14:31:54 ----A---- C:\Windows\system32\AppVDllSurrogate.exe
2020-05-15 14:31:54 ----A---- C:\Windows\system32\AppVCatalog.dll
2020-05-15 14:31:53 ----A---- C:\Windows\SYSWOW64\msjet40.dll
2020-05-15 14:31:53 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2020-05-15 14:31:53 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2020-05-15 14:31:53 ----A---- C:\Windows\SYSWOW64\IndexedDbLegacy.dll
2020-05-15 14:31:53 ----A---- C:\Windows\SYSWOW64\ieproxy.dll
2020-05-15 14:31:53 ----A---- C:\Windows\SYSWOW64\iemigplugin.dll
2020-05-15 14:31:53 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2020-05-15 14:31:53 ----A---- C:\Windows\SYSWOW64\Chakrathunk.dll
2020-05-15 14:31:53 ----A---- C:\Windows\SYSWOW64\Chakradiag.dll
2020-05-15 14:31:53 ----A---- C:\Windows\SYSWOW64\Chakra.dll
2020-05-15 14:31:52 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Scanners.dll
2020-05-15 14:31:52 ----A---- C:\Windows\SYSWOW64\werui.dll
2020-05-15 14:31:52 ----A---- C:\Windows\SYSWOW64\webplatstorageserver.dll
2020-05-15 14:31:52 ----A---- C:\Windows\SYSWOW64\PlayToManager.dll
2020-05-15 14:31:52 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2020-05-15 14:31:52 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2020-05-15 14:31:52 ----A---- C:\Windows\SYSWOW64\jscript.dll
2020-05-15 14:31:52 ----A---- C:\Windows\SYSWOW64\fdWSD.dll
2020-05-15 14:31:52 ----A---- C:\Windows\SYSWOW64\EdgeManager.dll
2020-05-15 14:31:52 ----A---- C:\Windows\SYSWOW64\edgehtml.dll
2020-05-15 14:31:52 ----A---- C:\Windows\SYSWOW64\easwrt.dll
2020-05-15 14:31:52 ----A---- C:\Windows\SYSWOW64\DWWIN.EXE
2020-05-15 14:31:52 ----A---- C:\Windows\SYSWOW64\dialclient.dll
2020-05-15 14:31:51 ----A---- C:\Windows\system32\wkspbrokerAx.dll
2020-05-15 14:31:51 ----A---- C:\Windows\system32\wkspbroker.exe
2020-05-15 14:31:51 ----A---- C:\Windows\system32\Windows.Internal.PredictionUnit.dll
2020-05-15 14:31:51 ----A---- C:\Windows\system32\umrdp.dll
2020-05-15 14:31:51 ----A---- C:\Windows\system32\TSWbPrxy.exe
2020-05-15 14:31:51 ----A---- C:\Windows\system32\tsmf.dll
2020-05-15 14:31:51 ----A---- C:\Windows\system32\tsgqec.dll
2020-05-15 14:31:51 ----A---- C:\Windows\system32\termsrv.dll
2020-05-15 14:31:51 ----A---- C:\Windows\system32\tapi32.dll
2020-05-15 14:31:51 ----A---- C:\Windows\system32\SIHClient.exe
2020-05-15 14:31:51 ----A---- C:\Windows\system32\SettingsHandlers_Clipboard.dll
2020-05-15 14:31:51 ----A---- C:\Windows\system32\rdsdwmdr.dll
2020-05-15 14:31:51 ----A---- C:\Windows\system32\RdpSaProxy.exe
2020-05-15 14:31:51 ----A---- C:\Windows\system32\RdpSa.exe
2020-05-15 14:31:51 ----A---- C:\Windows\system32\RdpRelayTransport.dll
2020-05-15 14:31:51 ----A---- C:\Windows\system32\rdpinput.exe
2020-05-15 14:31:51 ----A---- C:\Windows\system32\rdpendp.dll
2020-05-15 14:31:51 ----A---- C:\Windows\system32\rdpcorets.dll
2020-05-15 14:31:51 ----A---- C:\Windows\system32\rdpcore.dll
2020-05-15 14:31:51 ----A---- C:\Windows\system32\rdpclip.exe
2020-05-15 14:31:51 ----A---- C:\Windows\system32\plasrv.exe
2020-05-15 14:31:51 ----A---- C:\Windows\system32\pla.dll
2020-05-15 14:31:51 ----A---- C:\Windows\system32\mstscax.dll
2020-05-15 14:31:51 ----A---- C:\Windows\system32\msimsg.dll
2020-05-15 14:31:51 ----A---- C:\Windows\system32\msi.dll
2020-05-15 14:31:51 ----A---- C:\Windows\system32\iemigplugin.dll
2020-05-15 14:31:51 ----A---- C:\Windows\system32\fhsettingsprovider.dll
2020-05-15 14:31:51 ----A---- C:\Windows\system32\DiagSvc.dll
2020-05-15 14:31:51 ----A---- C:\Windows\system32\CXHProvisioningServer.dll
2020-05-15 14:31:50 ----A---- C:\Windows\system32\jscript9diag.dll
2020-05-15 14:31:50 ----A---- C:\Windows\system32\jscript9.dll
2020-05-15 14:31:50 ----A---- C:\Windows\system32\IndexedDbLegacy.dll
2020-05-15 14:31:50 ----A---- C:\Windows\system32\ieproxy.dll
2020-05-15 14:31:50 ----A---- C:\Windows\system32\ieframe.dll
2020-05-15 14:31:50 ----A---- C:\Windows\system32\Chakrathunk.dll
2020-05-15 14:31:50 ----A---- C:\Windows\system32\Chakradiag.dll
2020-05-15 14:31:50 ----A---- C:\Windows\system32\Chakra.dll
2020-05-15 14:31:49 ----A---- C:\Windows\system32\webplatstorageserver.dll
2020-05-15 14:31:49 ----A---- C:\Windows\system32\mshtml.dll
2020-05-15 14:31:49 ----A---- C:\Windows\system32\EdgeManager.dll
2020-05-15 14:31:48 ----A---- C:\Windows\system32\MshtmlDac.dll
2020-05-15 14:31:48 ----A---- C:\Windows\system32\jscript.dll
2020-05-15 14:31:48 ----A---- C:\Windows\system32\edgehtml.dll
2020-05-15 14:31:47 ----A---- C:\Windows\system32\Windows.Devices.Scanners.dll
2020-05-15 14:31:47 ----A---- C:\Windows\system32\werui.dll
2020-05-15 14:31:47 ----A---- C:\Windows\system32\wercplsupport.dll
2020-05-15 14:31:47 ----A---- C:\Windows\system32\werconcpl.dll
2020-05-15 14:31:47 ----A---- C:\Windows\system32\tcbloader.dll
2020-05-15 14:31:47 ----A---- C:\Windows\system32\sdengin2.dll
2020-05-15 14:31:47 ----A---- C:\Windows\system32\PlayToManager.dll
2020-05-15 14:31:47 ----A---- C:\Windows\system32\fdWSD.dll
2020-05-15 14:31:47 ----A---- C:\Windows\system32\easwrt.dll
2020-05-15 14:31:47 ----A---- C:\Windows\system32\DWWIN.EXE
2020-05-15 14:31:47 ----A---- C:\Windows\system32\dialclient.dll
2020-05-15 14:31:47 ----A---- C:\Windows\system32\DataExchangeHost.exe
2020-05-15 14:31:47 ----A---- C:\Windows\system32\ConsentUxClient.dll
2020-05-15 14:31:47 ----A---- C:\Windows\system32\CBDHSvc.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\Windows.UI.Immersive.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\Windows.UI.CredDialogController.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\Windows.Internal.Management.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\Windows.Graphics.Printing.Workflow.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\Windows.Graphics.Display.BrightnessOverride.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Sensors.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\wermgr.exe
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\WerFault.exe
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\weretw.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\werdiagcontroller.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\wer.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\shell32.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\SettingSyncCore.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\scrrun.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\rasdlg.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\puiapi.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\printui.exe
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\policymanager.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\npmproxy.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\nlmsprep.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\nlmproxy.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\netprofm.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\msIso.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\msimg32.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\MrmIndexer.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\mf3216.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\lpk.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\GdiPlus.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\gdi32full.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\fontdrvhost.exe
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\findnetprinters.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\efswrt.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\edgeIso.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\dtdump.exe
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\DMAlertListener.ProxyStub.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\ddrawex.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\ddraw.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\DafPrintProvider.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\credssp.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\CredProvDataModel.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\ConfigureExpandedStorage.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\compstui.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2020-05-15 14:31:46 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2020-05-15 14:31:46 ----A---- C:\Windows\system32\tcblaunch.exe
2020-05-15 14:31:46 ----A---- C:\Windows\system32\hvix64.exe
2020-05-15 14:31:46 ----A---- C:\Windows\system32\hvax64.exe
2020-05-15 14:31:46 ----A---- C:\Windows\system32\bcastdvruserservice.dll
2020-05-15 14:31:45 ----A---- C:\Windows\SYSWOW64\WinTypes.dll
2020-05-15 14:31:45 ----A---- C:\Windows\SYSWOW64\wincorlib.dll
2020-05-15 14:31:45 ----A---- C:\Windows\SYSWOW64\ucrtbase.dll
2020-05-15 14:31:45 ----A---- C:\Windows\SYSWOW64\tzres.dll
2020-05-15 14:31:45 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2020-05-15 14:31:45 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2020-05-15 14:31:45 ----A---- C:\Windows\SYSWOW64\msvcp_win.dll
2020-05-15 14:31:45 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2020-05-15 14:31:45 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll
2020-05-15 14:31:45 ----A---- C:\Windows\SYSWOW64\dhcpcsvc.dll
2020-05-15 14:31:45 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2020-05-15 14:31:45 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2020-05-15 14:31:45 ----A---- C:\Windows\SYSWOW64\combase.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\wups.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\wpnapps.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\Windows.System.SystemManagement.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\Windows.System.Profile.RetailInfo.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\Windows.System.Diagnostics.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\Windows.Storage.Compression.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\Windows.Storage.ApplicationData.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\Windows.Services.TargetedContent.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\Windows.Security.Authentication.OnlineId.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\Windows.Media.Speech.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\Windows.Media.MediaControl.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\Windows.Management.Workplace.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\Windows.Internal.Devices.Sensors.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\Windows.Graphics.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\Windows.Globalization.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\Windows.Energy.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\Windows.Devices.WiFi.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\Windows.Devices.SerialCommunication.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Perception.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\Windows.Devices.LowLevel.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Lights.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\Windows.Devices.HumanInterfaceDevice.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Bluetooth.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\Windows.AI.MachineLearning.Preview.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\win32u.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\win32kfull.sys
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\win32k.sys
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\vaultcli.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\usoapi.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\user32.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\twinapi.appcore.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\SHCore.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\RTMediaFrame.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\rdpbase.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\PickerPlatform.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\ErrorDetails.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\DiagnosticInvoker.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\deviceaccess.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\dcomp.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\daxexec.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\CoreMessaging.dll
2020-05-15 14:31:44 ----A---- C:\Windows\SYSWOW64\CapabilityAccessManagerClient.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\windows.storage.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\Windows.StateRepositoryUpgrade.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\Windows.StateRepositoryPS.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\Windows.StateRepositoryCore.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\Windows.StateRepositoryClient.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\Windows.StateRepositoryBroker.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\Windows.StateRepository.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\Windows.Security.Authentication.Identity.Provider.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\Windows.Payments.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\Windows.Networking.Vpn.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\Windows.Networking.NetworkOperators.ESim.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\Windows.Internal.Graphics.Display.DisplayEnhancementManagement.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\Windows.Internal.Graphics.Display.DisplayColorManagement.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\Windows.Devices.PointOfService.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Wallet.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\UserDataAccountApis.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\TileDataRepository.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\TaskApis.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\StateRepository.Core.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\socialapis.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\rdpsharercom.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\propsys.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\PhoneOm.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\PhoneCallHistoryApis.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\PeopleAPIs.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\mscms.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\MrmCoreR.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\mbussdapi.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\mbsmsapi.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\MbaeApiPublic.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\MapGeocoder.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\KerbClientShared.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\JpMapControl.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\InstallServiceTasks.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\InstallService.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\InputHost.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\icm32.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\ChatApis.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\Geolocation.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\EmailApis.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\ContactApis.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\coloradapterclient.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\BingMaps.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\AppXDeploymentClient.dll
2020-05-15 14:31:43 ----A---- C:\Windows\SYSWOW64\AppointmentApis.dll
2020-05-15 14:31:42 ----A---- C:\Windows\SYSWOW64\Windows.System.Launcher.dll
2020-05-15 14:31:42 ----A---- C:\Windows\SYSWOW64\Windows.Perception.Stub.dll
2020-05-15 14:31:42 ----A---- C:\Windows\SYSWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2020-05-15 14:31:42 ----A---- C:\Windows\SYSWOW64\Windows.Media.Ocr.dll
2020-05-15 14:31:42 ----A---- C:\Windows\SYSWOW64\Windows.Media.FaceAnalysis.dll
2020-05-15 14:31:42 ----A---- C:\Windows\SYSWOW64\Windows.Gaming.Preview.dll
2020-05-15 14:31:42 ----A---- C:\Windows\SYSWOW64\Windows.Devices.SmartCards.Phone.dll
2020-05-15 14:31:42 ----A---- C:\Windows\SYSWOW64\Windows.Devices.SmartCards.dll
2020-05-15 14:31:42 ----A---- C:\Windows\SYSWOW64\Windows.Devices.AllJoyn.dll
2020-05-15 14:31:42 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.dll
2020-05-15 14:31:42 ----A---- C:\Windows\SYSWOW64\windows.applicationmodel.datatransfer.dll
2020-05-15 14:31:42 ----A---- C:\Windows\SYSWOW64\Windows.AccountsControl.dll
2020-05-15 14:31:42 ----A---- C:\Windows\SYSWOW64\UserDeviceRegistration.Ngc.dll
2020-05-15 14:31:42 ----A---- C:\Windows\SYSWOW64\UserDeviceRegistration.dll
2020-05-15 14:31:42 ----A---- C:\Windows\SYSWOW64\useractivitybroker.dll
2020-05-15 14:31:42 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2020-05-15 14:31:42 ----A---- C:\Windows\SYSWOW64\dsregtask.dll
2020-05-15 14:31:42 ----A---- C:\Windows\SYSWOW64\dsreg.dll
2020-05-15 14:31:42 ----A---- C:\Windows\SYSWOW64\CloudExperienceHostUser.dll
2020-05-15 14:31:42 ----A---- C:\Windows\SYSWOW64\CloudExperienceHostCommon.dll
2020-05-15 14:31:42 ----A---- C:\Windows\SYSWOW64\CameraCaptureUI.dll
2020-05-15 14:31:42 ----A---- C:\Windows\SYSWOW64\AuthBroker.dll
2020-05-15 14:31:42 ----A---- C:\Windows\SYSWOW64\ActivationManager.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\WwaApi.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\wlidprov.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\Windows.Web.Http.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\Windows.Web.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.Maps.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\Windows.UI.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\Windows.Security.Credentials.UI.UserConsentVerifier.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\Windows.Networking.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\Windows.Networking.Connectivity.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\Windows.Graphics.Printing.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\Windows.Graphics.Printing.3D.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\Windows.Gaming.Input.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Usb.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Radios.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Printers.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Haptics.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\Windows.Data.Pdf.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Core.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\twinui.appcore.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\ShareHost.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\MiracastReceiver.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\MicrosoftAccountWAMExtension.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\LaunchWinApp.exe
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\gamingtcui.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\ffbroker.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\ExecModelClient.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\DataExchange.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\cdprt.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\BcastDVRClient.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\BcastDVRBroker.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\AssignedAccessRuntime.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\AppExtension.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\AppContracts.dll
2020-05-15 14:31:41 ----A---- C:\Windows\SYSWOW64\aadWamExtension.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\winsta.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\Windows.Media.Devices.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\Windows.Gaming.XboxLive.Storage.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\Windows.Devices.WiFiDirect.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Midi.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\VoipRT.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\twinui.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\twinapi.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\TokenBrokerCookies.exe
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\TokenBroker.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\tbauth.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\SystemSettings.DataModel.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\SyncSettings.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\sppcext.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\sppc.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\SpatialAudioLicenseSrv.exe
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\slcext.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\slc.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\remoteaudioendpoint.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\RADCUI.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\PCPKsp.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\msutb.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\LicensingWinRT.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\FlightSettings.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\explorer.exe
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\DeviceReactivation.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\ContentDeliveryManager.Utilities.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\CloudNotifications.exe
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\BTAGService.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2020-05-15 14:31:40 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2020-05-15 14:31:40 ----A---- C:\Windows\system32\Windows.Cortana.OneCore.dll
2020-05-15 14:31:40 ----A---- C:\Windows\system32\Windows.Cortana.Desktop.dll
2020-05-15 14:31:40 ----A---- C:\Windows\system32\vbscript.dll
2020-05-15 14:31:40 ----A---- C:\Windows\system32\TSpkg.dll
2020-05-15 14:31:40 ----A---- C:\Windows\system32\SettingSyncCore.dll
2020-05-15 14:31:40 ----A---- C:\Windows\system32\scrrun.dll
2020-05-15 14:31:40 ----A---- C:\Windows\system32\scesrv.dll
2020-05-15 14:31:40 ----A---- C:\Windows\system32\rasdlg.dll
2020-05-15 14:31:40 ----A---- C:\Windows\system32\puiobj.dll
2020-05-15 14:31:40 ----A---- C:\Windows\system32\puiapi.dll
2020-05-15 14:31:40 ----A---- C:\Windows\system32\printui.exe
2020-05-15 14:31:40 ----A---- C:\Windows\system32\LsaIso.exe
2020-05-15 14:31:40 ----A---- C:\Windows\system32\iumcrypt.dll
2020-05-15 14:31:40 ----A---- C:\Windows\system32\findnetprinters.dll
2020-05-15 14:31:40 ----A---- C:\Windows\system32\efswrt.dll
2020-05-15 14:31:40 ----A---- C:\Windows\system32\DafPrintProvider.dll
2020-05-15 14:31:40 ----A---- C:\Windows\system32\credssp.dll
2020-05-15 14:31:40 ----A---- C:\Windows\system32\ConfigureExpandedStorage.dll
2020-05-15 14:31:40 ----A---- C:\Windows\system32\comdlg32.dll
2020-05-15 14:31:40 ----A---- C:\Windows\system32\comctl32.dll
2020-05-15 14:31:39 ----A---- C:\Windows\system32\Windows.Graphics.Printing.Workflow.dll
2020-05-15 14:31:39 ----A---- C:\Windows\system32\usbmon.dll
2020-05-15 14:31:39 ----A---- C:\Windows\system32\tcpmon.dll
2020-05-15 14:31:39 ----A---- C:\Windows\system32\SystemSettings.Handlers.dll
2020-05-15 14:31:39 ----A---- C:\Windows\system32\SettingsHandlers_nt.dll
2020-05-15 14:31:39 ----A---- C:\Windows\system32\pnidui.dll
2020-05-15 14:31:39 ----A---- C:\Windows\system32\npmproxy.dll
2020-05-15 14:31:39 ----A---- C:\Windows\system32\nlmsprep.dll
2020-05-15 14:31:39 ----A---- C:\Windows\system32\nlmproxy.dll
2020-05-15 14:31:39 ----A---- C:\Windows\system32\netprofmsvc.dll
2020-05-15 14:31:39 ----A---- C:\Windows\system32\netprofm.dll
2020-05-15 14:31:39 ----A---- C:\Windows\system32\localui.dll
2020-05-15 14:31:39 ----A---- C:\Windows\system32\Family.Client.dll
2020-05-15 14:31:39 ----A---- C:\Windows\system32\Family.Authentication.dll
2020-05-15 14:31:39 ----A---- C:\Windows\system32\compstui.dll
2020-05-15 14:31:39 ----A---- C:\Windows\system32\APMon.dll
2020-05-15 14:31:38 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2020-05-15 14:31:38 ----A---- C:\Windows\SYSWOW64\bcryptprimitives.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\WUDFx02000.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\winsrvext.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\Windows.UI.Immersive.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\Windows.UI.CredDialogController.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\Windows.Internal.Management.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\Windows.Graphics.Display.BrightnessOverride.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\Windows.Devices.Sensors.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\WebRuntimeManager.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\usermgr.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\urlmon.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\t2embed.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\policymanager.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\omadmclient.exe
2020-05-15 14:31:38 ----A---- C:\Windows\system32\msIso.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\msimg32.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\MrmIndexer.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\mf3216.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\lpk.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\LogonController.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\iertutil.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\GdiPlus.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\gdi32full.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\fontsub.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\fontdrvhost.exe
2020-05-15 14:31:38 ----A---- C:\Windows\system32\enterprisecsps.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\edgeIso.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\drivers\clfs.sys
2020-05-15 14:31:38 ----A---- C:\Windows\system32\DMAlertListener.ProxyStub.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\ddrawex.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\ddraw.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\dciman32.dll
2020-05-15 14:31:38 ----A---- C:\Windows\system32\CredProvDataModel.dll
2020-05-15 14:31:37 ----A---- C:\Windows\system32\WinTypes.dll
2020-05-15 14:31:37 ----A---- C:\Windows\system32\wincorlib.dll
2020-05-15 14:31:37 ----A---- C:\Windows\system32\wersvc.dll
2020-05-15 14:31:37 ----A---- C:\Windows\system32\wermgr.exe
2020-05-15 14:31:37 ----A---- C:\Windows\system32\WerFault.exe
2020-05-15 14:31:37 ----A---- C:\Windows\system32\weretw.dll
2020-05-15 14:31:37 ----A---- C:\Windows\system32\werdiagcontroller.dll
2020-05-15 14:31:37 ----A---- C:\Windows\system32\wer.dll
2020-05-15 14:31:37 ----A---- C:\Windows\system32\utcutil.dll
2020-05-15 14:31:37 ----A---- C:\Windows\system32\tzres.dll
2020-05-15 14:31:37 ----A---- C:\Windows\system32\runexehelper.exe
2020-05-15 14:31:37 ----A---- C:\Windows\system32\oleaut32.dll
2020-05-15 14:31:37 ----A---- C:\Windows\system32\ntoskrnl.exe
2020-05-15 14:31:37 ----A---- C:\Windows\system32\ntdll.dll
2020-05-15 14:31:37 ----A---- C:\Windows\system32\KernelBase.dll
2020-05-15 14:31:37 ----A---- C:\Windows\system32\Faultrep.dll
2020-05-15 14:31:37 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2020-05-15 14:31:37 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2020-05-15 14:31:37 ----A---- C:\Windows\system32\drivers\tcpip.sys
2020-05-15 14:31:37 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2020-05-15 14:31:37 ----A---- C:\Windows\system32\drivers\cng.sys
2020-05-15 14:31:37 ----A---- C:\Windows\system32\drivers\afd.sys
2020-05-15 14:31:37 ----A---- C:\Windows\system32\diagtrack.dll
2020-05-15 14:31:37 ----A---- C:\Windows\system32\combase.dll
2020-05-15 14:31:37 ----A---- C:\Windows\system32\bcryptprimitives.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\wksprt.exe
2020-05-15 14:31:36 ----A---- C:\Windows\system32\winsta.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\UpgradeResultsUI.exe
2020-05-15 14:31:36 ----A---- C:\Windows\system32\ucrtbase.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\twinui.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\twinapi.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\TSWorkspace.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\TabSvc.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\sppcommdlg.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\sppc.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\slui.exe
2020-05-15 14:31:36 ----A---- C:\Windows\system32\schedsvc.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\RADCUI.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\phoneactivate.exe
2020-05-15 14:31:36 ----A---- C:\Windows\system32\mswsock.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\msvcp_win.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\msutb.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\LicensingWinRT.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\LicensingUI.exe
2020-05-15 14:31:36 ----A---- C:\Windows\system32\LaunchWinApp.exe
2020-05-15 14:31:36 ----A---- C:\Windows\system32\changepk.exe
2020-05-15 14:31:36 ----A---- C:\Windows\system32\dnsrslvr.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\dnsapi.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\dhcpcsvc.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\dhcpcore6.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\dhcpcore.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\DeviceReactivation.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\CoreShell.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\ComposerFramework.dll
2020-05-15 14:31:36 ----A---- C:\Windows\system32\ci.dll
2020-05-15 14:31:35 ----A---- C:\Windows\system32\sppsvc.exe
2020-05-15 14:31:35 ----A---- C:\Windows\system32\sppcext.dll
2020-05-15 14:31:35 ----A---- C:\Windows\system32\slcext.dll
2020-05-15 14:31:35 ----A---- C:\Windows\system32\slc.dll
2020-05-15 14:31:34 ----A---- C:\Windows\system32\Windows.UI.Logon.dll
2020-05-15 14:31:34 ----A---- C:\Windows\system32\Windows.UI.BlockedShutdown.dll
2020-05-15 14:31:34 ----A---- C:\Windows\system32\Windows.Media.MediaControl.dll
2020-05-15 14:31:34 ----A---- C:\Windows\system32\Windows.Internal.CapturePicker.dll
2020-05-15 14:31:34 ----A---- C:\Windows\system32\Windows.Data.Activities.dll
2020-05-15 14:31:34 ----A---- C:\Windows\system32\SwitcherDataModel.dll
2020-05-15 14:31:34 ----A---- C:\Windows\system32\shell32.dll
2020-05-15 14:31:34 ----A---- C:\Windows\system32\SettingsHandlers_Cortana.dll
2020-05-15 14:31:34 ----A---- C:\Windows\system32\PasswordEnrollmentManager.dll
2020-05-15 14:31:34 ----A---- C:\Windows\system32\NotificationController.dll
2020-05-15 14:31:34 ----A---- C:\Windows\system32\MtcModel.dll
2020-05-15 14:31:34 ----A---- C:\Windows\system32\drivers\cldflt.sys
2020-05-15 14:31:34 ----A---- C:\Windows\system32\DevicesFlowBroker.dll
2020-05-15 14:31:34 ----A---- C:\Windows\system32\DevicePairingExperienceMEM.dll
2020-05-15 14:31:34 ----A---- C:\Windows\system32\dcomp.dll
2020-05-15 14:31:34 ----A---- C:\Windows\system32\CredDialogBroker.dll
2020-05-15 14:31:34 ----A---- C:\Windows\system32\CoreMessaging.dll
2020-05-15 14:31:34 ----A---- C:\Windows\system32\CloudExperienceHostBroker.dll
2020-05-15 14:31:34 ----A---- C:\Windows\system32\CloudExperienceHost.dll
2020-05-15 14:31:34 ----A---- C:\Windows\system32\CaptureService.dll
2020-05-15 14:31:33 ----A---- C:\Windows\system32\Windows.System.Profile.RetailInfo.dll
2020-05-15 14:31:33 ----A---- C:\Windows\system32\Windows.Media.Speech.dll
2020-05-15 14:31:33 ----A---- C:\Windows\system32\windows.immersiveshell.serviceprovider.dll
2020-05-15 14:31:33 ----A---- C:\Windows\system32\Windows.Devices.Perception.dll
2020-05-15 14:31:33 ----A---- C:\Windows\system32\win32u.dll
2020-05-15 14:31:33 ----A---- C:\Windows\system32\win32kfull.sys
2020-05-15 14:31:33 ----A---- C:\Windows\system32\win32k.sys
2020-05-15 14:31:33 ----A---- C:\Windows\system32\wcimage.dll
2020-05-15 14:31:33 ----A---- C:\Windows\system32\usosvc.dll
2020-05-15 14:31:33 ----A---- C:\Windows\system32\usocoreworker.exe
2020-05-15 14:31:33 ----A---- C:\Windows\system32\usoapi.dll
2020-05-15 14:31:33 ----A---- C:\Windows\system32\user32.dll
2020-05-15 14:31:33 ----A---- C:\Windows\system32\twinui.pcshell.dll
2020-05-15 14:31:33 ----A---- C:\Windows\system32\SystemSettings.UserAccountsHandlers.dll
2020-05-15 14:31:33 ----A---- C:\Windows\system32\SHCore.dll
2020-05-15 14:31:33 ----A---- C:\Windows\system32\PickerPlatform.dll
2020-05-15 14:31:33 ----A---- C:\Windows\system32\MusUpdateHandlers.dll
2020-05-15 14:31:33 ----A---- C:\Windows\system32\MusNotifyIcon.exe
2020-05-15 14:31:33 ----A---- C:\Windows\system32\MusNotificationUx.exe
2020-05-15 14:31:33 ----A---- C:\Windows\system32\MusNotification.exe
2020-05-15 14:31:33 ----A---- C:\Windows\system32\musdialoghandlers.dll
2020-05-15 14:31:33 ----A---- C:\Windows\system32\Microsoft.Bluetooth.Service.dll
2020-05-15 14:31:33 ----A---- C:\Windows\system32\DesktopSwitcherDataModel.dll
2020-05-15 14:31:33 ----A---- C:\Windows\system32\daxexec.dll
2020-05-15 14:31:33 ----A---- C:\Windows\system32\CloudDomainJoinDataModelServer.dll
2020-05-15 14:31:33 ----A---- C:\Windows\system32\bthserv.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\wpnprv.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\wpnapps.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\windows.storage.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\Windows.StateRepositoryUpgrade.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\Windows.StateRepositoryPS.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\Windows.StateRepositoryCore.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\Windows.StateRepositoryClient.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\Windows.StateRepositoryBroker.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\Windows.StateRepository.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\Windows.Services.TargetedContent.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\Windows.Networking.Vpn.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\Windows.Devices.Lights.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\Windows.ApplicationModel.Wallet.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\WindowManagement.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\WaaSAssessment.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\UserDataService.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\UserDataAccountApis.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\TaskApis.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\StateRepository.Core.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\socialapis.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\rdpbase.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\psmsrv.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\propsys.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\PhoneCallHistoryApis.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\PeopleAPIs.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\MrmCoreR.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\kerberos.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\KerbClientShared.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\InstallServiceTasks.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\ChatApis.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\Geolocation.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\EmailApis.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\ContactApis.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\AppXDeploymentClient.dll
2020-05-15 14:31:32 ----A---- C:\Windows\system32\AppointmentApis.dll
2020-05-15 14:31:31 ----A---- C:\Windows\system32\Windows.Security.Authentication.Identity.Provider.dll
2020-05-15 14:31:31 ----A---- C:\Windows\system32\Windows.Payments.dll
2020-05-15 14:31:31 ----A---- C:\Windows\system32\Windows.Networking.NetworkOperators.ESim.dll
2020-05-15 14:31:31 ----A---- C:\Windows\system32\Windows.Internal.Graphics.Display.DisplayEnhancementManagement.dll
2020-05-15 14:31:31 ----A---- C:\Windows\system32\Windows.Internal.Graphics.Display.DisplayColorManagement.dll
2020-05-15 14:31:31 ----A---- C:\Windows\system32\Windows.Devices.PointOfService.dll
2020-05-15 14:31:31 ----A---- C:\Windows\system32\TileDataRepository.dll
2020-05-15 14:31:31 ----A---- C:\Windows\system32\rdpsharercom.dll
2020-05-15 14:31:31 ----A---- C:\Windows\system32\PhoneOm.dll
2020-05-15 14:31:31 ----A---- C:\Windows\system32\mscms.dll
2020-05-15 14:31:31 ----A---- C:\Windows\system32\mbussdapi.dll
2020-05-15 14:31:31 ----A---- C:\Windows\system32\mbsmsapi.dll
2020-05-15 14:31:31 ----A---- C:\Windows\system32\MbaeApiPublic.dll
2020-05-15 14:31:31 ----A---- C:\Windows\system32\MapGeocoder.dll
2020-05-15 14:31:31 ----A---- C:\Windows\system32\JpMapControl.dll
2020-05-15 14:31:31 ----A---- C:\Windows\system32\ISM.dll
2020-05-15 14:31:31 ----A---- C:\Windows\system32\InstallService.dll
2020-05-15 14:31:31 ----A---- C:\Windows\system32\InputHost.dll
2020-05-15 14:31:31 ----A---- C:\Windows\system32\icm32.dll
2020-05-15 14:31:31 ----A---- C:\Windows\system32\FntCache.dll
2020-05-15 14:31:31 ----A---- C:\Windows\system32\dxgi.dll
2020-05-15 14:31:31 ----A---- C:\Windows\system32\coloradapterclient.dll
2020-05-15 14:31:31 ----A---- C:\Windows\system32\BingMaps.dll
2020-05-15 14:31:30 ----A---- C:\Windows\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2020-05-15 14:31:30 ----A---- C:\Windows\system32\Windows.Gaming.Preview.dll
2020-05-15 14:31:30 ----A---- C:\Windows\system32\Windows.Devices.SmartCards.Phone.dll
2020-05-15 14:31:30 ----A---- C:\Windows\system32\SEMgrSvc.dll
2020-05-15 14:31:30 ----A---- C:\Windows\system32\EdgeContent.dll
2020-05-15 14:31:30 ----A---- C:\Windows\system32\DWrite.dll
2020-05-15 14:31:25 ----A---- C:\Windows\system32\wups2.dll
2020-05-15 14:31:25 ----A---- C:\Windows\system32\wups.dll
2020-05-15 14:31:25 ----A---- C:\Windows\system32\wuaueng.dll
2020-05-15 14:31:25 ----A---- C:\Windows\system32\wuauclt.exe
2020-05-15 14:31:25 ----A---- C:\Windows\system32\wuapi.dll
2020-05-15 14:31:25 ----A---- C:\Windows\system32\Windows.System.Diagnostics.dll
2020-05-15 14:31:25 ----A---- C:\Windows\system32\Windows.Internal.Devices.Sensors.dll
2020-05-15 14:31:25 ----A---- C:\Windows\system32\Windows.Graphics.dll
2020-05-15 14:31:25 ----A---- C:\Windows\system32\win32kbase.sys
2020-05-15 14:31:25 ----A---- C:\Windows\system32\vaultsvc.dll
2020-05-15 14:31:25 ----A---- C:\Windows\system32\vaultcli.dll
2020-05-15 14:31:25 ----A---- C:\Windows\system32\UpdateDeploymentProvider.dll
2020-05-15 14:31:25 ----A---- C:\Windows\system32\msxml6.dll
2020-05-15 14:31:25 ----A---- C:\Windows\system32\drivers\dxgmms2.sys
2020-05-15 14:31:25 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2020-05-15 14:31:25 ----A---- C:\Windows\system32\cdd.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\wlidprov.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.System.SystemManagement.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.System.Launcher.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.Storage.Compression.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.Storage.ApplicationData.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.Perception.Stub.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.Media.Ocr.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.Media.FaceAnalysis.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.Management.Workplace.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.Graphics.Printing.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.Graphics.Printing.3D.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.Globalization.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.Gaming.Input.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.Energy.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.Devices.WiFi.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.Devices.Usb.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.Devices.SmartCards.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.Devices.SerialCommunication.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.Devices.LowLevel.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.Devices.Bluetooth.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.Devices.AllJoyn.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.ApplicationModel.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\windows.applicationmodel.datatransfer.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.AI.MachineLearning.Preview.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\Windows.AccountsControl.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\useractivitybroker.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\twinui.appcore.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\twinapi.appcore.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\TokenBrokerCookies.exe
2020-05-15 14:31:24 ----A---- C:\Windows\system32\TokenBroker.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\tbauth.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\smartscreen.exe
2020-05-15 14:31:24 ----A---- C:\Windows\system32\RTMediaFrame.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\MicrosoftAccountWAMExtension.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\MicrosoftAccountExtension.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\gamingtcui.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\ffbroker.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\ErrorDetails.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2020-05-15 14:31:24 ----A---- C:\Windows\system32\DiagnosticInvoker.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\deviceaccess.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\CloudExperienceHostUser.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\CloudExperienceHostCommon.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\CapabilityAccessManagerClient.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\CapabilityAccessManager.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\CameraCaptureUI.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\AuthBroker.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\AppExtension.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\AppContracts.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\ActivationManager.dll
2020-05-15 14:31:24 ----A---- C:\Windows\system32\aadcloudap.dll
2020-05-15 14:31:23 ----A---- C:\Windows\system32\Windows.Security.Credentials.UI.UserConsentVerifier.dll
2020-05-15 14:31:23 ----A---- C:\Windows\system32\Windows.Devices.Radios.dll
2020-05-15 14:31:23 ----A---- C:\Windows\system32\Windows.Devices.Printers.dll
2020-05-15 14:31:23 ----A---- C:\Windows\system32\Windows.Devices.Haptics.dll
2020-05-15 14:31:23 ----A---- C:\Windows\system32\Windows.Data.Pdf.dll
2020-05-15 14:31:23 ----A---- C:\Windows\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2020-05-15 14:31:23 ----A---- C:\Windows\system32\ShareHost.dll
2020-05-15 14:31:23 ----A---- C:\Windows\system32\MiracastReceiver.dll
2020-05-15 14:31:23 ----A---- C:\Windows\system32\ExecModelClient.dll
2020-05-15 14:31:23 ----A---- C:\Windows\system32\DataExchange.dll
2020-05-15 14:31:23 ----A---- C:\Windows\system32\CustomInstallExec.exe
2020-05-15 14:31:23 ----A---- C:\Windows\system32\cdpsvc.dll
2020-05-15 14:31:23 ----A---- C:\Windows\system32\cdprt.dll
2020-05-15 14:31:23 ----A---- C:\Windows\system32\BcastDVRClient.dll
2020-05-15 14:31:23 ----A---- C:\Windows\system32\BcastDVRBroker.dll
2020-05-15 14:31:23 ----A---- C:\Windows\system32\AssignedAccessRuntime.dll
2020-05-15 14:31:23 ----A---- C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2020-05-15 14:31:23 ----A---- C:\Windows\system32\AppXApplicabilityBlob.dll
2020-05-15 14:31:23 ----A---- C:\Windows\system32\ApplyTrustOffline.exe
2020-05-15 14:31:23 ----A---- C:\Windows\system32\aadWamExtension.dll
2020-05-15 14:31:22 ----A---- C:\Windows\system32\WwaApi.dll
2020-05-15 14:31:22 ----A---- C:\Windows\system32\Windows.Web.Http.dll
2020-05-15 14:31:22 ----A---- C:\Windows\system32\Windows.Web.dll
2020-05-15 14:31:22 ----A---- C:\Windows\system32\Windows.UI.Xaml.Resources.Common.dll
2020-05-15 14:31:22 ----A---- C:\Windows\system32\Windows.UI.Xaml.Maps.dll
2020-05-15 14:31:22 ----A---- C:\Windows\system32\Windows.Networking.dll
2020-05-15 14:31:22 ----A---- C:\Windows\system32\Windows.Networking.Connectivity.dll
2020-05-15 14:31:22 ----A---- C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2020-05-15 14:31:22 ----A---- C:\Windows\system32\Windows.ApplicationModel.Core.dll
2020-05-15 14:31:22 ----A---- C:\Windows\system32\AppXDeploymentServer.dll
2020-05-15 14:31:22 ----A---- C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2020-05-15 14:31:21 ----A---- C:\Windows\system32\Wpc.dll
2020-05-15 14:31:21 ----A---- C:\Windows\system32\Windows.UI.Xaml.dll
2020-05-15 14:31:21 ----A---- C:\Windows\system32\Windows.UI.Storage.dll
2020-05-15 14:31:21 ----A---- C:\Windows\system32\Windows.UI.dll
2020-05-15 14:31:21 ----A---- C:\Windows\system32\Windows.Media.Devices.dll
2020-05-15 14:31:21 ----A---- C:\Windows\system32\Windows.Internal.Signals.dll
2020-05-15 14:31:21 ----A---- C:\Windows\system32\Windows.Devices.WiFiDirect.dll
2020-05-15 14:31:21 ----A---- C:\Windows\system32\vdsbas.dll
2020-05-15 14:31:21 ----A---- C:\Windows\system32\UtcDecoderHost.exe
2020-05-15 14:31:21 ----A---- C:\Windows\system32\UserDeviceRegistration.Ngc.dll
2020-05-15 14:31:21 ----A---- C:\Windows\system32\UserDeviceRegistration.dll
2020-05-15 14:31:21 ----A---- C:\Windows\system32\SystemSettings.DataModel.dll
2020-05-15 14:31:21 ----A---- C:\Windows\system32\SyncSettings.dll
2020-05-15 14:31:21 ----A---- C:\Windows\system32\StartTileData.dll
2020-05-15 14:31:21 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2020-05-15 14:31:21 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2020-05-15 14:31:21 ----A---- C:\Windows\system32\PCPKsp.dll
2020-05-15 14:31:21 ----A---- C:\Windows\system32\MDMAgent.exe
2020-05-15 14:31:21 ----A---- C:\Windows\system32\localspl.dll
2020-05-15 14:31:21 ----A---- C:\Windows\system32\FlightSettings.dll
2020-05-15 14:31:21 ----A---- C:\Windows\system32\FaxPrinterInstaller.dll
2020-05-15 14:31:21 ----A---- C:\Windows\system32\dsregtask.dll
2020-05-15 14:31:21 ----A---- C:\Windows\system32\dsreg.dll
2020-05-15 14:31:21 ----A---- C:\Windows\system32\drivers\winnat.sys
2020-05-15 14:31:21 ----A---- C:\Windows\system32\drivers\storport.sys
2020-05-15 14:31:21 ----A---- C:\Windows\system32\CredentialEnrollmentManager.exe
2020-05-15 14:31:21 ----A---- C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2020-05-15 14:31:21 ----A---- C:\Windows\system32\CloudNotifications.exe
2020-05-15 14:31:21 ----A---- C:\Windows\explorer.exe
2020-05-15 14:31:20 ----A---- C:\Windows\system32\XblGameSaveTask.exe
2020-05-15 14:31:20 ----A---- C:\Windows\system32\XblGameSave.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\wwansvc.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\wwanprotdim.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\WindowsManagementServiceWinRt.ProxyStub.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\Windows.UI.Internal.Input.ExpressiveInput.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\Windows.Management.Service.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\Windows.Gaming.XboxLive.Storage.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\Windows.Devices.Midi.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\VoipRT.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\tellib.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\TelephonyInteractiveUser.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\TaskFlowDataEngine.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\SpatialAudioLicenseSrv.exe
2020-05-15 14:31:20 ----A---- C:\Windows\system32\remoteaudioendpoint.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\PhoneService.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\Microsoft.Bluetooth.UserService.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\drivers\KNetPwrDepBroker.sys
2020-05-15 14:31:20 ----A---- C:\Windows\system32\BTAGService.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\autopilot.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\audiosrv.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\AudioSes.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\audioresourceregistrar.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\AUDIOKSE.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\AudioEng.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\AudioEndpointBuilder.dll
2020-05-15 14:31:20 ----A---- C:\Windows\system32\audiodg.exe
2020-05-15 14:31:17 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2020-05-15 14:31:17 ----A---- C:\Windows\system32\drivers\USBHUB3.SYS
2020-05-15 14:31:17 ----A---- C:\Windows\system32\drivers\TsUsbGD.sys
2020-05-15 14:31:17 ----A---- C:\Windows\system32\drivers\tpm.sys
2020-05-15 14:31:17 ----A---- C:\Windows\system32\drivers\storufs.sys
2020-05-15 14:31:17 ----A---- C:\Windows\system32\drivers\hidbth.sys
2020-05-04 21:22:44 ----D---- C:\Users\kaPL74\AppData\Roaming\SpinTires MudRunner
2020-05-03 09:28:45 ----SHD---- C:\$RECYCLE.BIN
2020-05-03 09:27:53 ----D---- C:\Windows\Temp
2020-05-03 09:27:53 ----A---- C:\Windows\zoek-delete.exe
2020-05-02 08:36:38 ----A---- C:\Windows\system32\drivers\MbamElam.sys
2020-05-02 08:36:37 ----D---- C:\ProgramData\Malwarebytes
2020-05-02 08:36:37 ----A---- C:\Windows\system32\drivers\mbae64.sys
2020-05-02 08:36:28 ----D---- C:\Program Files\Malwarebytes
2020-05-01 21:10:35 ----D---- C:\Users\kaPL74\AppData\Roaming\Ashampoo
2020-05-01 21:08:14 ----D---- C:\ProgramData\Ashampoo
2020-05-01 21:07:34 ----D---- C:\Program Files (x86)\Ashampoo

