
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Podezření na malware - FRST 2 posty
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Podezření na malware - FRST 2 posty
Dobrý den,
ode dneška mi antivir hlásí každou chvíli přítomnost malwaru (uložen do truhly) ale při scanu samotném nic nenachází...
Díky moc za pomoc
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 22-02-2017
Ran by Vojta (administrator) on LAPTOP-PSMFKCI2 (22-02-2017 16:03:57)
Running from C:\Users\Vojta\Desktop
Loaded Profiles: Vojta (Available Profiles: Vojta)
Platform: Windows 10 Home Version 1607 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Synaptics Incorporated) C:\Windows\System32\valWbioSyncSvc.exe
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynFP\Shared\SensorDBSynch.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD12\PDVD12Serv.exe
(Lenovo) C:\Program Files\Lenovo\QuickOptimizer\QuickOptimizerIcon.exe
() C:\Windows\System32\igfxTray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
() C:\Program Files\Lenovo\LenovoUtility\utility.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Flux Software LLC) C:\Users\Vojta\AppData\Local\FluxSoftware\Flux\flux.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.500\SSScheduler.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.693_none_42ff55c9655f38bf\TiWorker.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-11-21] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16152792 2015-07-17] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1394392 2015-07-14] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1394392 2015-07-14] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1394392 2015-07-14] (Realtek Semiconductor)
HKLM\...\Run: [LenovoUtility] => C:\Program Files\Lenovo\LenovoUtility\utility.exe [791848 2015-11-20] ()
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [322472 2015-07-22] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3947704 2017-02-08] (Synaptics Incorporated)
HKLM-x32\...\Run: [Lenovo Smart Fingerprint] => C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe [1758480 2015-07-10] (Lenovo)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe [110344 2014-09-09] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\Lenovo\Power2Go\VirtualDrive.exe [492808 2014-09-09] (CyberLink Corp.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-07] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [205512 2017-02-08] (AVAST Software)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2383040 2016-10-12] (Adobe Systems Incorporated)
HKU\S-1-5-21-198560242-2740718659-3163697484-1001\...\Run: [f.lux] => C:\Users\Vojta\AppData\Local\FluxSoftware\Flux\flux.exe [1024240 2016-12-06] (Flux Software LLC)
HKU\S-1-5-21-198560242-2740718659-3163697484-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9363672 2017-02-08] (Piriform Ltd)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-06-10] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-06-10] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-06-10] ()
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-02-08] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-02-22]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.500\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2017-02-08]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: 0.0.0.1 mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 10.255.255.10 10.255.255.20
Tcpip\..\Interfaces\{46d1c46c-3644-4734-b234-e50e3e09e4d6}: [DhcpNameServer] 10.255.255.10 10.255.255.20
Tcpip\..\Interfaces\{ddbfe38c-ad2f-4845-b31e-f83df0e3d83f}: [NameServer] 10.255.255.10,10.255.255.20
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-198560242-2740718659-3163697484-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-198560242-2740718659-3163697484-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo15.msn.com/?pc=LCTE
HKU\S-1-5-21-198560242-2740718659-3163697484-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-02-08] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-02-08] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-02-08] (Microsoft Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2016-10-31] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-02-08] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-08] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-08] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-08] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-08] (Microsoft Corporation)
FireFox:
========
FF DefaultProfile: p9tq7kus.default
FF ProfilePath: C:\Users\Vojta\AppData\Roaming\Mozilla\Firefox\Profiles\p9tq7kus.default [2017-02-22]
FF Session Restore: Mozilla\Firefox\Profiles\p9tq7kus.default -> is enabled.
FF Extension: (Zoom Page) - C:\Users\Vojta\AppData\Roaming\Mozilla\Firefox\Profiles\p9tq7kus.default\Extensions\zoompage@DW-dev.xpi [2017-02-22]
FF Extension: (Adblock Plus) - C:\Users\Vojta\AppData\Roaming\Mozilla\Firefox\Profiles\p9tq7kus.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-02-22]
FF Extension: (SHA-1 deprecation staged rollout) - C:\Users\Vojta\AppData\Roaming\Mozilla\Firefox\Profiles\p9tq7kus.default\features\{71e22dc2-d49d-431e-a30c-4c694adde3e1}\disableSHA1rollout@mozilla.org.xpi [2017-02-22]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF48
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF48 [2017-02-22]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF48
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF48 [2017-02-22]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF48
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF48
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_221.dll [2017-02-22] ()
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-10-12] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_221.dll [2017-02-22] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-02-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-02-08] (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-10-12] (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Users\Vojta\AppData\Roaming\mozilla\plugins\npatgpc.dll [2017-02-13] (Cisco WebEx LLC)
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [744640 2016-10-12] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-01-19] (Adobe Systems, Incorporated)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7142136 2017-02-22] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [262736 2017-02-08] (AVAST Software)
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3702472 2017-01-29] (Microsoft Corporation)
S3 cplspcon; C:\WINDOWS\system32\IntelCpHDCPSvc.exe [595560 2015-09-04] (Intel Corporation)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2017-02-09] (Macrovision Europe Ltd.) [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [18856 2015-07-22] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [350312 2015-09-04] (Intel Corporation)
R2 ImControllerService; c:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [61768 2017-02-15] (Lenovo Group Limited)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [271296 2015-07-17] (Lenovo)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.500\McCHSvc.exe [329480 2017-01-19] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-06-12] ()
R2 valWBFPolicyService; C:\WINDOWS\system32\valWBFPolicyService.exe [86544 2017-02-09] (Synaptics Incorporated)
R2 valWbioSyncSvc; C:\WINDOWS\system32\valWbioSyncSvc.exe [56848 2017-02-09] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
S2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3831200 2015-06-12] (Intel® Corporation)
R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]
S2 InstallerService; C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe -originalversion 4.4.127.0 [X]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [309784 2017-02-08] (AVAST Software s.r.o.)