======List of files/folders modified in the last 1 month======

2020-05-30 22:26:17 ----D---- C:\Program Files
2020-05-30 22:22:11 ----D---- C:\Windows\Prefetch
2020-05-30 22:19:22 ----D---- C:\Windows\system32\drivers
2020-05-30 22:13:30 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2020-05-30 21:28:00 ----D---- C:\Windows\system32\sru
2020-05-30 19:22:23 ----D---- C:\Users\kaPL74\AppData\Roaming\vlc
2020-05-30 18:41:02 ----D---- C:\Windows\system32\SleepStudy
2020-05-30 12:25:25 ----D---- C:\ProgramData\NVIDIA
2020-05-30 12:23:57 ----SHD---- C:\System Volume Information
2020-05-30 11:14:02 ----D---- C:\Windows\system32\config
2020-05-30 11:11:51 ----D---- C:\Windows\Logs
2020-05-30 11:11:49 ----D---- C:\Windows\system32\DriverStore
2020-05-30 11:11:49 ----D---- C:\Windows\system32\catroot2
2020-05-30 11:11:48 ----D---- C:\Windows\INF
2020-05-30 11:11:40 ----RD---- C:\Windows\Microsoft.NET
2020-05-30 10:33:14 ----D---- C:\Program Files (x86)\Steam
2020-05-30 10:23:28 ----D---- C:\Windows\System32
2020-05-30 10:23:28 ----A---- C:\Windows\system32\PerfStringBackup.INI
2020-05-30 10:17:28 ----HD---- C:\ProgramData
2020-05-30 10:17:26 ----D---- C:\Windows\SysWOW64
2020-05-30 10:17:24 ----D---- C:\Windows
2020-05-30 09:38:41 ----HD---- C:\Program Files\WindowsApps
2020-05-26 20:30:09 ----SHD---- C:\Windows\Installer
2020-05-26 20:30:09 ----SD---- C:\Users\kaPL74\AppData\Roaming\Microsoft
2020-05-26 20:21:22 ----RD---- C:\Program Files (x86)
2020-05-26 20:05:15 ----D---- C:\Windows\AppReadiness
2020-05-25 19:24:30 ----D---- C:\Windows\system32\LogFiles
2020-05-24 19:24:41 ----D---- C:\Users\kaPL74\AppData\Roaming\dvdcss
2020-05-21 16:36:04 ----RSD---- C:\Windows\assembly
2020-05-20 20:59:55 ----D---- C:\Program Files\Common Files\Adobe
2020-05-20 20:59:53 ----D---- C:\Users\kaPL74\AppData\Roaming\Adobe
2020-05-20 20:59:08 ----D---- C:\ProgramData\Adobe
2020-05-20 20:58:58 ----D---- C:\Program Files\Adobe
2020-05-20 09:20:03 ----D---- C:\Windows\WinSxS
2020-05-18 22:36:10 ----A---- C:\Windows\system32\nvapi64.dll
2020-05-18 22:36:08 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2020-05-16 17:08:39 ----D---- C:\Program Files (x86)\Microsoft Office
2020-05-15 15:07:12 ----D---- C:\Program Files\Mozilla Firefox
2020-05-15 15:06:39 ----D---- C:\Windows\TextInput
2020-05-15 15:06:39 ----D---- C:\Windows\SYSWOW64\migration
2020-05-15 15:06:39 ----D---- C:\Windows\SYSWOW64\Dism
2020-05-15 15:06:39 ----D---- C:\Windows\SYSWOW64\cs-CZ
2020-05-15 15:06:39 ----D---- C:\Windows\SystemResources
2020-05-15 15:06:38 ----SD---- C:\Windows\system32\AppV
2020-05-15 15:06:38 ----D---- C:\Windows\system32\wbem
2020-05-15 15:06:38 ----D---- C:\Windows\system32\oobe
2020-05-15 15:06:38 ----D---- C:\Windows\system32\migration
2020-05-15 15:06:38 ----D---- C:\Windows\system32\en-US
2020-05-15 15:06:38 ----D---- C:\Windows\system32\drivers\UMDF
2020-05-15 15:06:38 ----D---- C:\Windows\system32\drivers\cs-CZ
2020-05-15 15:06:38 ----D---- C:\Windows\system32\Dism
2020-05-15 15:06:38 ----D---- C:\Windows\system32\cs-CZ
2020-05-15 15:06:37 ----RD---- C:\Windows\ImmersiveControlPanel
2020-05-15 15:06:37 ----D---- C:\Windows\ShellExperiences
2020-05-15 15:06:37 ----D---- C:\Windows\Provisioning
2020-05-15 15:06:37 ----D---- C:\Windows\PolicyDefinitions
2020-05-15 15:06:37 ----D---- C:\Windows\bcastdvr
2020-05-15 15:06:37 ----D---- C:\Windows\apppatch
2020-05-15 14:37:35 ----D---- C:\Windows\CbsTemp
2020-05-15 14:37:02 ----D---- C:\Windows\system32\MRT
2020-05-15 14:35:28 ----AC---- C:\Windows\system32\MRT.exe
2020-05-15 14:31:17 ----A---- C:\Windows\SYSWOW64\PrintConfig.dll
2020-05-13 17:31:38 ----HD---- C:\Windows\system32\GroupPolicy
2020-05-13 17:31:38 ----D---- C:\Windows\SYSWOW64\GroupPolicy
2020-05-07 23:59:40 ----D---- C:\Games
2020-05-04 19:02:29 ----D---- C:\Windows\minidump
2020-05-03 19:04:25 ----D---- C:\Windows\system32\Tasks
2020-05-03 09:25:09 ----D---- C:\Program Files (x86)\Common Files
2020-05-03 09:12:07 ----D---- C:\Windows\system32\drivers\etc
2020-05-02 13:05:29 ----D---- C:\Tiskárna EPSON
2020-05-02 08:36:38 ----HD---- C:\Windows\ELAMBKUP
2020-05-02 08:26:48 ----D---- C:\Windows\LiveKernelReports

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2020-03-20 106840]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\Windows\system32\drivers\iorate.sys [2019-03-19 56632]
R0 MsSecFlt;@%SystemRoot%\System32\Drivers\mssecflt.sys,-1001; C:\Windows\system32\drivers\mssecflt.sys [2020-03-12 254776]
R0 secnvme;secnvme; C:\Windows\System32\drivers\secnvme.sys [2020-01-20 133944]
R0 SgrmAgent;@%SystemRoot%\System32\Drivers\SgrmAgent.sys,-1001; C:\Windows\system32\drivers\SgrmAgent.sys [2019-03-19 89096]
R1 afunix;afunix; C:\Windows\system32\drivers\afunix.sys [2020-03-12 40960]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\Windows\system32\drivers\bam.sys [2019-03-19 70456]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2020-04-03 154336]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2020-03-20 188872]
R1 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2020-03-20 79520]
R1 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2020-03-20 115960]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\Windows\system32\drivers\filecrypt.sys [2019-03-19 59392]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\Windows\System32\drivers\gpuenergydrv.sys [2019-03-19 8704]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\Windows\system32\drivers\cldflt.sys [2020-05-15 457216]
R2 ekbdflt;ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [2020-03-20 53048]
R2 MBAMChameleon;MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [2020-05-30 214496]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\Windows\system32\drivers\mmcss.sys [2019-03-19 53760]
R3 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\Windows\system32\drivers\bindflt.sys [2020-02-29 117264]
R3 e1dexpress;@oem27.inf,%e1dExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver D; C:\Windows\System32\DriverStore\FileRepository\e1d68x64.inf_amd64_b44028fc7fdf4fca\e1d68x64.sys [2019-09-13 599920]
R3 I2cHkBurn;I2cHkBurn; C:\Windows\system32\drivers\I2cHkBurn.sys [2015-07-27 41760]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2019-10-30 6849832]
R3 MBAMSwissArmy;MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [2020-05-27 248968]
R3 MEIx64;@oem4.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\System32\DriverStore\FileRepository\heci.inf_amd64_85021432489d6a1c\x64\TeeDriverW8x64.sys [2019-04-17 266128]
R3 NVHDA;@oem9.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2019-10-04 237424]
R3 nvlddmkm;nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d5216eae94436d77\nvlddmkm.sys [2020-05-18 23454440]
R3 nvvad_WaveExtensible;@oem14.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2020-02-25 69840]
R3 nvvhci;@oem35.inf,%ServiceDesc%;NVVHCI Enumerator Service; C:\Windows\System32\drivers\nvvhci.sys [2020-03-11 67456]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\Windows\System32\drivers\bttflt.sys [2019-03-19 42808]
S0 eelam;eelam; C:\Windows\system32\DRIVERS\eelam.sys [2019-10-16 15800]
S0 cht4iscsi;cht4iscsi; C:\Windows\System32\drivers\cht4sx64.sys [2019-03-19 319528]
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\Windows\System32\drivers\iaStorAVC.sys [2019-03-19 885048]
S0 ItSas35i;ItSas35i; C:\Windows\System32\drivers\ItSas35i.sys [2019-03-19 148520]
S0 LSI_SAS2i;LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [2019-03-19 124448]
S0 LSI_SAS3i;LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [2019-03-19 128528]
S0 MbamElam;MbamElam; C:\Windows\system32\DRIVERS\MbamElam.sys [2020-05-02 20936]
S0 megasas2i;megasas2i; C:\Windows\System32\drivers\MegaSas2i.sys [2019-03-19 75280]
S0 megasas35i;megasas35i; C:\Windows\System32\drivers\megasas35i.sys [2019-03-19 94736]
S0 percsas2i;percsas2i; C:\Windows\System32\drivers\percsas2i.sys [2019-03-19 58896]
S0 percsas3i;percsas3i; C:\Windows\System32\drivers\percsas3i.sys [2019-03-19 68624]
S0 Ramdisk;Windows RAM Disk Driver; C:\Windows\system32\DRIVERS\ramdisk.sys [2019-03-19 41784]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\Windows\System32\drivers\scmbus.sys [2020-04-17 151352]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\Windows\System32\drivers\AcpiDev.sys [2019-03-19 20992]
S3 Acx01000;@%SystemRoot%\system32\drivers\Acx01000.sys,-1000; C:\Windows\system32\drivers\Acx01000.sys [2020-03-12 337920]
S3 amdgpio2;@amdgpio2.inf,%GPIO.SvcDesc%;AMD GPIO Client Driver; C:\Windows\System32\drivers\amdgpio2.sys [2019-03-19 18432]
S3 amdi2c;@amdi2c.inf,%amdi2c.SVCDESC%;AMD I2C Controller Service; C:\Windows\System32\drivers\amdi2c.sys [2019-03-19 37888]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\Windows\system32\drivers\applockerfltr.sys [2020-01-09 18432]
S3 AppvStrm;@%systemroot%\system32\drivers\AppvStrm.sys,-101; C:\Windows\system32\drivers\AppvStrm.sys [2020-02-29 138040]
S3 AppvVemgr;@%systemroot%\system32\drivers\AppvVemgr.sys,-101; C:\Windows\system32\drivers\AppvVemgr.sys [2020-02-29 174392]
S3 AppvVfs;@%systemroot%\system32\drivers\AppvVfs.sys,-101; C:\Windows\system32\drivers\AppvVfs.sys [2020-02-29 153912]
S3 BthA2dp;@microsoft_bluetooth_a2dp.inf,%BthA2dp.ServiceDescription%;Microsoft Bluetooth A2dp driver; C:\Windows\System32\drivers\BthA2dp.sys [2020-01-09 231936]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\Windows\System32\drivers\BthEnum.sys [2020-03-12 114688]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\Windows\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [2019-03-19 97280]
S3 BthMini;@bth.inf,%BTHMINI.SvcDesc%;Bluetooth Radio Driver; C:\Windows\System32\drivers\BTHMINI.sys [2020-03-12 36864]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\Windows\System32\drivers\BTHport.sys [2020-03-12 1428992]
S3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\Windows\System32\drivers\BTHUSB.sys [2020-03-12 99328]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\Windows\System32\drivers\buttonconverter.sys [2019-03-19 43008]
S3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\Windows\System32\drivers\CAD.sys [2019-03-19 64312]
S3 e1i65x64;@net1ic64.inf,%e1iExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I; C:\Windows\System32\drivers\e1i65x64.sys [2019-03-19 553984]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\Windows\System32\DriverStore\FileRepository\genericusbfn.inf_amd64_b9c53b80e63af230\genericusbfn.sys [2020-01-09 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\Windows\System32\drivers\hidinterrupt.sys [2019-03-19 53560]
S3 hidspi;@hidspi_km.inf,%hidspi.SVCDESC%;Microsoft SPI HID Miniport Driver; C:\Windows\System32\drivers\hidspi.sys [2020-01-09 64000]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\Windows\system32\drivers\hvservice.sys [2020-04-17 84280]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\Windows\System32\Drivers\mshwnclx.sys [2019-03-19 28672]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\Windows\System32\drivers\cht4vx64.sys [2019-03-19 1866768]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\Windows\System32\drivers\iagpio.sys [2019-03-19 36352]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\Windows\System32\drivers\iai2c.sys [2019-03-19 91136]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2.sys [2019-03-19 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2019-03-19 93184]
S3 iaLPSS2i_GPIO2_CNL;@iaLPSS2i_GPIO2_CNL.inf,%iaLPSS2i_GPIO2_CNL.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2_CNL.sys [2019-03-19 112128]
S3 iaLPSS2i_GPIO2_GLK;@iaLPSS2i_GPIO2_GLK.inf,%iaLPSS2i_GPIO2_GLK.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2_GLK.sys [2019-03-19 96256]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C.sys [2019-03-19 171520]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2019-03-19 175104]
S3 iaLPSS2i_I2C_CNL;@iaLPSS2i_I2C_CNL.inf,%iaLPSS2i_I2C_CNL.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C_CNL.sys [2019-03-19 180736]
S3 iaLPSS2i_I2C_GLK;@iaLPSS2i_I2C_GLK.inf,%iaLPSS2i_I2C_GLK.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C_GLK.sys [2019-03-19 177664]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\Windows\System32\drivers\ibbus.sys [2019-03-19 566800]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\Windows\System32\drivers\IndirectKmd.sys [2019-03-19 46592]
S3 intelpmax;@intelpmax.inf,%SvcDesc%;Intel Power Limit Driver; C:\Windows\System32\drivers\intelpmax.sys [2019-03-19 28672]
S3 IPT;IPT; C:\Windows\System32\drivers\ipt.sys [2019-03-19 54584]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\Windows\System32\drivers\mausbhost.sys [2019-03-19 535864]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\Windows\System32\drivers\mausbip.sys [2019-03-19 62264]
S3 MbbCx;MBB Network Adapter Class Extension; C:\Windows\system32\drivers\MbbCx.sys [2020-01-09 359424]
S3 Microsoft_Bluetooth_AvrcpTransport;@microsoft_bluetooth_avrcptransport.inf,%Microsoft_Bluetooth_AvrcpTransport.ServiceDescription%;Microsoft Bluetooth Avrcp Transport Driver; C:\Windows\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys [2019-03-19 64512]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\Windows\System32\drivers\mlx4_bus.sys [2019-03-19 1150480]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\Windows\System32\drivers\ndfltr.sys [2019-03-19 153616]
S3 NDKPing;NDKPing Driver; C:\Windows\system32\drivers\NDKPing.sys [2019-03-19 63488]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\Windows\system32\drivers\NetAdapterCx.sys [2019-03-19 187904]
S3 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\Windows\System32\drivers\nvdimm.sys [2019-03-19 158520]
S3 NvStreamKms;NVIDIA KMS; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2020-04-01 30336]
S3 PktMon;Packet Monitor Driver; C:\Windows\system32\drivers\PktMon.sys [2019-03-19 96056]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\Windows\System32\drivers\pmem.sys [2019-03-19 127800]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\Windows\System32\drivers\pnpmem.sys [2019-03-19 17408]
S3 portcfg;portcfg; C:\Windows\System32\drivers\portcfg.sys [2019-03-19 25600]
S3 ReFSv1;ReFSv1; C:\Windows\system32\drivers\ReFSv1.sys [2020-01-09 986936]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2016-12-21 40240]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\System32\drivers\rfcomm.sys [2019-03-19 211456]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\Windows\System32\drivers\rhproxy.sys [2019-03-19 113152]
S3 RTSUER;@oem32.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\Windows\system32\Drivers\RtsUer.sys [2019-04-07 452008]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\Windows\System32\drivers\SDFRd.sys [2019-03-19 33592]
S4 hvcrash;hvcrash; C:\Windows\System32\drivers\hvcrash.sys [2019-03-19 32568]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R2 CDPUserSvc_3e386;CDPUserSvc_3e386; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R2 ClickToRunSvc;Služba Microsoft Office Klikni a spusť; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2020-05-07 10612592]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\Windows\System32\svchost.exe [2019-03-19 53744]
R2 DispBrokerDesktopSvc;@%SystemRoot%\system32\dispbroker.desktop.dll,-101; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\Windows\System32\svchost.exe [2019-03-19 53744]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\Windows\System32\svchost.exe [2019-03-19 53744]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Security\ekrn.exe [2020-04-03 2358784]
R2 EpsonScanSvc;Epson Scanner Service; C:\Windows\system32\EscSvc64.exe [2018-01-29 145224]
R2 GamingApp_Service;GamingApp_Service; C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe [2018-07-04 46264]
R2 GamingHotkey_Service;MSI Gaming Hotkey Service; C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe [2018-03-22 2027192]
R2 MSI_ActiveX_Service;MSI_ActiveX_Service; C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe [2018-04-17 83616]
R2 NvContainerLocalSystem;NVIDIA LocalSystem Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2020-03-18 850928]
R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d5216eae94436d77\Display.NvContainer\NVDisplay.Container.exe [2020-05-18 881896]
R2 OneSyncSvc_3e386;OneSyncSvc_3e386; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R2 RtkAudioUniversalService;Realtek Audio Universal Service; C:\Windows\System32\RtkAudUService64.exe [2019-10-30 856288]
R2 SgrmBroker;@%SystemRoot%\System32\SgrmBroker.exe,-100; C:\Windows\system32\SgrmBroker.exe [2019-03-19 263904]
R3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R3 cbdhsvc_3e386;cbdhsvc_3e386; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R3 DevicePickerUserSvc_3e386;DevicePickerUserSvc_3e386; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R3 DevicesFlowUserSvc_3e386;DevicesFlowUserSvc_3e386; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R3 DisplayEnhancementService;@%SystemRoot%\System32\Microsoft.Graphics.Display.DisplayEnhancementService.dll,-1000; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\Windows\System32\svchost.exe [2019-03-19 53744]
R3 ekrnEpfw;ESET Firewall Helper; C:\Program Files\ESET\ESET Security\ekrn.exe [2020-04-03 2358784]
R3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\Windows\System32\svchost.exe [2019-03-19 53744]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\Windows\System32\svchost.exe [2019-03-19 53744]
R3 MBAMService;Malwarebytes Service; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [2020-05-02 6933272]
R3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R3 PimIndexMaintenanceSvc_3e386;PimIndexMaintenanceSvc_3e386; C:\Windows\system32\svchost.exe [2019-03-19 53744]
R3 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\Windows\system32\SecurityHealthService.exe [2020-03-12 929144]
R3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S2 SetupARService;SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [2020-02-29 10752]
S3 AarSvc;@%SystemRoot%\system32\AarSvc.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 AarSvc_3e386;AarSvc_3e386; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 AssignedAccessManagerSvc;@%SystemRoot%\system32\assignedaccessmanagersvc.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 autotimesvc;@%SystemRoot%\System32\autotimesvc.dll,-6; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 BcastDVRUserService_3e386;BcastDVRUserService_3e386; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 BluetoothUserService_3e386;BluetoothUserService_3e386; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 CaptureService;@%SystemRoot%\system32\CaptureService.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 CaptureService_3e386;CaptureService_3e386; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 cbdhsvc;@%SystemRoot%\system32\cbdhsvc.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S3 ConsentUxUserSvc;@%SystemRoot%\system32\ConsentUxClient.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 ConsentUxUserSvc_3e386;ConsentUxUserSvc_3e386; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 CredentialEnrollmentManagerUserSvc;@%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100; C:\Windows\system32\CredentialEnrollmentManager.exe [2020-05-15 380632]
S3 CredentialEnrollmentManagerUserSvc_3e386;CredentialEnrollmentManagerUserSvc_3e386; C:\Windows\system32\CredentialEnrollmentManager.exe [2020-05-15 380632]
S3 DeviceAssociationBrokerSvc;@%SystemRoot%\system32\deviceaccess.dll,-107; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 DeviceAssociationBrokerSvc_3e386;DeviceAssociationBrokerSvc_3e386; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2020-03-12 97792]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2019-03-01 43704]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 MessagingService_3e386;MessagingService_3e386; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 MixedRealityOpenXRSvc;@%SystemRoot%\system32\MixedRealityRuntime.dll,-101; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 ose;Office Source Engine; c:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2002-02-01 215056]
S3 perceptionsimulation;@%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101; C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe [2019-03-19 103424]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 PrintWorkflowUserSvc_3e386;PrintWorkflowUserSvc_3e386; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\Windows\System32\svchost.exe [2019-03-19 53744]
S3 Sense;@%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2020-04-17 5930136]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\Windows\System32\SensorDataService.exe [2019-03-19 1264128]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\Windows\system32\svchost.exe [2019-03-19 53744]
S4 AppVClient;@%systemroot%\system32\AppVClient.exe,-102; C:\Windows\system32\AppVClient.exe [2020-02-29 828216]

-----------------EOF-----------------

Uživatelský avatar
kodl74
Návštěvník
Návštěvník
Příspěvky: 178
Registrován: 10 kvě 2007 17:14

Re: Prosím o jednu preventivku, Děkuji

#2 Příspěvek od kodl74 »

Ještě pro jistotu logy z FRST
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 30-05-2020 01
Ran by kaPL74 (administrator) on PCKAPL (Gigabyte Technology Co., Ltd. B250M-D3H) (30-05-2020 23:21:12)
Running from C:\Users\kaPL74\Desktop
Loaded Profiles: kaPL74
Platform: Windows 10 Pro Version 1909 18363.836 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(Logitech Inc -> Logitech) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOverlay.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\LogiOptions\LogiOptions.exe
(Logitech Inc -> Logitech, Inc.) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12005.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\Gaming APP\MSI_LED.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\EyeRest.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\TriggerModeMonitor.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\VideoCardMonitorII.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Windows\SysWOW64\muachost.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d5216eae94436d77\Display.NvContainer\NVDisplay.Container.exe <2>
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\spool\drivers\x64\3\E_YATIUNE.EXE <2>
(Skype Software Sarl -> Skype Technologies S.A.) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe <6>
(Winstep Software Technologies) [File not signed] C:\Program Files (x86)\Winstep\WsxService.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\RtkAudUService64.exe [856288 2019-10-30] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [185648 2020-04-03] (ESET, spol. s r.o. -> ESET)
HKLM\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [2109064 2020-04-27] (Logitech Inc -> Logitech, Inc.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1319208 2019-05-31] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-3640345311-2590231575-3648685039-1001\...\Run: [Nexus] => C:\Program Files (x86)\Winstep\Nexus.exe [17959552 2019-03-01] (Winstep Software Technologies) [File not signed]
HKU\S-1-5-21-3640345311-2590231575-3648685039-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3372832 2020-05-15] (Valve -> Valve Corporation)
HKU\S-1-5-21-3640345311-2590231575-3648685039-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [91667312 2020-05-12] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-3640345311-2590231575-3648685039-1001\...\Run: [CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [144008 2019-11-26] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-3640345311-2590231575-3648685039-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIUNE.EXE [416896 2017-09-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-3640345311-2590231575-3648685039-1001\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIUNE.EXE [416896 2017-09-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-3640345311-2590231575-3648685039-1001\...\RunOnce: [Application Restart #1] => C:\Windows\SysWOW64\muachost.exe [1692840 2015-08-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
HKU\S-1-5-21-3640345311-2590231575-3648685039-1001\...\MountPoints2: {68bfee73-6468-11ea-ab15-1c1b0da4b7b8} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-3640345311-2590231575-3648685039-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [807936 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Print\Monitors\EPSON L3150 Series 64MonitorBE: C:\Windows\system32\E_YLMBUNE.DLL [184832 2017-07-14] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation)
Startup: C:\Users\kaPL74\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Poslat do aplikace OneNote.lnk [2020-02-29]
ShortcutTarget: Poslat do aplikace OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
GroupPolicy: Restriction ? <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {03829E19-FCB5-4D10-9D46-CE9F54957888} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646456 2020-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {15CC3FA4-406B-4CE4-AF34-CCE72B0C6961} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [850928 2020-03-18] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {1948E78B-B2BB-4FFD-AD9A-9D0026656FB7} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23772552 2020-05-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {1BE12DD1-69FC-4F0B-88B8-D01AB400111A} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23772552 2020-05-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {224F05D7-3AE5-49C1-8BD1-E7CF7A94346C} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {2B5A553C-00B2-4B15-8282-8DC9A6C9FFB8} - System32\Tasks\MSIGH_Host => C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey.exe [3353784 2018-03-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
Task: {2EED02E1-EAB9-4D17-A10F-E0E5CE468330} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [124752 2020-05-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {371900C1-E676-4A57-B3CE-009A3F7BE0E5} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3D2CAE0A-B875-48DF-8348-D47DD5AA901F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4357016 2020-05-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {3F2190D9-AE89-4278-A3FB-CFD2B96CB955} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {493B37F1-706D-4E1C-8AE4-24CDD02EDFA0} - System32\Tasks\EPSON L3150 Series Update {BD2837DA-20B0-40AF-A8FE-8F821B310009} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSUNE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Task: {602EEB25-0630-4CCF-A0DF-2D5450BAF939} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4357016 2020-05-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {6F0738B1-5855-4F60-A6D0-D73CD477FC86} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {8F6A2669-40BB-4D0F-B464-1FC915B6CC15} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {AEB78506-86E7-4488-A9E5-FA196B7F48A7} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [4487904 2016-04-19] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
Task: {B5E34146-1E2A-4937-A251-4C5A8EDBB573} - System32\Tasks\EPSON L3150 Series Update {8EB7930A-DB32-4F75-BBF2-B09321E48960} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSUNE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Task: {C3E61974-CC66-4813-A250-3393186E7540} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [124752 2020-05-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {CD03A155-5B1A-4F49-871D-3E36C2CBDB17} - System32\Tasks\MSISW_Host => C:\Windows\SysWOW64\muachost.exe [1692840 2015-08-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
Task: {F2EA4781-3886-4093-A4F6-195163C3498A} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F962887A-1E6A-4631-9FE2-13319DCB1F43} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [850928 2020-03-18] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FA2FBD68-A28A-4F83-9AAD-6BBE526415F6} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3293168 2020-04-08] (NVIDIA Corporation -> NVIDIA Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\EPSON L3150 Series Update {8EB7930A-DB32-4F75-BBF2-B09321E48960}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSUNE.EXE:/EXE:{8EB7930A-DB32-4F75-BBF2-B09321E48960} /F:UpdateWORKGROUP\DESKTOP-B9OGC81$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\Windows\Tasks\EPSON L3150 Series Update {BD2837DA-20B0-40AF-A8FE-8F821B310009}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSUNE.EXE:/EXE:{BD2837DA-20B0-40AF-A8FE-8F821B310009} /F:UpdateWORKGROUP\DESKTOP-B9OGC81$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\Windows\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe-CheckUpdate(Tracker Software Products (Canada) Ltd.Kee

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.100.1
Tcpip\..\Interfaces\{04687598-79ac-424b-a997-68cfe11fc2ae}: [DhcpNameServer] 192.168.100.1

Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-3640345311-2590231575-3648685039-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2020-02-29] (Microsoft Corporation -> Microsoft Corporation)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2020-02-29] (Microsoft Corporation -> Microsoft Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2015-07-31] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-05-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-05-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-05-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-05-03] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF DefaultProfile: suv7x4pj.default
FF ProfilePath: C:\Users\kaPL74\AppData\Roaming\Mozilla\Firefox\Profiles\suv7x4pj.default [2020-05-03]
FF Homepage: Mozilla\Firefox\Profiles\suv7x4pj.default -> about:home
FF NewTab: Mozilla\Firefox\Profiles\suv7x4pj.default -> about:newtab
FF Notifications: Mozilla\Firefox\Profiles\suv7x4pj.default -> hxxps://www.slevomat.cz
FF Extension: (Blokátor reklam AdGuard) - C:\Users\kaPL74\AppData\Roaming\Mozilla\Firefox\Profiles\suv7x4pj.default\Extensions\adguardadblocker@adguard.com.xpi [2020-01-05]
FF Extension: (Český slovník pro kontrolu pravopisu) - C:\Users\kaPL74\AppData\Roaming\Mozilla\Firefox\Profiles\suv7x4pj.default\Extensions\cs@dictionaries.addons.mozilla.org.xpi [2019-01-05]
FF Extension: (To Google Translate) - C:\Users\kaPL74\AppData\Roaming\Mozilla\Firefox\Profiles\suv7x4pj.default\Extensions\jid1-93WyvpgvxzGATw@jetpack.xpi [2019-12-07]
FF Extension: (esafox) - C:\Users\kaPL74\AppData\Roaming\Mozilla\Firefox\Profiles\suv7x4pj.default\Extensions\{b526b65f-3165-4dcc-a534-3474d1de766b}.xpi [2019-05-14]
FF Extension: (Space Fantasy Redux) - C:\Users\kaPL74\AppData\Roaming\Mozilla\Firefox\Profiles\suv7x4pj.default\Extensions\{f5453979-a039-4066-8aee-cb64fc98f936}.xpi [2019-08-13]
FF ProfilePath: C:\Users\kaPL74\AppData\Roaming\Mozilla\Firefox\Profiles\bdftw427.default-release [2020-05-30]
FF Homepage: Mozilla\Firefox\Profiles\bdftw427.default-release -> hxxps://www.seznam.cz/
FF NewTab: Mozilla\Firefox\Profiles\bdftw427.default-release -> about:newtab
FF Notifications: Mozilla\Firefox\Profiles\bdftw427.default-release -> hxxps://www.slevomat.cz
FF Extension: (Blokátor reklam AdGuard) - C:\Users\kaPL74\AppData\Roaming\Mozilla\Firefox\Profiles\bdftw427.default-release\Extensions\adguardadblocker@adguard.com.xpi [2020-04-11]
FF Extension: (Český slovník pro kontrolu pravopisu) - C:\Users\kaPL74\AppData\Roaming\Mozilla\Firefox\Profiles\bdftw427.default-release\Extensions\cs@dictionaries.addons.mozilla.org.xpi [2019-01-05]
FF Extension: (To Google Translate) - C:\Users\kaPL74\AppData\Roaming\Mozilla\Firefox\Profiles\bdftw427.default-release\Extensions\jid1-93WyvpgvxzGATw@jetpack.xpi [2019-12-07]
FF Extension: (esafox) - C:\Users\kaPL74\AppData\Roaming\Mozilla\Firefox\Profiles\bdftw427.default-release\Extensions\{b526b65f-3165-4dcc-a534-3474d1de766b}.xpi [2019-05-14]
FF Extension: (Space Fantasy Redux) - C:\Users\kaPL74\AppData\Roaming\Mozilla\Firefox\Profiles\bdftw427.default-release\Extensions\{f5453979-a039-4066-8aee-cb64fc98f936}.xpi [2019-08-13]
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: (E-Web Print) - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2020-03-18] [Legacy] [not signed]
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-04-19] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-04-19] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2020-02-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-02-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-3640345311-2590231575-3648685039-1001: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-04-19] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2020-05-30]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [10612592 2020-05-07] (Microsoft Corporation -> Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2358784 2020-04-03] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [2358784 2020-04-03] (ESET, spol. s r.o. -> ESET)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [145224 2018-01-29] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 GamingApp_Service; C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe [46264 2018-07-04] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
R2 GamingHotkey_Service; C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe [2027192 2018-03-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6933272 2020-05-02] (Malwarebytes Inc -> Malwarebytes)
R2 MSI_ActiveX_Service; C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe [83616 2018-04-17] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [850928 2020-03-18] (NVIDIA Corporation -> NVIDIA Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5930136 2020-04-17] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [10752 2020-02-29] () [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4098056 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [113992 2019-03-19] (Microsoft Corporation -> Microsoft Corporation)
R2 Winstep Xtreme Service; C:\Program Files (x86)\Winstep\WsxService.exe [775680 2018-06-06] (Winstep Software Technologies) [File not signed]
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d5216eae94436d77\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d5216eae94436d77\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [231936 2020-01-09] (Microsoft Corporation) [File not signed]
R3 e1dexpress; C:\Windows\System32\DriverStore\FileRepository\e1d68x64.inf_amd64_b44028fc7fdf4fca\e1d68x64.sys [599920 2019-09-13] (Intel(R) INTELND1820 -> Intel Corporation)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [154336 2020-04-03] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [106840 2020-03-20] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [15800 2019-10-16] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [188872 2020-03-20] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [53048 2020-03-20] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [79520 2020-03-20] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [115960 2020-03-20] (ESET, spol. s r.o. -> ESET)
R3 I2cHkBurn; C:\Windows\system32\drivers\I2cHkBurn.sys [41760 2015-07-27] (Feature Integration Technology -> FINTEK Corp.)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [20936 2020-05-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248968 2020-05-27] (Malwarebytes Inc -> Malwarebytes)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d5216eae94436d77\nvlddmkm.sys [23454440 2020-05-18] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30336 2020-04-01] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [69840 2020-02-25] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [67456 2020-03-11] (NVIDIA Corporation -> NVIDIA Corporation)
R0 secnvme; C:\Windows\System32\drivers\secnvme.sys [133944 2020-01-20] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46472 2019-03-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\Windows\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [333784 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [62432 2019-03-19] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-05-30 23:21 - 2020-05-30 23:21 - 000026301 _____ C:\Users\kaPL74\Desktop\FRST.txt
2020-05-30 23:20 - 2020-05-30 23:21 - 000000000 ____D C:\FRST
2020-05-30 23:19 - 2020-05-30 23:19 - 002289152 _____ (Farbar) C:\Users\kaPL74\Desktop\FRST64.exe
2020-05-30 23:15 - 2020-05-30 23:15 - 000001656 _____ C:\Users\kaPL74\Desktop\AdwCleaner[C01].txt
2020-05-30 22:40 - 2020-05-30 22:40 - 000050688 _____ (Atribune.org) C:\Users\kaPL74\Desktop\ATF-Cleaner.exe
2020-05-30 22:34 - 2020-05-30 22:34 - 000000000 ____D C:\AdwCleaner
2020-05-30 22:33 - 2020-05-30 22:33 - 008402608 _____ (Malwarebytes) C:\Users\kaPL74\Desktop\AdwCleaner.exe
2020-05-30 22:26 - 2020-05-30 22:26 - 000000000 ____D C:\rsit
2020-05-30 22:26 - 2020-05-30 22:26 - 000000000 ____D C:\Program Files\trend micro
2020-05-30 22:25 - 2020-05-30 22:25 - 001222144 _____ C:\Users\kaPL74\Desktop\RSITx64.exe
2020-05-30 22:19 - 2020-05-30 22:22 - 000000000 ____D C:\Users\kaPL74\AppData\LocalLow\IGDump
2020-05-30 18:48 - 2020-05-30 18:52 - 1319258918 _____ C:\Users\kaPL74\Desktop\Na nože (2019) 1080p cz dab.mkv
2020-05-30 10:16 - 2020-05-30 10:16 - 000000000 ____D C:\Windows\LastGood.Tmp
2020-05-30 10:12 - 2020-05-18 22:44 - 001729232 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe
2020-05-30 10:12 - 2020-05-18 22:44 - 001729232 _____ C:\Windows\system32\vulkaninfo.exe
2020-05-30 10:12 - 2020-05-18 22:44 - 001329360 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2020-05-30 10:12 - 2020-05-18 22:44 - 001329360 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2020-05-30 10:12 - 2020-05-18 22:44 - 001079000 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll
2020-05-30 10:12 - 2020-05-18 22:44 - 001079000 _____ C:\Windows\system32\vulkan-1.dll
2020-05-30 10:12 - 2020-05-18 22:44 - 000937680 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll
2020-05-30 10:12 - 2020-05-18 22:44 - 000937680 _____ C:\Windows\SysWOW64\vulkan-1.dll
2020-05-30 10:12 - 2020-05-18 22:44 - 000451480 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2020-05-30 10:12 - 2020-05-18 22:44 - 000348048 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2020-05-30 10:12 - 2020-05-18 22:41 - 011944864 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2020-05-30 10:12 - 2020-05-18 22:41 - 010286480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2020-05-30 10:12 - 2020-05-18 22:40 - 001005968 _____ (NVIDIA Corporation) C:\Windows\system32\nvml.dll
2020-05-30 10:12 - 2020-05-18 22:40 - 000816872 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll
2020-05-30 10:12 - 2020-05-18 22:40 - 000676240 _____ C:\Windows\system32\nvofapi64.dll
2020-05-30 10:12 - 2020-05-18 22:40 - 000543136 _____ C:\Windows\SysWOW64\nvofapi.dll
2020-05-30 10:12 - 2020-05-18 22:39 - 002073008 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2020-05-30 10:12 - 2020-05-18 22:39 - 001566104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2020-05-30 10:12 - 2020-05-18 22:39 - 001482144 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2020-05-30 10:12 - 2020-05-18 22:39 - 001350576 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2020-05-30 10:12 - 2020-05-18 22:39 - 001142008 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2020-05-30 10:12 - 2020-05-18 22:39 - 001048488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2020-05-30 10:12 - 2020-05-18 22:39 - 000680864 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2020-05-30 10:12 - 2020-05-18 22:39 - 000561400 _____ (NVIDIA Corporation) C:\Windows\system32\nvidia-smi.exe
2020-05-30 10:12 - 2020-05-18 22:39 - 000546728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2020-05-30 10:12 - 2020-05-18 22:38 - 005856664 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2020-05-30 10:12 - 2020-05-18 22:38 - 000811256 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2020-05-30 10:12 - 2020-05-18 22:38 - 000655080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2020-05-30 10:12 - 2020-05-18 22:38 - 000444816 _____ (NVIDIA Corporation) C:\Windows\system32\nvdebugdump.exe
2020-05-30 10:12 - 2020-05-18 22:37 - 017600240 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2020-05-30 10:12 - 2020-05-18 22:37 - 015157992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2020-05-30 10:12 - 2020-05-18 22:37 - 005159312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2020-05-30 10:12 - 2020-05-18 22:37 - 000849824 _____ (NVIDIA Corporation) C:\Windows\system32\MCU.exe
2020-05-30 10:12 - 2020-05-16 09:07 - 000077294 _____ C:\Windows\system32\nvinfo.pb
2020-05-30 09:38 - 2020-05-30 09:38 - 000000000 ____D C:\Program Files\UNP
2020-05-27 18:09 - 2020-05-30 22:19 - 000214496 ____N (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2020-05-27 18:09 - 2020-05-27 18:09 - 000248968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2020-05-26 20:23 - 2020-05-30 23:11 - 000000000 ____D C:\Users\kaPL74\AppData\Roaming\uTorrent
2020-05-26 20:23 - 2020-05-26 20:23 - 000000000 ____D C:\Users\kaPL74\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent
2020-05-25 19:26 - 2020-05-09 17:44 - 000055151 _____ C:\Users\kaPL74\Desktop\Informace o splatnosti k pojistné smlouvě č 4480912754.pdf
2020-05-24 14:31 - 2020-05-24 14:40 - 558585588 _____ C:\Users\kaPL74\Desktop\96 hodin 3-Zúčtování.mkv
2020-05-20 20:59 - 2020-05-20 20:59 - 000001024 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop 2020.lnk
2020-05-20 07:51 - 2020-05-20 07:51 - 000000000 ____D C:\Users\kaPL74\AppData\Local\Deployment
2020-05-20 07:51 - 2020-05-20 07:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2020-05-20 07:50 - 2020-05-20 07:50 - 000000000 ____D C:\Program Files\Logitech
2020-05-20 07:40 - 2020-05-20 07:40 - 000000000 ____D C:\Users\kaPL74\AppData\Roaming\Skype
2020-05-15 14:31 - 2020-05-15 14:31 - 025902080 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 025444864 _____ (Microsoft Corporation) C:\Windows\system32\Hydrogen.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 022638592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 019851264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 019812352 _____ (Microsoft Corporation) C:\Windows\system32\HologramWorld.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 018029056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 017791488 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 014819328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 009929528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 009339392 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 008013824 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 007902912 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 007822888 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 007756800 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 007604584 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 007297536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 007267840 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 007257816 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 007011840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 006710272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 006525936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 006435328 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 006291456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 006232568 _____ (Microsoft Corporation) C:\Windows\system32\StartTileData.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 006168576 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 006082808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 005945856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 005911040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 005757872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 005340568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 005280192 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 005111296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 005098352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 004858368 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 004624880 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 004612608 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 004565456 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 004129416 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 004012032 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Bluetooth.Service.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 004005376 _____ (Microsoft Corporation) C:\Windows\system32\EdgeContent.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 003986944 _____ (Microsoft Corporation) C:\Windows\system32\tellib.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 003974376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 003822080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 003807232 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 003747328 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 003727360 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2020-05-15 14:31 - 2020-05-15 14:31 - 003711488 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 003655680 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 003581752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2020-05-15 14:31 - 2020-05-15 14:31 - 003513856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 003371416 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 003109376 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 003084800 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 002986808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2020-05-15 14:31 - 2020-05-15 14:31 - 002854400 _____ (Microsoft Corporation) C:\Windows\system32\MapGeocoder.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 002798592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2020-05-15 14:31 - 2020-05-15 14:31 - 002774088 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 002769000 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 002760704 _____ (Microsoft Corporation) C:\Windows\system32\smartscreen.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 002755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2020-05-15 14:31 - 2020-05-15 14:31 - 002755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2020-05-15 14:31 - 2020-05-15 14:31 - 002736640 _____ (Microsoft Corporation) C:\Windows\system32\WebRuntimeManager.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 002717184 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2020-05-15 14:31 - 2020-05-15 14:31 - 002584008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 002576896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 002504440 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 002465792 _____ (Microsoft Corporation) C:\Windows\system32\InstallService.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 002448712 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 002354688 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Perception.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 002289152 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 002284032 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.3D.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 002259664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 002256384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 002235008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 002190648 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystems64.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 002157056 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.PointOfService.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 002150232 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 002147328 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 002087168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 002073176 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 002072576 _____ (Microsoft Corporation) C:\Windows\system32\ISM.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 002060800 _____ (Microsoft Corporation) C:\Windows\system32\cdprt.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001999968 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001990576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001975808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapGeocoder.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001952872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001945600 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001943040 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001934824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001885184 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001856000 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001835128 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001835008 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001825280 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001819648 _____ (Microsoft Corporation) C:\Windows\system32\CoreShell.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001786880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001766400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001751040 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001745208 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001737216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallService.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001722880 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001719336 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntVirtualization.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001697792 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001686016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001665720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001664896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001656904 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001654952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001646552 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001637888 _____ (Microsoft Corporation) C:\Windows\system32\TaskFlowDataEngine.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001637376 _____ (Microsoft Corporation) C:\Windows\system32\MSPhotography.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001616912 _____ (Microsoft Corporation) C:\Windows\system32\AppVIntegration.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001610240 _____ (Microsoft Corporation) C:\Windows\system32\HologramCompositor.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001581056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Perception.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001559040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pla.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001556200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001549824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.3D.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001540096 _____ (Microsoft Corporation) C:\Windows\system32\WindowManagement.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001539072 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 001536512 _____ (Microsoft Corporation) C:\Windows\system32\UserDataService.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001525760 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001510912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdprt.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001507328 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001505592 _____ (Microsoft Corporation) C:\Windows\system32\rdpbase.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001500672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001498624 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001497416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppVEntSubsystems32.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001492480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001486336 _____ (Microsoft Corporation) C:\Windows\system32\usocoreworker.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 001477112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001466368 _____ (Microsoft Corporation) C:\Windows\system32\rdpsharercom.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001461760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.PointOfService.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001458688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001428480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001417760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001414144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001413712 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001406464 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001397560 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 001393960 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001393664 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvruserservice.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001391104 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.FaceAnalysis.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001386296 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystemController.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001385176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001382400 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Editing.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001375232 _____ (Microsoft Corporation) C:\Windows\system32\APMon.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001373184 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001370112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001357312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001346048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Maps.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001344000 _____ (Microsoft Corporation) C:\Windows\system32\HoloSI.PCShell.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001343488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Audio.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001336832 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001336320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSPhotography.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001333248 _____ (Microsoft Corporation) C:\Windows\system32\MiracastReceiver.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001319936 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001306424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContentDeliveryManager.Utilities.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001306112 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Audio.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001288648 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001284096 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001282560 _____ (Microsoft Corporation) C:\Windows\system32\usermgr.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001274128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryPS.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001270784 _____ (Microsoft Corporation) C:\Windows\system32\SEMgrSvc.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001264640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001263616 _____ (Microsoft Corporation) C:\Windows\system32\XblGameSave.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001260032 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001250816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpsharercom.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001245696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001222656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.FaceAnalysis.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001218560 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001214264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpbase.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001213440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Maps.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001195008 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001184256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001182208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001180672 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001178608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001158144 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001154656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001151824 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001150784 _____ (Microsoft Corporation) C:\Windows\system32\InputHost.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001149712 _____ (Microsoft Corporation) C:\Windows\system32\ApplyTrustOffline.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 001132544 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001125376 _____ (Microsoft Corporation) C:\Windows\system32\CBDHSvc.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001121280 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001107456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001099600 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001098752 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001098240 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Signals.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001092096 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001085752 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Services.TargetedContent.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001081856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Vpn.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001080320 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001077048 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 001072128 _____ (Microsoft Corporation) C:\Windows\system32\BTAGService.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001071616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001068032 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001060352 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001059328 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001053696 _____ (Microsoft Corporation) C:\Windows\system32\Windows.AccountsControl.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001048480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001047568 _____ (Microsoft Corporation) C:\Windows\system32\AppVPolicy.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001034752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Editing.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001027816 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Perception.Stub.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001023128 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001011712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001007928 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostCommon.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001007104 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 001005056 _____ (Microsoft Corporation) C:\Windows\system32\ContactApis.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000999616 _____ (Microsoft Corporation) C:\Windows\system32\PCPKsp.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000994304 _____ (Microsoft Corporation) C:\Windows\system32\EdgeManager.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000979264 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000975360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000959800 _____ (Microsoft Corporation) C:\Windows\system32\AppVManifest.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000957056 _____ (Microsoft Corporation) C:\Windows\system32\AppContracts.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000949760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Ocr.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000945192 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000944640 _____ (Microsoft Corporation) C:\Windows\system32\assignedaccessmanagersvc.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000943640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000943616 _____ (Microsoft Corporation) C:\Windows\system32\PhoneService.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000938496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000925184 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000921600 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.Service.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000916768 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000915456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000915192 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000911872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MiracastReceiver.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000902656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000901120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ContactApis.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000896000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000895080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000894016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000893952 _____ (Microsoft Corporation) C:\Windows\system32\FlightSettings.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000891544 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000891392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000888352 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000881664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000879064 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000874296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2020-05-15 14:31 - 2020-05-15 14:31 - 000866304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000863232 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000861696 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000859944 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000858112 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000858112 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000854528 _____ (Microsoft Corporation) C:\Windows\system32\MrmIndexer.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000852992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000847872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000847168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2020-05-15 14:31 - 2020-05-15 14:31 - 000843776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000843576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostCommon.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000841216 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000836608 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000827192 _____ (Microsoft Corporation) C:\Windows\system32\AppVOrchestration.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000826880 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelinesvc.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000824832 _____ (Microsoft Corporation) C:\Windows\system32\dsreg.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000822272 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000822208 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000819696 _____ (Microsoft Corporation) C:\Windows\system32\windows.applicationmodel.datatransfer.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000819200 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000816952 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntStreamingManager.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000814080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000813568 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000809984 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.Input.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000807936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EmailApis.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000801832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000796904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000793088 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000792808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputHost.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000783480 _____ (Microsoft Corporation) C:\Windows\system32\tcblaunch.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000782336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000781312 _____ (Microsoft Corporation) C:\Windows\system32\ChatApis.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000778552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Services.TargetedContent.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000777840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppContracts.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000777216 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentApis.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000776792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000768000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000759808 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000752584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2020-05-15 14:31 - 2020-05-15 14:31 - 000750080 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000748544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000747832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000743224 _____ (Microsoft Corporation) C:\Windows\system32\AppVReporting.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000742200 _____ (Microsoft Corporation) C:\Windows\system32\LicensingWinRT.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000738304 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Launcher.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000736768 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000735744 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000732160 _____ (Microsoft Corporation) C:\Windows\system32\windows.immersiveshell.serviceprovider.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000732160 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000729600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FlightSettings.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000716800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.AccountsControl.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000716312 _____ (Microsoft Corporation) C:\Windows\system32\StateRepository.Core.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000710656 _____ (Microsoft Corporation) C:\Windows\system32\JpMapControl.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000706544 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000705536 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000701952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BTAGService.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Mirage.Internal.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsreg.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000693672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000691712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Ocr.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000685368 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000683848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PCPKsp.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000683288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000679424 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000676072 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx02000.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000673456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000673296 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000672944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000668672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EdgeManager.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000666624 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000666424 _____ (Microsoft Corporation) C:\Windows\system32\AppVCatalog.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmIndexer.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000661816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2020-05-15 14:31 - 2020-05-15 14:31 - 000655360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentApis.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000652800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000650240 _____ (Microsoft Corporation) C:\Windows\system32\DevicesFlowBroker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000649728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000649728 _____ (Microsoft Corporation) C:\Windows\system32\wlidprov.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000649016 _____ (Microsoft Corporation) C:\Windows\system32\AppVPublishing.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000647168 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000643584 _____ (Microsoft Corporation) C:\Windows\system32\AssignedAccessManager.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000639400 _____ (Microsoft Corporation) C:\Windows\system32\msvcp_win.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000638464 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000637480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2020-05-15 14:31 - 2020-05-15 14:31 - 000636416 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000634680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2020-05-15 14:31 - 2020-05-15 14:31 - 000629760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.AllJoyn.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000628024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicensingWinRT.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000622592 _____ (Microsoft Corporation) C:\Windows\system32\TileDataRepository.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000621568 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000618496 _____ (Microsoft Corporation) C:\Windows\system32\CredProvDataModel.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000614400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000614400 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.LowLevel.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000613888 _____ (Microsoft Corporation) C:\Windows\system32\netprofmsvc.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000604160 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.Phone.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000602224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000600064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000599552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Payments.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000596992 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000594472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Perception.Stub.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000592944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000589384 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000584704 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000581544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.applicationmodel.datatransfer.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000580608 _____ (Microsoft Corporation) C:\Windows\system32\ddraw.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000579072 _____ (Microsoft Corporation) C:\Windows\system32\rasdlg.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000578560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000573952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000572200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryPS.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000569856 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000568136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000566784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Wallet.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000565248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.Input.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000564480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StateRepository.Core.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000562176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000559616 _____ (Microsoft Corporation) C:\Windows\system32\WwaApi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000557056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ChatApis.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000553664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000550400 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2020-05-15 14:31 - 2020-05-15 14:31 - 000547992 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.MediaControl.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000544256 _____ (Microsoft Corporation) C:\Windows\system32\usosvc.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000543824 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000540200 _____ (Microsoft Corporation) C:\Windows\system32\DMRServer.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000540160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SmartCards.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000539184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000535552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000534528 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Bluetooth.UserService.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000533504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000530944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ddraw.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000530432 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000526848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidprov.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000526336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000525824 _____ (Microsoft Corporation) C:\Windows\system32\sppcext.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000524208 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.Launcher.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000519680 _____ (Microsoft Corporation) C:\Windows\system32\WinBioDataModel.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000518456 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000513024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Activities.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000513024 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000512512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000509952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.Desktop.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000506368 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.PredictionUnit.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000502784 _____ C:\Windows\system32\AssignedAccessCsp.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000502272 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFiDirect.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000501200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp_win.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000500736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.UserAccountsHandlers.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000500224 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000497152 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000495616 _____ (Microsoft Corporation) C:\Windows\system32\RTMediaFrame.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000494904 _____ (Microsoft Corporation) C:\Windows\system32\TransportDSA.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000494592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasdlg.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000487424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppcext.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000486912 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000484352 _____ (Microsoft Corporation) C:\Windows\system32\MixedReality.Broker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000479744 _____ (Microsoft Corporation) C:\Windows\system32\BcastDVRClient.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000477696 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BlockedShutdown.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000477496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2020-05-15 14:31 - 2020-05-15 14:31 - 000476160 _____ (Microsoft Corporation) C:\Windows\system32\CloudDomainJoinDataModelServer.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000475648 _____ (Microsoft Corporation) C:\Windows\system32\MicrosoftAccountWAMExtension.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000474112 _____ (Microsoft Corporation) C:\Windows\system32\Geolocation.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000473600 _____ (Microsoft Corporation) C:\Windows\system32\rdpshell.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000471552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000470016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\daxexec.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000467952 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000466944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Picker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000466344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\policymanager.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000465920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.Workflow.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000460200 _____ (Microsoft Corporation) C:\Windows\system32\MusNotifyIcon.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000457216 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000457216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cldflt.sys