R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [189768 2017-02-08] (AVAST Software s.r.o.)
R0 aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [334600 2017-02-08] (AVAST Software s.r.o.)
R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [48528 2017-02-08] (AVAST Software s.r.o.)
S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [38296 2017-02-08] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [32088 2017-02-08] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [126088 2017-02-08] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [100640 2017-02-08] (AVAST Software)
R0 AswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [74680 2017-02-08] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [991496 2017-02-08] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [547904 2017-02-08] (AVAST Software)
R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [162528 2017-02-08] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [337080 2017-02-22] (AVAST Software)
R1 CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [253184 2017-02-08] (Intel Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
S3 NETwNe64; C:\WINDOWS\System32\drivers\NETwew01.sys [3354384 2015-07-10] (Intel Corporation)
R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7116288 2016-07-16] (Intel Corporation)
R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [310528 2015-05-21] (Realtek Semiconductor Corp.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [886528 2015-07-30] (Realtek )
R3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [3059416 2015-06-11] (Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [44216 2017-02-08] (Synaptics Incorporated)
R1 SMIDriver; C:\WINDOWS\system32\DRIVERS\smi.sys [39488 2017-02-09] (Synaptics Incorporated)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
ode dneška mi antivir hlásí každou chvíli přítomnost malwaru (uložen do truhly) ale při scanu samotném nic nenachází...
Díky moc za pomoc
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 22-02-2017
Ran by Vojta (administrator) on LAPTOP-PSMFKCI2 (22-02-2017 16:03:57)
Running from C:\Users\Vojta\Desktop
Loaded Profiles: Vojta (Available Profiles: Vojta)
Platform: Windows 10 Home Version 1607 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Synaptics Incorporated) C:\Windows\System32\valWbioSyncSvc.exe
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynFP\Shared\SensorDBSynch.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD12\PDVD12Serv.exe
(Lenovo) C:\Program Files\Lenovo\QuickOptimizer\QuickOptimizerIcon.exe
() C:\Windows\System32\igfxTray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
() C:\Program Files\Lenovo\LenovoUtility\utility.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Flux Software LLC) C:\Users\Vojta\AppData\Local\FluxSoftware\Flux\flux.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.500\SSScheduler.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.693_none_42ff55c9655f38bf\TiWorker.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-11-21] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16152792 2015-07-17] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1394392 2015-07-14] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1394392 2015-07-14] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1394392 2015-07-14] (Realtek Semiconductor)
HKLM\...\Run: [LenovoUtility] => C:\Program Files\Lenovo\LenovoUtility\utility.exe [791848 2015-11-20] ()
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [322472 2015-07-22] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3947704 2017-02-08] (Synaptics Incorporated)
HKLM-x32\...\Run: [Lenovo Smart Fingerprint] => C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe [1758480 2015-07-10] (Lenovo)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe [110344 2014-09-09] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\Lenovo\Power2Go\VirtualDrive.exe [492808 2014-09-09] (CyberLink Corp.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-07] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [205512 2017-02-08] (AVAST Software)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2383040 2016-10-12] (Adobe Systems Incorporated)
HKU\S-1-5-21-198560242-2740718659-3163697484-1001\...\Run: [f.lux] => C:\Users\Vojta\AppData\Local\FluxSoftware\Flux\flux.exe [1024240 2016-12-06] (Flux Software LLC)
HKU\S-1-5-21-198560242-2740718659-3163697484-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9363672 2017-02-08] (Piriform Ltd)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-06-10] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-06-10] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-06-10] ()
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-02-08] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-02-22]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.500\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2017-02-08]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: 0.0.0.1 mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 10.255.255.10 10.255.255.20
Tcpip\..\Interfaces\{46d1c46c-3644-4734-b234-e50e3e09e4d6}: [DhcpNameServer] 10.255.255.10 10.255.255.20
Tcpip\..\Interfaces\{ddbfe38c-ad2f-4845-b31e-f83df0e3d83f}: [NameServer] 10.255.255.10,10.255.255.20
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-198560242-2740718659-3163697484-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-198560242-2740718659-3163697484-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo15.msn.com/?pc=LCTE
HKU\S-1-5-21-198560242-2740718659-3163697484-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-02-08] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-02-08] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-02-08] (Microsoft Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2016-10-31] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-02-08] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-08] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-08] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-08] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-08] (Microsoft Corporation)
FireFox:
========
FF DefaultProfile: p9tq7kus.default
FF ProfilePath: C:\Users\Vojta\AppData\Roaming\Mozilla\Firefox\Profiles\p9tq7kus.default [2017-02-22]
FF Session Restore: Mozilla\Firefox\Profiles\p9tq7kus.default -> is enabled.