2020-05-15 14:31 - 2020-05-15 14:31 - 000456192 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.XboxLive.Storage.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000453944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000453632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000452608 _____ (Microsoft Corporation) C:\Windows\system32\slui.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000451584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TileDataRepository.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000448512 _____ (Microsoft Corporation) C:\Windows\system32\UserDataAccountApis.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000443904 _____ (Microsoft Corporation) C:\Windows\system32\edgeIso.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000442880 _____ (Microsoft Corporation) C:\Windows\system32\PhoneOm.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000442880 _____ (Microsoft Corporation) C:\Windows\system32\fhsettingsprovider.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000441856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.AllJoyn.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000441584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.MediaControl.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000441144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2020-05-15 14:31 - 2020-05-15 14:31 - 000439296 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000437248 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000435712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WwaApi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000435200 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000434176 _____ (Microsoft Corporation) C:\Windows\system32\MicrosoftAccountExtension.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000431616 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BioFeedback.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000431616 _____ (Microsoft Corporation) C:\Windows\system32\AccountsRt.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000430592 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Midi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000430080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000418816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000418304 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.NetworkOperators.ESim.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000416256 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000415808 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000410624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000410608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Devices.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000408576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SmartCards.Phone.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000408576 _____ (Microsoft Corporation) C:\Windows\system32\TaskApis.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000408064 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000406480 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000405424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000404992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Wallet.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000402944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Payments.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000400696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2020-05-15 14:31 - 2020-05-15 14:31 - 000399672 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.DataModel.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000396800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Lights.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000396088 _____ (Microsoft Corporation) C:\Windows\system32\AppVScripting.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000395776 _____ (Microsoft Corporation) C:\Windows\system32\umrdp.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000394240 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.Preview.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000392704 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000390968 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000386560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.LowLevel.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000386560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000386320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000384000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000384000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000380632 _____ (Microsoft Corporation) C:\Windows\system32\CredentialEnrollmentManager.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000375520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000374272 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Diagnostics.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000372224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000371712 _____ (Microsoft Corporation) C:\Windows\system32\PickerPlatform.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000370688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Geolocation.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000368640 _____ (Microsoft Corporation) C:\Windows\system32\CapabilityAccessManager.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000362496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Cortana.OneCore.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000361472 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000361472 _____ (Microsoft Corporation) C:\Windows\system32\rdpinit.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000359424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BcastDVRClient.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.WiFiDirect.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RTMediaFrame.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000353792 _____ (Microsoft Corporation) C:\Windows\system32\ConsoleLogon.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000353280 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000350720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AccountsRt.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000345016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000344576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhoneOm.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000343552 _____ (Microsoft Corporation) C:\Windows\system32\RADCUI.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000339824 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000338432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Picker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000335360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MicrosoftAccountWAMExtension.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000334336 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Cortana.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000333312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.SystemManagement.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000333128 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000331264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccountApis.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000330240 _____ (Microsoft Corporation) C:\Windows\system32\omadmclient.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000327680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgeIso.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000326656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000325432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000324608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys
2020-05-15 14:31 - 2020-05-15 14:31 - 000321536 _____ (Microsoft Corporation) C:\Windows\system32\wbadmin.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000318680 _____ (Microsoft Corporation) C:\Windows\system32\ExecModelClient.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000317440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Midi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000316416 _____ (Microsoft Corporation) C:\Windows\system32\SyncSettings.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000312832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\sppcommdlg.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000311096 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostBroker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000310928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Devices.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000308736 _____ (Microsoft Corporation) C:\Windows\system32\msIso.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000307712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000306688 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.CredDialogController.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000301064 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000299064 _____ (Microsoft Corporation) C:\Windows\system32\SIHClient.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000297472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TaskApis.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000293888 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000293888 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.Ngc.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000293376 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000292864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.Diagnostics.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000292864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000292864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RADCUI.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000292864 _____ (Microsoft Corporation) C:\Windows\system32\CXHProvisioningServer.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000290304 _____ (Microsoft Corporation) C:\Windows\system32\vaultcli.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000289792 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000287232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.Preview.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000283648 _____ (Microsoft Corporation) C:\Windows\system32\ComposerFramework.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000283136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.NetworkOperators.ESim.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000281088 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000280576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Usb.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000278080 _____ (Microsoft Corporation) C:\Windows\system32\LsaIso.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Lights.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000273744 _____ (Microsoft Corporation) C:\Windows\system32\wkspbroker.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000273408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Identity.Provider.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000273208 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostUser.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PickerPlatform.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000270336 _____ (Microsoft Corporation) C:\Windows\system32\DesktopSwitcherDataModel.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000268008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.ApplicationData.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000266552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SystemSettings.DataModel.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000265216 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000262848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000260328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000259384 _____ (Microsoft Corporation) C:\Windows\system32\AppVFileSystemMetadata.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000256000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000256000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ConsoleLogon.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000256000 _____ (Microsoft Corporation) C:\Windows\system32\UpdateDeploymentProvider.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000253952 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000251904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msIso.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000251392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winnat.sys
2020-05-15 14:31 - 2020-05-15 14:31 - 000250880 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000250696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2020-05-15 14:31 - 2020-05-15 14:31 - 000248832 _____ (Microsoft Corporation) C:\Windows\system32\PasswordEnrollmentManager.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000247856 _____ (Microsoft Corporation) C:\Windows\system32\weretw.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000246584 _____ (Microsoft Corporation) C:\Windows\system32\DataExchangeHost.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000245336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExecModelClient.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000244736 _____ (Microsoft Corporation) C:\Windows\system32\PhoneCallHistoryApis.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000242688 _____ (Microsoft Corporation) C:\Windows\system32\CapabilityAccessManagerClient.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.CredDialogController.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000240128 _____ (Microsoft Corporation) C:\Windows\system32\dialclient.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000238904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.Workplace.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000237056 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000236032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icm32.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDeviceRegistration.Ngc.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000235008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Devices.Sensors.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000233472 _____ (Microsoft Corporation) C:\Windows\system32\tapi32.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000232448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.SystemManagement.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000231936 _____ (Microsoft Corporation) C:\Windows\system32\InstallServiceTasks.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000231912 _____ (Microsoft Corporation) C:\Windows\system32\deviceaccess.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000231424 _____ (Microsoft Corporation) C:\Windows\system32\HoloShellRuntime.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000231224 _____ (Microsoft Corporation) C:\Windows\system32\AppVShNotify.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000230416 _____ (Microsoft Corporation) C:\Windows\system32\AppVStreamMap.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000229888 _____ (Microsoft Corporation) C:\Windows\system32\RdpRelayTransport.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000228352 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncSettings.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000227840 _____ (Microsoft Corporation) C:\Windows\system32\IndexedDbLegacy.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000227328 _____ (Microsoft Corporation) C:\Windows\system32\netprofm.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000225792 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000224768 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE
2020-05-15 14:31 - 2020-05-15 14:31 - 000224256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vaultcli.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000223744 _____ (Microsoft Corporation) C:\Windows\system32\bthserv.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000222720 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000222208 _____ (Microsoft Corporation) C:\Windows\system32\DataExchange.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000221496 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000221184 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000220672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000220672 _____ (Microsoft Corporation) C:\Windows\system32\MtcModel.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000220160 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Radios.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000217088 _____ (Microsoft Corporation) C:\Windows\system32\tspubwmi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000216576 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Core.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000215040 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000215040 _____ (Microsoft Corporation) C:\Windows\system32\DiagSvc.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000211256 _____ (Microsoft Corporation) C:\Windows\system32\tcbloader.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetails.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000209208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryClient.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000208384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryUpgrade.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000208384 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000206336 _____ (Microsoft Corporation) C:\Windows\system32\useractivitybroker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000204800 _____ (Microsoft Corporation) C:\Windows\system32\SwitcherDataModel.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000202552 _____ (Microsoft Corporation) C:\Windows\system32\AppVStreamingUX.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000201728 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000201728 _____ (Microsoft Corporation) C:\Windows\system32\AppXApplicabilityBlob.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000200192 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Internal.Input.ExpressiveInput.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000199992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000197632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.WiFi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000197432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostUser.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000193592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\weretw.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tapi32.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000193024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msutb.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000188928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000188416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000188416 _____ (Microsoft Corporation) C:\Windows\system32\rdsdwmdr.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000187904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Haptics.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE
2020-05-15 14:31 - 2020-05-15 14:31 - 000185952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceaccess.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000184832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000183808 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Energy.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000183296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DataExchange.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000182784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netprofm.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000181760 _____ (Microsoft Corporation) C:\Windows\system32\rdpinput.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000181560 _____ (Microsoft Corporation) C:\Windows\system32\AppVDllSurrogate.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallServiceTasks.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000179712 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.Compression.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000179712 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhoneCallHistoryApis.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000179200 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Clipboard.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000178688 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Graphics.Display.DisplayEnhancementManagement.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000178688 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000178176 _____ (Microsoft Corporation) C:\Windows\system32\AppExtension.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000177664 _____ (Microsoft Corporation) C:\Windows\system32\ConsentUxClient.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000176440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Management.Workplace.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IndexedDbLegacy.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000172856 _____ (Microsoft Corporation) C:\Windows\system32\AppVNice.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\HoloShellRuntime.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dialclient.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000170496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryUpgrade.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000170496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.CapturePicker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000169472 _____ (Microsoft Corporation) C:\Windows\system32\SpatialAudioLicenseSrv.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000166912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Scanners.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000165176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryClient.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000164352 _____ (Microsoft Corporation) C:\Windows\system32\gamingtcui.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ErrorDetails.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthBroker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDeviceRegistration.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000160768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CapabilityAccessManagerClient.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Devices.Sensors.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000159744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Core.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000156160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Radios.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000155136 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000152416 _____ (Microsoft Corporation) C:\Windows\system32\KerbClientShared.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\useractivitybroker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\fdWSD.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000151040 _____ (Microsoft Corporation) C:\Windows\system32\VoipRT.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000150528 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SerialCommunication.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000147968 _____ (Microsoft Corporation) C:\Windows\system32\Family.Client.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000147776 _____ (Microsoft Corporation) C:\Windows\system32\aadWamExtension.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000144896 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SpatialAudioLicenseSrv.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\easwrt.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000142760 _____ (Microsoft Corporation) C:\Windows\system32\LicensingUI.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000141824 _____ (Microsoft Corporation) C:\Windows\system32\socialapis.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000140800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Energy.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000140800 _____ (Microsoft Corporation) C:\Windows\system32\slc.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000139952 _____ (Microsoft Corporation) C:\Windows\system32\MixedRealityRuntime.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000139776 _____ (Microsoft Corporation) C:\Windows\system32\Chakrathunk.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000138240 _____ (Microsoft Corporation) C:\Windows\system32\TelephonyInteractiveUser.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000136704 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Profile.RetailInfo.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000136192 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000135680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.Compression.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000135680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Haptics.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000135168 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000133632 _____ (Microsoft Corporation) C:\Windows\system32\appvetwclientres.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000133120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppExtension.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000132712 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Display.BrightnessOverride.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000132608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Graphics.Display.DisplayEnhancementManagement.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000132096 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Storage.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000130560 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingExperienceMEM.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\CredDialogBroker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000129024 _____ (Microsoft Corporation) C:\Windows\system32\UtcDecoderHost.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\usoapi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\CameraCaptureUI.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000128000 _____ (Microsoft Corporation) C:\Windows\system32\CaptureService.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000127064 _____ (Microsoft Corporation) C:\Windows\system32\win32u.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdWSD.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000126976 _____ (Microsoft Corporation) C:\Windows\system32\wkspbrokerAx.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000125952 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000125440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Credentials.UI.UserConsentVerifier.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000125440 _____ (Microsoft Corporation) C:\Windows\system32\wercplsupport.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000124504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KerbClientShared.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gamingtcui.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000121344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidbth.sys
2020-05-15 14:31 - 2020-05-15 14:31 - 000119808 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000119296 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000118784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slc.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000117760 _____ (Microsoft Corporation) C:\Windows\system32\PeopleAPIs.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000117048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadWamExtension.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000115712 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000114688 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000114688 _____ (Microsoft Corporation) C:\Windows\system32\WaaSAssessment.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000112640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VoipRT.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000109056 _____ C:\Windows\system32\RDVGHelper.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000108032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\socialapis.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000108032 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000107616 _____ (Microsoft Corporation) C:\Windows\system32\phoneactivate.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.AI.MachineLearning.Preview.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\BcastDVRBroker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000107008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SerialCommunication.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000105984 _____ (Microsoft Corporation) C:\Windows\system32\utcutil.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000105840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MixedRealityRuntime.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000105472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakrathunk.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000104248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryBroker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000102216 _____ (Microsoft Corporation) C:\Windows\system32\changepk.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\Family.Authentication.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000100352 _____ (Microsoft Corporation) C:\Windows\system32\DiagnosticInvoker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000099840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.Profile.RetailInfo.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000099104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Display.BrightnessOverride.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000098304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wkspbrokerAx.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000097280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\compstui.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000096256 _____ (Microsoft Corporation) C:\Windows\system32\winsrvext.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CameraCaptureUI.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000092672 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000091648 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Graphics.Display.DisplayColorManagement.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Credentials.UI.UserConsentVerifier.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000090936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryBroker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000090112 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Printers.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000089912 _____ (Microsoft Corporation) C:\Windows\system32\DeviceReactivation.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000089600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000089328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32u.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.AI.MachineLearning.Preview.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000088352 _____ (Microsoft Corporation) C:\Windows\system32\remoteaudioendpoint.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000088280 _____ (Microsoft Corporation) C:\Windows\system32\coloradapterclient.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\rdpsign.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PeopleAPIs.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\mbussdapi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dtdump.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BcastDVRBroker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usoapi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\CustomInstallExec.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000077312 _____ (Microsoft Corporation) C:\Windows\system32\TSSessionUX.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\autopilot.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DiagnosticInvoker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000073024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remoteaudioendpoint.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000071168 _____ (Microsoft Corporation) C:\Windows\system32\ffbroker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000070656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000070144 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000069704 _____ (Microsoft Corporation) C:\Windows\system32\WindowsManagementServiceWinRt.ProxyStub.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000068608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbussdapi.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000068408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceReactivation.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000068096 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000068096 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Printers.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000066832 _____ (Microsoft Corporation) C:\Windows\system32\iumcrypt.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\findnetprinters.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Graphics.Display.DisplayColorManagement.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\iemigplugin.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\coloradapterclient.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\tbauth.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\printui.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\ConfigureExpandedStorage.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iemigplugin.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000060432 _____ (Microsoft Corporation) C:\Windows\system32\CloudNotifications.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\AssignedAccessRuntime.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000059192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storufs.sys
2020-05-15 14:31 - 2020-05-15 14:31 - 000058880 _____ C:\Windows\system32\runexehelper.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000058696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2020-05-15 14:31 - 2020-05-15 14:31 - 000058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000057856 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000057856 _____ (Microsoft Corporation) C:\Windows\system32\wcimage.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000057344 _____ (Microsoft Corporation) C:\Windows\system32\audioresourceregistrar.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\findnetprinters.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ffbroker.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudNotifications.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbauth.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ConfigureExpandedStorage.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000048128 _____ (Microsoft Corporation) C:\Windows\system32\ddrawex.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AssignedAccessRuntime.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000047000 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000046592 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelineprxy.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf3216.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000046080 _____ (Microsoft Corporation) C:\Windows\system32\RdpSa.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000045568 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryCore.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000045056 _____ (Microsoft Corporation) C:\Windows\system32\npmproxy.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000044544 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.Common.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\LaunchWinApp.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\UpgradeResultsUI.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ddrawex.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000040448 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RdpSa.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000037688 _____ (Microsoft Corporation) C:\Windows\system32\SyncAppvPublishingServer.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000036864 _____ (Microsoft Corporation) C:\Windows\system32\TokenBrokerCookies.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2020-05-15 14:31 - 2020-05-15 14:31 - 000033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LaunchWinApp.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000032768 _____ (Microsoft Corporation) C:\Windows\system32\XblGameSaveTask.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryCore.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000031232 _____ (Microsoft Corporation) C:\Windows\system32\FaxPrinterInstaller.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\KNetPwrDepBroker.sys
2020-05-15 14:31 - 2020-05-15 14:31 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\RdpSaProxy.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\nlmproxy.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000029184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBrokerCookies.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RdpSaProxy.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\npmproxy.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000023552 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000023040 _____ (Microsoft Corporation) C:\Windows\system32\dsregtask.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\slcext.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000022032 _____ (Microsoft Corporation) C:\Windows\system32\ScriptRunner.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000019968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slcext.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000019456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsregtask.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000018944 _____ (Microsoft Corporation) C:\Windows\system32\localui.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000018432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlmproxy.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\nlmsprep.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlmsprep.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000013824 _____ (Microsoft Corporation) C:\Windows\system32\appvetwstreamingux.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000010752 _____ (Microsoft Corporation) C:\Windows\system32\plasrv.exe
2020-05-15 14:31 - 2020-05-15 14:31 - 000010752 _____ (Microsoft Corporation) C:\Windows\system32\DMAlertListener.ProxyStub.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000008192 _____ (Microsoft Corporation) C:\Windows\system32\msimg32.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DMAlertListener.ProxyStub.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimg32.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000003072 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2020-05-15 14:31 - 2020-05-15 14:31 - 000000315 _____ C:\Windows\system32\DrtmAuth9.bin
2020-05-15 14:31 - 2020-05-15 14:31 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2020-05-15 14:31 - 2020-05-15 14:31 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2020-05-15 14:31 - 2020-05-15 14:31 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2020-05-15 14:31 - 2020-05-15 14:31 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2020-05-15 14:31 - 2020-05-15 14:31 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2020-05-15 14:31 - 2020-05-15 14:31 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2020-05-15 14:31 - 2020-05-15 14:31 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2020-05-15 14:31 - 2020-05-15 14:31 - 000000315 _____ C:\Windows\system32\DrtmAuth12.bin
2020-05-15 14:31 - 2020-05-15 14:31 - 000000315 _____ C:\Windows\system32\DrtmAuth11.bin
2020-05-15 14:31 - 2020-05-15 14:31 - 000000315 _____ C:\Windows\system32\DrtmAuth10.bin
2020-05-15 14:31 - 2020-05-15 14:31 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
2020-05-13 17:31 - 2020-05-15 12:17 - 000000412 __RSH C:\ProgramData\ntuser.pol
2020-05-07 22:58 - 2020-05-20 12:25 - 000000000 ____D C:\Users\kaPL74\Documents\My Games
2020-05-07 22:58 - 2020-05-07 22:58 - 000000000 ____D C:\Users\Public\Documents\Epic
2020-05-07 22:58 - 2020-05-07 22:58 - 000000000 ____D C:\Users\kaPL74\AppData\Local\Saber
2020-05-04 21:22 - 2020-05-06 18:05 - 000000000 ____D C:\Users\kaPL74\AppData\Roaming\SpinTires MudRunner
2020-05-04 21:22 - 2020-05-04 21:22 - 000000000 ____D C:\Users\Public\Documents\Steam
2020-05-03 19:28 - 2020-05-03 19:28 - 000000000 ____D C:\Users\kaPL74\AppData\Local\PeerDistRepub
2020-05-03 19:04 - 2020-05-03 19:04 - 000000000 ____D C:\Windows\system32\Tasks\S-1-5-21-3640345311-2590231575-3648685039-1001
2020-05-03 09:27 - 2014-02-13 23:59 - 000024064 _____ C:\Windows\zoek-delete.exe
2020-05-02 08:36 - 2020-05-02 08:36 - 000153312 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2020-05-02 08:36 - 2020-05-02 08:36 - 000020936 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamElam.sys
2020-05-02 08:36 - 2020-05-02 08:36 - 000001993 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2020-05-02 08:36 - 2020-05-02 08:36 - 000000000 ____D C:\Users\kaPL74\AppData\Local\mbamtray
2020-05-02 08:36 - 2020-05-02 08:36 - 000000000 ____D C:\Users\kaPL74\AppData\Local\mbam
2020-05-02 08:36 - 2020-05-02 08:36 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-05-02 08:36 - 2020-05-02 08:36 - 000000000 ____D C:\Program Files\Malwarebytes
2020-05-01 21:15 - 2020-05-01 21:15 - 000000000 ____D C:\Users\kaPL74\Documents\Ashampoo Burning Studio 21
2020-05-01 21:10 - 2020-05-01 21:10 - 000000000 ____D C:\Users\kaPL74\AppData\Roaming\Ashampoo
2020-05-01 21:08 - 2020-05-01 21:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2020-05-01 21:08 - 2020-05-01 21:08 - 000000000 ____D C:\ProgramData\Ashampoo
2020-05-01 21:07 - 2020-05-01 21:07 - 000000000 ____D C:\Program Files (x86)\Ashampoo

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-05-30 23:21 - 2020-02-29 20:58 - 000000000 ____D C:\Users\Public\Documents\Winstep
2020-05-30 23:21 - 2020-02-29 19:31 - 000000000 ____D C:\Users\kaPL74\AppData\LocalLow\Mozilla
2020-05-30 23:20 - 2020-02-29 18:58 - 001694640 _____ C:\Windows\system32\PerfStringBackup.INI
2020-05-30 23:20 - 2019-03-19 13:57 - 000717182 _____ C:\Windows\system32\perfh005.dat
2020-05-30 23:20 - 2019-03-19 13:57 - 000145262 _____ C:\Windows\system32\perfc005.dat
2020-05-30 23:20 - 2019-03-19 06:50 - 000000000 ____D C:\Windows\INF
2020-05-30 23:16 - 2020-03-08 21:47 - 000000000 ____D C:\ProgramData\NVIDIA
2020-05-30 23:14 - 2020-02-29 18:58 - 000017609 _____ C:\ProgramData\NVDisplay.ContainerLocalSystem.log_backup1
2020-05-30 23:14 - 2020-02-29 18:58 - 000011779 _____ C:\ProgramData\DisplaySessionContainer1.log_backup1
2020-05-30 23:14 - 2020-02-29 18:58 - 000008675 _____ C:\ProgramData\NVDisplayContainerWatchdog.log_backup1
2020-05-30 23:14 - 2020-02-29 18:49 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-05-30 23:14 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-05-30 23:14 - 2019-03-19 06:37 - 000524288 _____ C:\Windows\system32\config\BBI
2020-05-30 23:13 - 2020-02-29 19:16 - 000001209 _____ C:\ProgramData\NvcDispCorePlugin.log_backup1
2020-05-30 23:01 - 2020-02-29 21:05 - 000000000 ____D C:\Users\kaPL74\AppData\Roaming\vlc
2020-05-30 22:26 - 2020-02-29 21:33 - 000000000 ____D C:\Users\kaPL74\AppData\Local\CrashDumps
2020-05-30 18:41 - 2020-02-29 18:49 - 000000000 ____D C:\Windows\system32\SleepStudy
2020-05-30 11:06 - 2020-02-29 23:49 - 000000000 ____D C:\Users\kaPL74\Documents\Euro Truck Simulator 2
2020-05-30 10:33 - 2020-02-29 23:17 - 000000000 ____D C:\Program Files (x86)\Steam
2020-05-30 10:16 - 2020-03-06 01:17 - 000020248 _____ C:\ProgramData\DisplaySessionContainer5.log_backup1
2020-05-30 09:38 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-05-30 09:38 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\AppReadiness
2020-05-27 22:05 - 2020-03-04 23:32 - 000013974 _____ C:\ProgramData\DisplaySessionContainer4.log_backup1
2020-05-26 23:08 - 2020-03-03 10:42 - 000013593 _____ C:\ProgramData\DisplaySessionContainer3.log_backup1
2020-05-26 16:23 - 2020-02-29 23:35 - 000000000 ____D C:\Users\kaPL74\Documents\American Truck Simulator
2020-05-25 20:35 - 2020-02-29 18:59 - 000014292 _____ C:\ProgramData\DisplaySessionContainer2.log_backup1
2020-05-24 19:26 - 2020-03-01 11:58 - 000000000 ____D C:\Users\kaPL74\Documents\ConvertXToDVD
2020-05-24 19:24 - 2020-04-13 17:19 - 000000000 ____D C:\Users\kaPL74\AppData\Roaming\dvdcss
2020-05-24 13:40 - 2020-02-29 18:59 - 000000000 ____D C:\Users\kaPL74\AppData\Local\Packages
2020-05-21 20:29 - 2020-03-06 13:11 - 000013982 _____ C:\ProgramData\DisplaySessionContainer6.log_backup1
2020-05-20 20:59 - 2020-02-29 23:10 - 000000000 ____D C:\Program Files\Common Files\Adobe
2020-05-20 20:59 - 2020-02-29 23:09 - 000000000 ____D C:\ProgramData\Adobe
2020-05-20 20:59 - 2020-02-29 18:59 - 000000000 ____D C:\Users\kaPL74\AppData\Roaming\Adobe
2020-05-20 20:58 - 2020-03-01 01:22 - 000000000 ____D C:\Program Files\Adobe
2020-05-20 20:58 - 2020-02-29 23:10 - 000000000 ____D C:\Users\kaPL74\AppData\Local\D3DSCache
2020-05-20 07:40 - 2020-02-29 23:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2020-05-18 22:36 - 2020-03-25 11:27 - 004195672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2020-05-18 22:36 - 2020-03-08 21:44 - 004928256 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2020-05-16 17:08 - 2020-02-29 20:10 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2020-05-15 15:08 - 2020-02-29 18:59 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-05-15 15:08 - 2020-02-29 18:59 - 000000000 ___RD C:\Users\kaPL74\3D Objects
2020-05-15 15:07 - 2020-02-29 19:31 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-05-15 15:07 - 2020-02-29 18:49 - 000446208 _____ C:\Windows\system32\FNTCACHE.DAT
2020-05-15 15:06 - 2019-03-19 13:59 - 000000000 ___SD C:\Windows\system32\AppV
2020-05-15 15:06 - 2019-03-19 06:52 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2020-05-15 15:06 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\TextInput
2020-05-15 15:06 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\SysWOW64\Dism
2020-05-15 15:06 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\SystemResources
2020-05-15 15:06 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\oobe
2020-05-15 15:06 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\system32\Dism
2020-05-15 15:06 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\ShellExperiences
2020-05-15 15:06 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\Provisioning
2020-05-15 15:06 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\PolicyDefinitions
2020-05-15 15:06 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\bcastdvr
2020-05-15 14:37 - 2020-02-29 21:12 - 000000000 ____D C:\Windows\system32\MRT
2020-05-15 14:37 - 2019-03-19 06:37 - 000000000 ____D C:\Windows\CbsTemp
2020-05-15 14:35 - 2020-02-29 21:12 - 120636720 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2020-05-15 14:31 - 2020-02-29 18:55 - 002874880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2020-05-13 19:07 - 2020-03-30 22:16 - 000013985 _____ C:\ProgramData\DisplaySessionContainer10.log_backup1
2020-05-13 17:31 - 2019-03-19 06:52 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2020-05-13 17:31 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
2020-05-12 10:51 - 2020-03-30 13:25 - 000013593 _____ C:\ProgramData\DisplaySessionContainer9.log_backup1
2020-05-11 22:58 - 2020-03-29 21:03 - 000013982 _____ C:\ProgramData\DisplaySessionContainer8.log_backup1
2020-05-10 22:08 - 2020-03-06 21:48 - 000011786 _____ C:\ProgramData\DisplaySessionContainer7.log_backup1
2020-05-08 11:14 - 2020-02-29 19:17 - 000000000 ____D C:\Users\kaPL74\AppData\Local\NVIDIA
2020-05-07 23:59 - 2020-04-09 16:11 - 000000000 ____D C:\Games
2020-05-04 19:02 - 2020-02-29 18:54 - 000000000 ____D C:\Windows\minidump
2020-05-02 13:05 - 2020-03-01 11:15 - 000000000 ____D C:\Tiskárna EPSON
2020-05-02 08:39 - 2020-02-29 19:05 - 000000000 ____D C:\Users\kaPL74\AppData\Local\Comms
2020-05-02 08:38 - 2020-02-29 18:59 - 000000000 ____D C:\Users\kaPL74\AppData\Local\VirtualStore
2020-05-02 08:36 - 2019-03-19 06:52 - 000000000 ___HD C:\Windows\ELAMBKUP
2020-05-02 08:26 - 2019-03-19 06:52 - 000000000 ____D C:\Windows\LiveKernelReports