FF Extension: (Zoom Page) - C:\Users\Vojta\AppData\Roaming\Mozilla\Firefox\Profiles\p9tq7kus.default\Extensions\zoompage@DW-dev.xpi [2017-02-22]
FF Extension: (Adblock Plus) - C:\Users\Vojta\AppData\Roaming\Mozilla\Firefox\Profiles\p9tq7kus.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-02-22]
FF Extension: (SHA-1 deprecation staged rollout) - C:\Users\Vojta\AppData\Roaming\Mozilla\Firefox\Profiles\p9tq7kus.default\features\{71e22dc2-d49d-431e-a30c-4c694adde3e1}\disableSHA1rollout@mozilla.org.xpi [2017-02-22]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF48
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF48 [2017-02-22]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF48
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF48 [2017-02-22]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF48
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF48
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_221.dll [2017-02-22] ()
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-10-12] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_221.dll [2017-02-22] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-02-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-02-08] (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-10-12] (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Users\Vojta\AppData\Roaming\mozilla\plugins\npatgpc.dll [2017-02-13] (Cisco WebEx LLC)
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [744640 2016-10-12] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-01-19] (Adobe Systems, Incorporated)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7142136 2017-02-22] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [262736 2017-02-08] (AVAST Software)
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3702472 2017-01-29] (Microsoft Corporation)
S3 cplspcon; C:\WINDOWS\system32\IntelCpHDCPSvc.exe [595560 2015-09-04] (Intel Corporation)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2017-02-09] (Macrovision Europe Ltd.) [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [18856 2015-07-22] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [350312 2015-09-04] (Intel Corporation)
R2 ImControllerService; c:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [61768 2017-02-15] (Lenovo Group Limited)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [271296 2015-07-17] (Lenovo)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.500\McCHSvc.exe [329480 2017-01-19] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-06-12] ()
R2 valWBFPolicyService; C:\WINDOWS\system32\valWBFPolicyService.exe [86544 2017-02-09] (Synaptics Incorporated)
R2 valWbioSyncSvc; C:\WINDOWS\system32\valWbioSyncSvc.exe [56848 2017-02-09] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
S2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3831200 2015-06-12] (Intel® Corporation)
R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]
S2 InstallerService; C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe -originalversion 4.4.127.0 [X]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [309784 2017-02-08] (AVAST Software s.r.o.)
R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [189768 2017-02-08] (AVAST Software s.r.o.)
R0 aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [334600 2017-02-08] (AVAST Software s.r.o.)
R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [48528 2017-02-08] (AVAST Software s.r.o.)
S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [38296 2017-02-08] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [32088 2017-02-08] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [126088 2017-02-08] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [100640 2017-02-08] (AVAST Software)
R0 AswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [74680 2017-02-08] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [991496 2017-02-08] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [547904 2017-02-08] (AVAST Software)
R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [162528 2017-02-08] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [337080 2017-02-22] (AVAST Software)
R1 CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [253184 2017-02-08] (Intel Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
S3 NETwNe64; C:\WINDOWS\System32\drivers\NETwew01.sys [3354384 2015-07-10] (Intel Corporation)
R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7116288 2016-07-16] (Intel Corporation)
R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [310528 2015-05-21] (Realtek Semiconductor Corp.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [886528 2015-07-30] (Realtek )
R3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [3059416 2015-06-11] (Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [44216 2017-02-08] (Synaptics Incorporated)
R1 SMIDriver; C:\WINDOWS\system32\DRIVERS\smi.sys [39488 2017-02-09] (Synaptics Incorporated)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
- Přílohy
-
- Addition.rar
- (10.07 KiB) Staženo 73 x
Naposledy upravil(a) VojtaB dne 22 úno 2017 16:45, celkem upraveno 1 x.