==================== Files in the root of some directories ========

2020-03-01 11:59 - 2020-03-01 11:59 - 000099384 _____ () C:\Users\kaPL74\AppData\Roaming\inst.exe
2020-03-01 11:59 - 2020-03-01 11:59 - 000007859 _____ () C:\Users\kaPL74\AppData\Roaming\pcouffin.cat
2020-03-01 11:59 - 2020-03-01 11:59 - 000001167 _____ () C:\Users\kaPL74\AppData\Roaming\pcouffin.inf
2020-03-01 11:59 - 2020-03-01 11:59 - 000082816 _____ (VSO Software) C:\Users\kaPL74\AppData\Roaming\pcouffin.sys

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Uživatelský avatar
kodl74
Návštěvník
Návštěvník
Příspěvky: 178
Registrován: 10 kvě 2007 17:14

Re: Prosím o jednu preventivku, Děkuji

#3 Příspěvek od kodl74 »

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 30-05-2020 01
Ran by kaPL74 (30-05-2020 23:21:53)
Running from C:\Users\kaPL74\Desktop
Windows 10 Pro Version 1909 18363.836 (X64) (2020-02-29 16:54:14)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3640345311-2590231575-3648685039-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3640345311-2590231575-3648685039-503 - Limited - Disabled)
Guest (S-1-5-21-3640345311-2590231575-3648685039-501 - Limited - Disabled)
kaPL74 (S-1-5-21-3640345311-2590231575-3648685039-1001 - Administrator - Enabled) => C:\Users\kaPL74
WDAGUtilityAccount (S-1-5-21-3640345311-2590231575-3648685039-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Security (Enabled - Up to date) {885D845F-AF19-0124-FECE-FFF49D00F440}
FW: ESET Firewall (Enabled) {B066057A-E576-007C-D591-56C163D3B33B}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Photoshop 2020 (HKLM-x32\...\PHSP_21_1_3) (Version: 21.1.3 - Adobe Inc.)
Aktualizace NVIDIA 38.0.5.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 38.0.5.0 - NVIDIA Corporation) Hidden
All Elemental Set (Splash + Fire + Explosion) version 9.1 (HKLM-x32\...\{7E4DD524-E3CC-42A4-87C4-BC6A4CCF4EAB}_is1) (Version: 9.1 - ask4pc)
Ashampoo Burning Studio 21 (HKLM-x32\...\{91B33C97-3390-FD9A-8E0F-3F6BA7865E46}_is1) (Version: 21.6.0 - Ashampoo GmbH & Co. KG)
Creepy Hallow Pack version 9.1 (HKLM-x32\...\{AFA9DCE6-12A6-4025-B818-B60277A41C67}_is1) (Version: 9.1 - ask4pc)
DIY Set version 9.1 (HKLM-x32\...\{7E37B885-1632-4490-8D82-EA9CD6BB7145}_is1) (Version: 9.1 - ask4pc)
Easy Photo Scan (HKLM-x32\...\{9E3F2EC3-7E4F-4F20-A56F-7A24D6E3D39B}) (Version: 1.00.0017 - Seiko Epson Corporation)
Epson Easy Photo Print 2 (HKLM-x32\...\{7E0261C4-8495-4365-BE48-647701D8B9BD}) (Version: 2.8.3.0 - Seiko Epson Corporation)
Epson Event Manager (HKLM-x32\...\{49048EBF-3803-4AA4-8943-675E6E8D5B30}) (Version: 3.11.0030 - Seiko Epson Corporation)
Epson E-Web Print (HKLM-x32\...\{6BF9F374-EC67-4808-A90C-F127DE6D989D}) (Version: 1.23.0000 - SEIKO EPSON CORPORATION)
Epson Photo+ (HKLM-x32\...\{5874C85E-A911-4A7E-8643-DB2C4322CBBF}) (Version: 3.1.0.0 - Seiko Epson Corporation)
Epson Printer Connection Checker (HKLM-x32\...\{FFA5C174-DB3F-4AFE-B59D-C0FB1744CD76}) (Version: 3.1.0.0 - Seiko Epson Corporation)
Epson Scan 2 (HKLM-x32\...\Epson Scan 2) (Version: - Seiko Epson Corporation)
EPSON Scan OCR Component (HKLM-x32\...\{563B99D8-8895-4E3E-AE8D-15BE8C05F1C1}) (Version: 3.00.04 - SEIKO EPSON Corp.)
EPSON Scan PDF EXtensions (HKLM-x32\...\{F9956472-6E16-4F83-BF9A-F887EF4A45B7}) (Version: 1.03.02 - SEIKO EPSON Corp.)
Epson ScanSmart (HKLM-x32\...\{7565F1C6-8DDF-4057-9152-2281A66F4BD3}) (Version: 3.4.1 - Seiko Epson Corporation)
ESET Security (HKLM\...\{D8E84711-EDFC-4D4E-B579-95AEB40DAA4D}) (Version: 13.1.21.0 - ESET, spol. s r.o.)
Galaxy Adventure Set version 9.1 (HKLM-x32\...\{1B5139EF-8CA2-46C1-A13B-67ACC703A395}_is1) (Version: 9.1 - ask4pc)
Chinese Calligraphy Pack version 9.1 (HKLM-x32\...\{CE274064-4D1B-4202-8E1B-C5C7AB403A09}_is1) (Version: 9.1 - ask4pc)
Chinese New Year Pack version 9.1 (HKLM-x32\...\{74F5288B-6C9C-4AA7-81E5-F212B9C24A3F}_is1) (Version: 9.1 - ask4pc)
Japanese TV Opener Pack version 9.1 (HKLM-x32\...\{744A7BB2-5576-4CE0-A640-931710A190CE}_is1) (Version: 9.1 - ask4pc)
Logitech Options (HKLM\...\LogiOptions) (Version: 8.20.329 - Logitech)
Malwarebytes version 4.1.0.56 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.1.0.56 - Malwarebytes)
Microsoft Office Professional Plus 2016 - cs-cz (HKLM\...\ProPlusRetail - cs-cz) (Version: 16.0.12730.20270 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 (HKLM-x32\...\{6913e92a-b64e-41c9-a5e6-cef39207fe89}) (Version: 14.25.28508.3 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\...\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation)
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek)
Mozilla Firefox 76.0.1 (x64 cs) (HKLM\...\Mozilla Firefox 76.0.1 (x64 cs)) (Version: 76.0.1 - Mozilla)
MSI Gaming APP (HKLM-x32\...\{E0229316-E73B-484B-B9E0-45098AB38D8C}}_is1) (Version: 6.2.0.76 - MSI)
Musical Fantasy Set version 9.1 (HKLM-x32\...\{EE2E163D-830E-4692-877A-81DE7AF9875A}_is1) (Version: 9.1 - ask4pc)
Neon Set version 9.1 (HKLM-x32\...\{4FA648C0-8941-46DA-A963-B95618512532}_is1) (Version: 9.1 - ask4pc)
Nexus (HKLM-x32\...\Winstep Xtreme_is1) (Version: - )
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.19 - NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 3.20.3.63 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.3.63 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 446.14 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 446.14 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
Odinstalace tiskárny EPSON L3150 Series (HKLM\...\EPSON L3150 Series) (Version: - Seiko Epson Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.12730.20250 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.12730.20250 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.12730.20250 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0405-0000-0000000FF1CE}) (Version: 16.0.12730.20250 - Microsoft Corporation) Hidden
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.317.1 - Tracker Software Products Ltd)
Příručky společnosti EPSON (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.56.1.0 - Seiko Epson Corporation)
Revo Uninstaller Pro 3.2.1 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.2.1 - VS Revo Group, Ltd.)
Samsung NVM Express Driver (HKLM-x32\...\{ff94c273-58d5-40b5-b03a-9bd41d5cff1e}) (Version: 3.3.0.2003 - Samsung Electronics)
Samsung NVM Express Driver 3.3.0.2003 (HKLM\...\{89D55DD5-FE94-497B-B5E5-91915D52DBF2}) (Version: 3.3.0.2003 - Samsung Electronics Co., Ltd) Hidden
Simple Media Pack version 9.1 (HKLM-x32\...\{558FE06B-DF03-411F-9B1F-7C63EBAC6319}_is1) (Version: 9.1 - ask4pc)
Skype verze 8.60 (HKLM-x32\...\Skype_is1) (Version: 8.60 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Super Comics Set version 9.1 (HKLM-x32\...\{56291CF6-557E-459F-8A05-AF464ED3AE39}_is1) (Version: 9.1 - ask4pc)
Unicorn Set version 9.1 (HKLM-x32\...\{011964A4-C3B6-4196-9F73-46AE94CA2BCF}_is1) (Version: 9.1 - ask4pc)
Urban Style Set version 9.1 (HKLM-x32\...\{EB833445-184D-417D-B79F-8429F8950279}_is1) (Version: 9.1 - ask4pc)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.8 - VideoLAN)
VSO ConvertXToDVD 7 (HKLM-x32\...\{A021D003-6933-4EA4-B582-F1D0C3E52409}_is1) (Version: 7.0.0.56 - VSO Software)
Wargaming.net Game Center (HKU\S-1-5-21-3640345311-2590231575-3648685039-1001\...\Wargaming.net Game Center) (Version: 20.1.1.9717 - Wargaming.net)
WinRAR Winrar v.5.80 Final - 11.12.2019 (HKLM-x32\...\WinRAR Winrar v.5.80 Final - 11.12.2019) (Version: Winrar v.5.80 Final - 11.12.2019 - Libbi)
Wondershare Filmora9(Build 9.3.6) (HKLM\...\Wondershare Filmora9_is1) (Version: - Wondershare Software)
Wondershare Helper Compact 2.6.0 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.6.0 - Wondershare)
World of Tanks EU (HKU\S-1-5-21-3640345311-2590231575-3648685039-1001\...\WOT.EU.PRODUCTION) (Version: - Wargaming.net)