Re: Podezření na malware
2017-02-22 16:03 - 2017-02-22 16:04 - 00020477 _____ C:\Users\Vojta\Desktop\FRST.txt
2017-02-22 16:03 - 2017-02-22 16:03 - 00000000 ____D C:\Users\Vojta\Desktop\FRST-OlderVersion
2017-02-22 16:03 - 2017-02-22 16:03 - 00000000 ____D C:\FRST
2017-02-22 15:52 - 2017-02-22 15:52 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-02-22 10:26 - 2017-02-22 10:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2017-02-22 10:26 - 2017-02-22 10:26 - 00000000 ____D C:\Program Files\McAfee Security Scan
2017-02-22 10:09 - 2017-02-22 10:09 - 00000000 ____D C:\Program Files\Common Files\McAfee
2017-02-22 10:09 - 2017-02-22 10:09 - 00000000 ____D C:\Program Files (x86)\McAfee
2017-02-22 09:57 - 2017-02-22 09:57 - 00000000 ____D C:\Users\Vojta\AppData\Local\Macromedia
2017-02-22 09:56 - 2017-02-22 15:51 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2017-02-22 09:56 - 2017-02-22 15:50 - 00000000 ____D C:\Program Files\TrueKey
2017-02-22 09:56 - 2017-02-22 09:56 - 00003890 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-02-22 09:56 - 2017-02-22 09:56 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2017-02-22 09:42 - 2017-02-22 16:03 - 02422784 _____ (Farbar) C:\Users\Vojta\Desktop\FRST64.exe
2017-02-22 09:20 - 2017-02-22 09:23 - 00000000 ____D C:\Users\Vojta\Desktop\In Loco
2017-02-22 08:56 - 2017-02-22 08:56 - 00002870 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-02-22 08:56 - 2017-02-22 08:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-02-22 08:56 - 2017-02-22 08:56 - 00000000 ____D C:\Program Files\CCleaner
2017-02-22 08:52 - 2017-02-22 08:52 - 09261616 _____ (Piriform Ltd) C:\Users\Vojta\Downloads\ccsetup527.exe
2017-02-22 08:44 - 2017-02-22 08:44 - 00001235 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-02-22 08:44 - 2017-02-22 08:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-02-22 08:39 - 2017-02-22 08:39 - 00000000 ____D C:\ProgramData\Mozilla
2017-02-22 08:20 - 2017-02-08 19:08 - 00398408 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2017-02-22 08:11 - 2017-02-22 08:11 - 06253632 _____ (AVAST Software) C:\Users\Vojta\Downloads\avast_free_antivirus_setup_online (1).exe
2017-02-22 08:03 - 2017-02-22 08:03 - 02945520 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Vojta\Downloads\AVG_Antivirus_Free_1425.exe
2017-02-22 07:38 - 2017-02-22 14:24 - 00000000 ____D C:\Users\Vojta\Desktop\M-pesa
2017-02-22 07:38 - 2017-02-22 07:38 - 00039424 _____ C:\Users\Vojta\Downloads\CP_update (4).xls
2017-02-22 07:38 - 2017-02-22 07:38 - 00039424 _____ C:\Users\Vojta\Desktop\CP_update (4).xls
2017-02-22 07:37 - 2017-02-22 07:40 - 124000965 _____ C:\Users\Vojta\Desktop\M-Pesa_MM_edit.mp4
2017-02-21 20:22 - 2017-02-21 20:23 - 20661868 _____ C:\Users\Vojta\Downloads\Hithit.cz - Adoptujte maminku! Kupte ji vstupenku na mentoring..mp4
2017-02-21 10:03 - 2017-02-21 10:03 - 00530124 _____ C:\Users\Vojta\Downloads\Scan 13. 2. 2017 9.01.pdf
2017-02-20 23:10 - 2017-02-20 23:10 - 00691112 _____ C:\Users\Vojta\Downloads\Jak používat fakultní email mimo počítačovou síť pf uk.pdf
2017-02-20 20:26 - 2017-02-20 19:16 - 21385211 _____ C:\Users\Vojta\Desktop\Aplicación móvil - EVA Facial Mouse - Apps Accesibles - Fundación Vodafone España.mp4
2017-02-20 19:15 - 2017-02-20 19:16 - 17539159 _____ C:\Users\Vojta\Downloads\Hithit.cz - Nová deska Zrní.mp4
2017-02-20 19:14 - 2017-02-20 19:16 - 21385211 _____ C:\Users\Vojta\Downloads\Aplicación móvil - EVA Facial Mouse - Apps Accesibles - Fundación Vodafone España.mp4
2017-02-20 19:02 - 2017-02-20 19:03 - 00000000 ____D C:\Users\Vojta\Desktop\U Templářů
2017-02-20 18:59 - 2017-02-20 18:59 - 00039936 _____ C:\Users\Vojta\Downloads\CP_update (3).xls
2017-02-20 10:26 - 2017-02-20 10:26 - 00076801 _____ C:\Users\Vojta\Downloads\webtrekk_report_2016-03-07_Pages.xls
2017-02-20 10:25 - 2017-02-20 10:25 - 00076801 _____ C:\Users\Vojta\Downloads\webtrekk_report_2016-05-01_Pages (2).xls
2017-02-20 10:18 - 2017-02-20 10:18 - 00075265 _____ C:\Users\Vojta\Downloads\webtrekk_report_2016-05-01_Pages (1).xls
2017-02-20 10:06 - 2017-02-20 10:06 - 00075265 _____ C:\Users\Vojta\Downloads\webtrekk_report_2016-05-01_Pages.xls
2017-02-19 20:36 - 2017-02-19 20:36 - 00001467 _____ C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LenovoSettings.lnk
2017-02-17 18:37 - 2017-02-17 18:37 - 00000000 ____D C:\Users\Vojta\AppData\Local\WMTools Downloaded Files
2017-02-17 18:36 - 2017-02-17 18:36 - 12655848 _____ C:\Users\Vojta\Downloads\MM26_CS.exe
2017-02-17 16:14 - 2017-02-17 16:15 - 34987849 _____ C:\Users\Vojta\Downloads\Hithit.cz - Rádio StreetCulture jede na Nákladové nádraží Žižkov.mp4
2017-02-17 14:32 - 2017-02-17 14:32 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-02-17 14:32 - 2017-02-17 14:32 - 00000000 ____D C:\Users\Vojta\Tracing
2017-02-17 14:32 - 2017-02-17 14:32 - 00000000 ____D C:\ProgramData\Skype
2017-02-17 14:32 - 2017-02-17 14:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-02-17 14:31 - 2017-02-17 14:31 - 01629144 _____ (Skype Technologies S.A.) C:\Users\Vojta\Downloads\SkypeSetup.exe
2017-02-17 13:03 - 2017-02-17 13:07 - 185508903 _____ C:\Users\Vojta\Downloads\Foto_SEW_9_2.zip
2017-02-15 20:26 - 2017-02-15 20:26 - 00257864 _____ (Lenovo Group Limited) C:\WINDOWS\system32\iMDriverHelper.dll
2017-02-15 18:22 - 2017-02-15 18:18 - 03413049 _____ C:\Users\Vojta\Desktop\RBMH_Google Analytics Training Programme_Description.pdf
2017-02-15 18:18 - 2017-02-15 18:18 - 03413049 _____ C:\Users\Vojta\Downloads\RBMH_Google Analytics Training Programme_Description.pdf
2017-02-15 11:07 - 2017-02-15 11:07 - 00021456 _____ C:\Users\Vojta\Downloads\MP_FB_budvar-FW-2016.xlsx
2017-02-15 09:17 - 2017-02-15 09:59 - 00000000 ____D C:\Users\Vojta\Desktop\NeverDie
2017-02-15 09:17 - 2017-02-15 09:17 - 03149193 _____ C:\Users\Vojta\Downloads\wooxupnaneverdie_cz.zip
2017-02-15 09:17 - 2017-02-15 09:17 - 03149193 _____ C:\Users\Vojta\Downloads\wooxupnaneverdie_cz (1).zip
2017-02-14 18:52 - 2017-02-14 18:52 - 00041984 _____ C:\Users\Vojta\Downloads\CP_update (2).xls
2017-02-13 16:02 - 2017-02-13 16:02 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\webex
2017-02-13 16:01 - 2017-02-13 16:02 - 00000000 ____D C:\Users\Vojta\AppData\LocalLow\WebEx
2017-02-13 16:01 - 2017-02-13 16:02 - 00000000 ____D C:\Users\Vojta\AppData\Local\WebEx
2017-02-13 16:01 - 2017-02-13 16:02 - 00000000 ____D C:\ProgramData\WebEx
2017-02-13 16:01 - 2017-02-13 16:01 - 01021896 _____ (Cisco WebEx LLC) C:\Users\Vojta\Downloads\Cisco_WebEx_Add-On.exe
2017-02-13 00:29 - 2017-02-13 00:29 - 00332050 _____ C:\Users\Vojta\Downloads\2017 RALLY SWEDEN EVENT 52 MIN SCRIPT PART 3 RD1 (1).pdf
2017-02-12 21:49 - 2017-02-12 21:50 - 00000000 ____D C:\Users\Vojta\Desktop\Četba k diplomce
2017-02-12 21:34 - 2017-02-12 21:34 - 00332225 _____ C:\Users\Vojta\Downloads\RALLY SWEDEN EVENT 52 MIN SCRIPT PART 4 RD1.pdf
2017-02-12 21:34 - 2017-02-12 21:34 - 00332050 _____ C:\Users\Vojta\Downloads\2017 RALLY SWEDEN EVENT 52 MIN SCRIPT PART 3 RD1.pdf
2017-02-12 21:20 - 2017-02-12 21:20 - 00359013 _____ C:\Users\Vojta\Downloads\2017 RALLY SWEDEN 52m HIGHLIGHTS SHOW PART 1 RD1.pdf
2017-02-12 21:20 - 2017-02-12 21:20 - 00321688 _____ C:\Users\Vojta\Downloads\2017 RALLY SWEDEN 52m HIGHLIGHTS SHOW PART 2 RD1.pdf
2017-02-12 20:14 - 2017-02-12 20:15 - 121786916 _____ C:\Users\Vojta\Desktop\Hithit.cz - Camino na kolečkách 2017 - mě se chce.avi
2017-02-12 19:58 - 2017-02-12 19:59 - 71838508 _____ C:\Users\Vojta\Desktop\Hithit.cz - Camino na kolečkách 2017 znělka cut.avi
2017-02-12 16:26 - 2017-02-12 16:28 - 67267465 _____ C:\Users\Vojta\Downloads\Hithit.cz - Camino na kolečkách 2017.mp4
2017-02-11 18:40 - 2017-02-11 18:40 - 00615707 _____ C:\Users\Vojta\Downloads\P-20170211-00862--onka_wins_in_Abu_Dhabi-English.pdf
2017-02-10 20:09 - 2017-02-10 20:09 - 00790799 _____ C:\Users\Vojta\Downloads\Undisputed_Digital_Feedback (1).pptx
2017-02-10 19:10 - 2017-02-10 19:10 - 07274216 _____ C:\Users\Vojta\Downloads\Hithit.cz - Vnímej svět jinak, z perspektivy neslyšících.mp4
2017-02-10 18:41 - 2017-02-10 18:41 - 00000000 ____D C:\ProgramData\install_backup
2017-02-10 18:40 - 2012-06-13 17:10 - 00102376 _____ ("CyberLink) C:\WINDOWS\system32\Drivers\wsvd.sys
2017-02-10 18:36 - 2017-02-10 18:36 - 00000000 ____D C:\Users\Vojta\AppData\LocalLow\Adobe
2017-02-10 18:35 - 2017-02-10 18:35 - 00376087 _____ C:\Users\Vojta\Downloads\Honorare_Bublik_Vojtech.PDF
2017-02-10 12:59 - 2017-02-10 12:59 - 00790799 _____ C:\Users\Vojta\Downloads\Undisputed_Digital_Feedback.pptx
2017-02-10 10:14 - 2016-12-21 08:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2017-02-10 10:14 - 2016-12-21 05:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2017-02-10 08:54 - 2017-02-22 15:52 - 00000000 ____D C:\Users\Vojta\AppData\LocalLow\Mozilla
2017-02-10 08:53 - 2017-02-22 08:44 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Mozilla
2017-02-10 08:53 - 2017-02-22 08:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-02-10 08:53 - 2017-02-10 10:48 - 00000000 ____D C:\Users\Vojta\AppData\Local\Mozilla
2017-02-10 08:53 - 2017-02-10 08:53 - 00245544 _____ C:\Users\Vojta\Downloads\Firefox Setup Stub 51.0.1.exe
2017-02-10 08:11 - 2017-02-11 10:31 - 00000000 ____D C:\Users\Vojta\AppData\Local\ConnectedDevicesPlatform
2017-02-10 08:11 - 2017-02-10 08:11 - 00000020 ___SH C:\Users\Vojta\ntuser.ini
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Public\Documents\Obrázky
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Public\Documents\Hudba
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Public\Documents\Filmy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Šablony
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Soubory cookie
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Poslední
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Okolní tiskárny
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Okolní síť
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Nabídka Start
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Dokumenty
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Documents\Obrázky
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Documents\Hudba
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Documents\Filmy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Data aplikací
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default User\Documents\Obrázky
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default User\Documents\Hudba
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default User\Documents\Filmy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Data aplikací
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Šablony
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Plocha
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Nabídka Start
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Dokumenty
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Data aplikací
2017-02-10 05:05 - 2017-02-10 05:06 - 00007623 _____ C:\WINDOWS\diagwrn.xml
2017-02-10 05:05 - 2017-02-10 05:06 - 00007623 _____ C:\WINDOWS\diagerr.xml
2017-02-10 05:00 - 2017-02-22 08:20 - 00004012 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1486577462
2017-02-10 05:00 - 2017-02-22 08:20 - 00003994 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2017-02-10 05:00 - 2017-02-10 18:43 - 00000000 ____D C:\WINDOWS\System32\Tasks\CyberLink
2017-02-10 05:00 - 2017-02-10 05:00 - 00022924 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-02-10 05:00 - 2017-02-10 05:00 - 00003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2017-02-10 05:00 - 2017-02-10 05:00 - 00002770 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-02-10 05:00 - 2017-02-10 05:00 - 00002334 _____ C:\WINDOWS\System32\Tasks\{3C569360-026A-463B-BC2E-3BEB688916A4}