Packages:
=========
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-02-29] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-02-29] (Microsoft Corporation) [MS Ad]
Microsoft Zprávy -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.39.21431.0_x64__8wekyb3d8bbwe [2020-05-30] (Microsoft Corporation)
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.956.0_x64__56jybvy8sckqj [2020-03-08] (NVIDIA Corp.)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3640345311-2590231575-3648685039-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\kaPL74\AppData\Local\Microsoft\OneDrive\19.232.1124.0008_1\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-3640345311-2590231575-3648685039-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\kaPL74\AppData\Local\Microsoft\OneDrive\19.232.1124.0008_1\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-3640345311-2590231575-3648685039-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\kaPL74\AppData\Local\Microsoft\OneDrive\19.232.1124.0008_1\amd64\FileSyncShell64.dll => No File
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2020-04-03] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2020-04-03] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-05-02] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d5216eae94436d77\nvshext.dll [2020-05-18] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2020-04-03] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-05-02] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2016-12-15] (VS Revo Group -> VS Revo Group)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-12-05] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2020-02-29 23:17 - 2020-05-12 18:39 - 001899520 _____ () [File not signed] C:\Program Files (x86)\Microsoft\Skype for Desktop\ffmpeg.dll
2020-02-29 23:17 - 2020-05-12 18:39 - 000115712 _____ () [File not signed] C:\Program Files (x86)\Microsoft\Skype for Desktop\libegl.dll
2020-02-29 23:17 - 2020-05-12 18:39 - 006668800 _____ () [File not signed] C:\Program Files (x86)\Microsoft\Skype for Desktop\libglesv2.dll
2020-04-01 10:34 - 2017-08-02 14:48 - 000237568 _____ () [File not signed] C:\Program Files (x86)\MSI\Gaming APP\LEDControl.dll
2020-04-01 10:34 - 2015-06-23 16:41 - 000082432 _____ (Fintek) [File not signed] C:\Program Files (x86)\MSI\Gaming APP\Lib\FintekUSBDll.dll
2020-04-01 10:34 - 2016-10-03 13:43 - 000399872 _____ (TODO: <公司名稱>) [File not signed] C:\Program Files (x86)\MSI\Gaming APP\Lib\SDKDLL.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-03-19 06:49 - 2020-05-03 09:12 - 000000841 _____ C:\Windows\system32\drivers\etc\hosts
127.0.0.1 localhost

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3640345311-2590231575-3648685039-1001\Control Panel\Desktop\\Wallpaper -> c:\users\kapl74\appdata\roaming\microsoft\windows photo viewer\tapeta programu windows prohlížeč fotografií.jpg
DNS Servers: 192.168.100.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "Wondershare Helper Compact.exe"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKLM\...\StartupApproved\Run32: => "EEventManager"
HKU\S-1-5-21-3640345311-2590231575-3648685039-1001\...\StartupApproved\StartupFolder: => "Poslat do aplikace OneNote.lnk"
HKU\S-1-5-21-3640345311-2590231575-3648685039-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-3640345311-2590231575-3648685039-1001\...\StartupApproved\Run: => "CCXProcess"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{047C5850-B00E-4B3B-91C7-4F3947BC516E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{E42AF226-75AE-4047-8B9E-430FD642AE8F}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{44905040-817F-4303-BF23-27F28C78F798}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C0EAB2B5-272D-481D-87BC-E6F4D88BF43A}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8D9C423E-4690-426D-A043-2572FB08E48C}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{91C71BB2-0159-465F-ACCE-610835CDBC98}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{792FDF47-5350-4D52-8CAE-4521924497EA}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{FE34723E-2B6D-4FFC-B3AE-B250CEBECB60}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{B4B4FC33-2AD5-442C-8083-B74880E57049}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{17FFFC6A-917A-44F4-A8B5-81900BE80486}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
FirewallRules: [{3F90DC5F-93C2-4BD3-944A-02921D9CD710}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
FirewallRules: [{94A278DA-F922-45C5-93C1-97481553ED7F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\American Truck Simulator\bin\win_x64\amtrucks.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{8502FE09-C3C3-48B2-8614-1F77E1F45C03}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\American Truck Simulator\bin\win_x64\amtrucks.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{88E16755-3D9B-41FD-B3B8-2D85A857C763}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{D9A94214-C8E8-4230-80EE-5C782497DB7F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{5D4C55C2-E162-43DE-87A5-9C75400F39A2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{57A952ED-4D02-45BB-844A-6999ACEB261B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{83863D5C-4185-4E37-BFAB-E273A99C823E}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
FirewallRules: [{831072C7-BAF4-40F6-AB8B-355336447349}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
FirewallRules: [{02C5D03C-43C3-44F1-B618-0E701264453E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Planet Coaster\PlanetCoaster.exe (Frontier Developments) [File not signed]
FirewallRules: [{B8A2F1D7-7346-4C20-94AE-85543B748447}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Planet Coaster\PlanetCoaster.exe (Frontier Developments) [File not signed]
FirewallRules: [{2FC008B7-0095-48D9-98CE-C2DBE243E117}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{89CD64DC-A193-486C-BCAA-F104D7AE91BE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{E406EC9C-DA73-4001-B3B1-21E9173E8D1B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Tomb Raider\TombRaider.exe (Square Enix) [File not signed]
FirewallRules: [{7060C15F-0FB3-4D23-A2BA-1EE85318E1F1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Tomb Raider\TombRaider.exe (Square Enix) [File not signed]
FirewallRules: [{B0196ADA-A7D6-4B38-8B9D-94E86AC02BEB}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{B741A4D3-2B14-45FA-B169-FA9045EE0D7A}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{7A8704D5-8144-4143-9843-315428EB9380}] => (Allow) LPort=26789
FirewallRules: [{BDC8A98C-0916-4443-B737-C9C20E9F57D0}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{28262BED-BD03-4DE6-990A-69F7018CB697}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{BB9A13CA-60D6-4655-A876-941DBF37F4B5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{88C14017-64DE-49C0-9AE6-603FC0559430}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{9C63D47D-AE5B-4838-9DE6-DEFE30DD8309}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{7DCCF1A1-AD84-4D5A-9463-E1DDD045575F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\American Truck Simulator\bin\win_x64\amtrucks.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{CC820DDF-6AE5-4FDC-9126-14994E50C538}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\American Truck Simulator\bin\win_x64\amtrucks.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{FED1ABAA-C194-4B5F-8968-6D6468B022ED}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{2CF03388-FDBB-408C-BE42-9EFC53A28A8D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{535F874C-97E2-415C-8161-37A5FE2DC4B5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{E70B0BFE-D833-45E5-B0F0-18FDAFDEA36C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{8ED38636-8B59-46F8-9432-8909D0FD5C40}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{A8E7259A-8217-48AB-8766-736D214C7C66}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{315E0119-5F94-4572-AF6F-0CECAA976043}] => (Allow) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.EXE (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{34831EC6-D16C-421A-9DCC-9E909F248855}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Mafia II\pc\mafia2.exe (Valve Corp. -> 2K Czech) [File not signed]
FirewallRules: [{7B2AE3C6-8AF7-48C0-AD2E-1D0FCE2F1273}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Mafia II\pc\mafia2.exe (Valve Corp. -> 2K Czech) [File not signed]

==================== Restore Points =========================

15-05-2020 14:28:40 Windows Update
21-05-2020 16:35:50 Nainstalováno rozhraní DirectX
26-05-2020 20:29:58 Removed 4K Video Downloader 4.11

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (05/30/2020 11:14:21 PM) (Source: SetupARService) (EventID: 0) (User: )
Description: Službu nelze spustit. System.NullReferenceException: Odkaz na objekt není nastaven na instanci objektu.
v SetupAfterRebootService.SetupARService.OnStart(String[] args)
v System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (05/30/2020 11:14:02 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]

Error: (05/30/2020 10:29:31 PM) (Source: SetupARService) (EventID: 0) (User: )
Description: Službu nelze spustit. System.NullReferenceException: Odkaz na objekt není nastaven na instanci objektu.
v SetupAfterRebootService.SetupARService.OnStart(String[] args)
v System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (05/30/2020 10:29:03 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.

Error: (05/30/2020 10:29:03 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]

Error: (05/30/2020 10:29:03 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.

Error: (05/30/2020 10:29:03 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]

Error: (05/30/2020 10:26:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: utorrent.exe, verze: 2.2.1.25534, časové razítko: 0x4e4594ce
Název chybujícího modulu: GDI32.dll, verze: 10.0.18362.1, časové razítko: 0x527faf7f
Kód výjimky: 0xc000041d
Posun chyby: 0x00004647
ID chybujícího procesu: 0x2da8
Čas spuštění chybující aplikace: 0x01d636bf1971f354
Cesta k chybující aplikaci: C:\Users\kaPL74\AppData\Roaming\uTorrent\utorrent.exe
Cesta k chybujícímu modulu: C:\Windows\System32\GDI32.dll
ID zprávy: f261576b-84e3-47fd-80e4-6af25b83ee52
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:


System errors:
=============
Error: (05/30/2020 11:13:54 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba MSI_ActiveX_Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (05/30/2020 11:13:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba NVIDIA LocalSystem Container byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 6000 milisekund: Restartovat službu.

Error: (05/30/2020 11:13:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Realtek Audio Universal Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.

Error: (05/30/2020 11:13:54 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Winstep Xtreme Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (05/30/2020 11:13:54 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba MSI Gaming Hotkey Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (05/30/2020 11:13:54 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba GamingApp_Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (05/30/2020 11:13:54 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Epson Scanner Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (05/30/2020 11:13:53 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba Microsoft Office Klikni a spusť byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.


CodeIntegrity:
===================================

Date: 2020-05-30 23:16:25.113
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume8\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-05-30 23:16:25.083
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume8\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-05-30 23:16:22.544
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume8\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-05-30 23:16:22.538
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume8\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-05-30 23:14:21.613
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume8\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-05-30 23:14:21.476
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume8\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-05-30 23:14:21.331
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume8\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-05-30 22:31:34.253
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume8\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

==================== Memory info ===========================

BIOS: American Megatrends Inc. F10 12/14/2018
Motherboard: Gigabyte Technology Co., Ltd. B250M-D3H-CF
Processor: Intel(R) Core(TM) i5-7600 CPU @ 3.50GHz
Percentage of memory in use: 10%
Total physical RAM: 32727.99 MB
Available physical RAM: 29448.95 MB
Total Virtual: 37591.99 MB
Available Virtual: 32927.3 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:930.88 GB) (Free:705.77 GB) NTFS
Drive d: (Místní disk) (Fixed) (Total:931.51 GB) (Free:565.11 GB) NTFS
Drive e: () (Fixed) (Total:930.56 GB) (Free:745.91 GB) NTFS

\\?\Volume{61d92415-0000-0000-0000-100000000000}\ (Rezervováno systémem) (Fixed) (Total:0.49 GB) (Free:0.45 GB) NTFS
\\?\Volume{b5d0499e-b828-4e1c-9bed-e82b27d3d91a}\ (Obnovení) (Fixed) (Total:0.52 GB) (Free:0.09 GB) NTFS
\\?\Volume{61d92415-0000-0000-0000-60c3e8000000}\ () (Fixed) (Total:0.46 GB) (Free:0.03 GB) NTFS
\\?\Volume{14fdb315-38db-40bd-8c62-8f40fe6f7fce}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 2EFF3D7B)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 61D92415)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=930.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=469 MB) - (Type=27)

==========================================================
Disk: 2 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt =======================

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118254
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prosím o jednu preventivku, Děkuji

#4 Příspěvek od Rudy »

Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:
Start

CloseProcesses:
CustomCLSID: HKU\S-1-5-21-3640345311-2590231575-3648685039-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\kaPL74\AppData\Local\Microsoft\OneDrive\19.232.1124.0008_1\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-3640345311-2590231575-3648685039-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\kaPL74\AppData\Local\Microsoft\OneDrive\19.232.1124.0008_1\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-3640345311-2590231575-3648685039-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\kaPL74\AppData\Local\Microsoft\OneDrive\19.232.1124.0008_1\amd64\FileSyncShell64.dll => No File
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
FirewallRules: [{17FFFC6A-917A-44F4-A8B5-81900BE80486}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
FirewallRules: [{3F90DC5F-93C2-4BD3-944A-02921D9CD710}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
GroupPolicy: Restriction ? <==== ATTENTION

EmptyTemp:
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Uživatelský avatar
kodl74
Návštěvník
Návštěvník
Příspěvky: 178
Registrován: 10 kvě 2007 17:14

Re: Prosím o jednu preventivku, Děkuji

#5 Příspěvek od kodl74 »

Fix result of Farbar Recovery Scan Tool (x64) Version: 02-06-2020
Ran by kaPL74 (04-06-2020 18:11:04) Run:1
Running from C:\Users\kaPL74\Desktop
Loaded Profiles: kaPL74
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
CustomCLSID: HKU\S-1-5-21-3640345311-2590231575-3648685039-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\kaPL74\AppData\Local\Microsoft\OneDrive\19.232.1124.0008_1\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-3640345311-2590231575-3648685039-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\kaPL74\AppData\Local\Microsoft\OneDrive\19.232.1124.0008_1\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-3640345311-2590231575-3648685039-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\kaPL74\AppData\Local\Microsoft\OneDrive\19.232.1124.0008_1\amd64\FileSyncShell64.dll => No File
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
FirewallRules: [{17FFFC6A-917A-44F4-A8B5-81900BE80486}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
FirewallRules: [{3F90DC5F-93C2-4BD3-944A-02921D9CD710}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
GroupPolicy: Restriction ? <==== ATTENTION

EmptyTemp:
End
*****************

Processes closed successfully.
HKU\S-1-5-21-3640345311-2590231575-3648685039-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E} => removed successfully
HKU\S-1-5-21-3640345311-2590231575-3648685039-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C} => removed successfully
HKU\S-1-5-21-3640345311-2590231575-3648685039-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E} => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ FileSyncEx => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
"HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}" => removed successfully
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\{4A7C4306-57E0-4C0C-83A9-78C1528F618C} => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ FileSyncEx => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{17FFFC6A-917A-44F4-A8B5-81900BE80486}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3F90DC5F-93C2-4BD3-944A-02921D9CD710}" => removed successfully
C:\Windows\system32\GroupPolicy\Machine => moved successfully
C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully
C:\Windows\SysWOW64\GroupPolicy\GPT.ini => moved successfully

=========== EmptyTemp: ==========

BITS transfer queue => 7364608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 1419265897 B
Java, Flash, Steam htmlcache => 439353856 B
Windows/system/drivers => 4807280 B
Edge => 0 B
Chrome => 0 B
Firefox => 1218310370 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 50332 B
NetworkService => 50332 B
kaPL74 => 9687538 B

RecycleBin => 6363080452 B
EmptyTemp: => 8.8 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 18:11:56 ====

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118254
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prosím o jednu preventivku, Děkuji

#6 Příspěvek od Rudy »

Smazáno. Log by již měl být OK.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Uživatelský avatar
kodl74
Návštěvník
Návštěvník
Příspěvky: 178
Registrován: 10 kvě 2007 17:14

Re: Prosím o jednu preventivku, Děkuji

#7 Příspěvek od kodl74 »

Děkuji

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 118254
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prosím o jednu preventivku, Děkuji

#8 Příspěvek od Rudy »

Nemáte zač! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Zamčeno