2017-02-10 05:00 - 2017-02-10 05:00 - 00002274 _____ C:\WINDOWS\System32\Tasks\DolbySelectorTask
2017-02-10 05:00 - 2017-02-10 05:00 - 00002212 _____ C:\WINDOWS\System32\Tasks\PDVDServ12 Task
2017-02-10 05:00 - 2017-02-10 05:00 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2017-02-10 05:00 - 2017-02-10 05:00 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2017-02-10 04:57 - 2017-02-22 15:51 - 00000000 ____D C:\ProgramData\Synaptics
2017-02-10 04:53 - 2017-02-10 04:53 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-02-10 04:50 - 2017-02-10 04:55 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-02-10 04:48 - 2017-02-22 09:53 - 00000000 ____D C:\Users\Vojta
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Šablony
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Soubory cookie
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Poslední
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Okolní tiskárny
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Okolní síť
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Nabídka Start
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Dokumenty
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Documents\Obrázky
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Documents\Hudba
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Documents\Filmy
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Data aplikací
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\AppData\Local\Data aplikací
2017-02-10 04:45 - 2017-02-10 04:45 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_wbf_vfs_lvcmn_01_11_00.Wdf
2017-02-10 04:45 - 2017-02-10 04:45 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2017-02-10 04:44 - 2017-02-22 15:51 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-02-10 04:44 - 2017-02-10 04:50 - 00000000 ____D C:\Program Files\Intel
2017-02-10 04:44 - 2017-02-10 04:50 - 00000000 ____D C:\Program Files\AMD
2017-02-10 04:44 - 2017-02-10 04:44 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2017-02-10 04:44 - 2017-02-10 04:44 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2017-02-10 04:44 - 2017-02-10 04:44 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2017-02-10 04:44 - 2017-02-10 04:44 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-02-10 04:44 - 2017-02-10 04:44 - 00000000 ____D C:\WINDOWS\system32\DAX2
2017-02-10 04:44 - 2017-02-10 04:44 - 00000000 ____D C:\Program Files\Realtek
2017-02-10 04:43 - 2017-02-10 04:45 - 00000000 ____D C:\Program Files\Synaptics
2017-02-10 04:43 - 2017-02-10 04:43 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2017-02-10 04:35 - 2017-02-22 08:57 - 00000000 ___DC C:\WINDOWS\Panther
2017-02-10 04:31 - 2017-02-21 09:06 - 00000000 ____D C:\Windows.old
2017-02-10 04:26 - 2017-02-10 04:26 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 13084160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 12177920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 08168000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 07812096 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 07654400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 06109184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 05380608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04746752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04673304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04130440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03777536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 03441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03306496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02953216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02828376 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02820096 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02677544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02669056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02611200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02484736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02362880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02323728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02277248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02256384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02189664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 02186896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02109952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01969912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01886344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01779712 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01738560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01691136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 01637728 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01595392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01589760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01556480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 01477632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01473048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01454504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01366016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 01354320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2017-02-10 04:26 - 2017-02-10 04:26 - 01336320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01293152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01220096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2017-02-10 04:26 - 2017-02-10 04:26 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01196544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2017-02-10 04:26 - 2017-02-10 04:26 - 01173496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01123912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01051112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2017-02-10 04:26 - 2017-02-10 04:26 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2017-02-10 04:26 - 2017-02-10 04:26 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00912896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00894096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00882680 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00861024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00811872 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00772608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00730624 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00707584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00658784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00637400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00527880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00454592 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00433504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00424616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00377184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00374448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxclu.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00319288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00266544 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcuiu.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00248480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00198856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRHelper.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00187520 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00172528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00167848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00163752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00157536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudStorageWizard.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00152416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EDPCleanup.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00142176 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00126568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfaudiocnv.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00122208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\migisol.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00117240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReportingCSP.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00091936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfaudiocnv.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00089416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\modem.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\EAMProgressHandler.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe
2017-02-10 04:25 - 2017-02-10 04:26 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 17188864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 06668040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 05722832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 05114368 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 04136448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 03542016 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 03370496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 03198464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 02913144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 02287616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 02166752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 02104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01576448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01503544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01357824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01263856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01069720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00967168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00869848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-02-10 04:25 - 2017-02-10 04:25 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-02-10 04:25 - 2017-02-10 04:25 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00352096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00219488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00168424 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2017-02-10 04:25 - 2017-02-10 04:25 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00106896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe
2017-02-10 04:25 - 2017-02-10 04:25 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
2017-02-10 03:54 - 2017-02-10 03:54 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2017-02-10 03:51 - 2017-02-10 03:51 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2017-02-10 03:51 - 2017-02-10 03:51 - 00000000 ____D C:\Program Files\Reference Assemblies
2017-02-10 03:51 - 2017-02-10 03:51 - 00000000 ____D C:\Program Files\MSBuild
2017-02-10 03:51 - 2017-02-10 03:51 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-02-10 03:51 - 2017-02-10 03:51 - 00000000 ____D C:\Program Files (x86)\MSBuild
2017-02-10 03:50 - 2016-05-25 14:31 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-02-10 03:50 - 2016-05-25 14:31 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-02-10 03:50 - 2016-05-25 14:31 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2017-02-10 03:50 - 2016-05-25 11:03 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2017-02-10 03:50 - 2016-05-25 11:03 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-02-10 03:50 - 2016-05-25 11:03 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2017-02-09 21:18 - 2017-02-20 22:48 - 00000000 ____D C:\Users\Vojta\Desktop\Sprinklr cover
2017-02-09 19:16 - 2017-02-09 19:16 - 03657376 _____ (Synaptics Incorporated) C:\WINDOWS\system32\vcsAPIFORWBF.dll
2017-02-09 19:16 - 2017-02-09 19:16 - 00980648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120.dll
2017-02-09 19:16 - 2017-02-09 19:16 - 00086544 _____ (Synaptics Incorporated) C:\WINDOWS\system32\valWBFPolicyService.exe
2017-02-09 19:16 - 2017-02-09 19:16 - 00080544 _____ (Synaptics Incorporated) C:\WINDOWS\system32\LenovoSysCheck.dll
2017-02-09 19:16 - 2017-02-09 19:16 - 00056848 _____ (Synaptics Incorporated) C:\WINDOWS\system32\valWbioSyncSvc.exe
2017-02-09 19:16 - 2017-02-09 19:16 - 00039488 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\smi.sys
2017-02-09 19:16 - 2013-10-05 08:58 - 00660128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp120.dll
2017-02-09 17:43 - 2017-02-10 19:30 - 00000000 ____D C:\ProgramData\boost_interprocess
2017-02-09 17:30 - 2017-02-09 17:30 - 00001158 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Premiere Pro CC 2017.lnk
2017-02-09 17:30 - 2017-02-09 17:30 - 00000000 ____D C:\Users\Public\Documents\Adobe
2017-02-09 17:28 - 2017-02-09 17:28 - 00000000 ____D C:\Users\Public\Documents\AdobeInstalledCodecs
2017-02-09 17:27 - 2017-02-09 17:27 - 00001305 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2017-02-09 17:26 - 2017-02-22 14:28 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\vlc
2017-02-09 17:25 - 2017-02-10 04:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-02-09 17:25 - 2017-02-09 17:25 - 00000000 ____D C:\Program Files\VideoLAN
2017-02-09 17:24 - 2017-02-09 17:24 - 31717016 _____ C:\Users\Vojta\Downloads\vlc-2.2.4-win64.exe
2017-02-09 14:24 - 2017-02-09 14:26 - 00000000 ____D C:\Users\Vojta\AppData\Local\Comms
2017-02-09 13:20 - 2017-02-09 13:20 - 00043520 _____ C:\Users\Vojta\Downloads\CP_update (1).xls
2017-02-09 13:18 - 2017-02-09 14:36 - 1405987770 _____ C:\Users\Vojta\Downloads\Adobe-Premiere-Pro-CC-2017-v11.0-+-Crack-[Kedar_CZ].rar
2017-02-09 13:00 - 2017-02-09 17:34 - 00000000 ____D C:\Program Files\Adobe
2017-02-09 12:49 - 2017-02-09 12:49 - 27576965 _____ C:\Users\Vojta\Downloads\Hithit.cz - Bučovice Blind Football Cup 2017.mp4
2017-02-09 12:49 - 2017-02-09 12:49 - 27576965 _____ C:\Users\Vojta\Downloads\Hithit.cz - Bučovice Blind Football Cup 2017 (1).mp4
2017-02-09 12:49 - 2017-02-09 12:49 - 27576965 _____ C:\Users\Vojta\Desktop\Hithit.cz - Bučovice Blind Football Cup 2017.mp4
2017-02-09 12:48 - 2017-02-09 12:48 - 11927462 _____ C:\Users\Vojta\Downloads\Hithit.cz - Eagleheart nahrává třetí album.mp4
2017-02-09 09:57 - 2017-02-09 12:53 - 00000000 ____D C:\Program Files (x86)\Avidemux 2.6 - 64 bits
2017-02-09 09:57 - 2017-02-09 12:51 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\avidemux
2017-02-09 09:56 - 2017-02-09 09:56 - 20541107 _____ C:\Users\Vojta\Downloads\avidemux_2.6.18_win64.exe
2017-02-09 09:36 - 2017-02-09 13:11 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2017-02-09 09:15 - 2017-02-09 09:15 - 00001217 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS3.lnk
2017-02-09 09:15 - 2017-02-09 09:15 - 00000000 ____D C:\Program Files (x86)\Bonjour
2017-02-09 09:14 - 2017-02-09 09:14 - 00001487 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit 2.lnk
2017-02-09 09:14 - 2017-02-09 09:14 - 00001303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Stock Photos CS3.lnk
2017-02-09 09:14 - 2017-02-09 09:14 - 00001272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS3.lnk
2017-02-09 09:13 - 2017-02-09 09:13 - 00001179 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS3.lnk
2017-02-09 09:03 - 2017-02-09 17:32 - 00000000 ____D C:\Users\Vojta\Documents\Adobe
2017-02-09 09:03 - 2017-02-09 09:03 - 00000000 ____D C:\Users\Vojta\AppData\Local\AMD
2017-02-09 08:44 - 2017-02-09 17:30 - 00000000 ____D C:\Program Files\Common Files\Adobe
2017-02-09 08:40 - 2017-02-22 09:57 - 00000000 ____D C:\Users\Vojta\AppData\Local\Adobe
2017-02-09 07:47 - 2017-02-09 07:47 - 00000000 ____D C:\Users\Vojta\AppData\Local\NetworkTiles
2017-02-09 07:46 - 2017-02-22 15:53 - 00014625 _____ C:\WINDOWS\system32\InstallUtil.InstallLog
2017-02-08 23:04 - 2017-02-08 23:04 - 02365296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WudfUpdate_01011.dll
2017-02-08 22:30 - 2017-02-09 09:39 - 44874097 _____ C:\Users\Vojta\Desktop\Hithit.cz - Samolibé verše Honzy Badalce.mp4
2017-02-08 22:20 - 2017-02-08 22:22 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-02-08 22:20 - 2017-02-08 22:20 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-02-08 21:42 - 2016-09-30 04:28 - 00161792 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2017-02-08 21:39 - 2016-09-07 05:22 - 00041472 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Speech.Pal.dll
2017-02-08 21:25 - 2017-02-08 21:25 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\LSC
2017-02-08 21:05 - 2017-02-08 21:06 - 00000000 ____D C:\ProgramData\FLEXnet
2017-02-08 20:36 - 2017-02-08 20:36 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\SuperAdBlocker.com
2017-02-08 20:31 - 2017-02-08 20:31 - 00000000 ____D C:\Users\Vojta\Documents\Vlastní šablony Office
2017-02-08 20:21 - 2017-02-08 20:22 - 44870141 _____ C:\Users\Vojta\Downloads\Hithit.cz - Samolibé verše Honzy Badalce.mp4
2017-02-08 20:18 - 2017-02-08 20:19 - 05426464 _____ C:\Users\Vojta\Downloads\SuperAdBlocker.exe
2017-02-08 20:11 - 2017-02-10 04:51 - 00000000 ____D C:\WINDOWS\SysWOW64\spool
2017-02-08 20:11 - 2017-02-08 20:11 - 00496896 _____ C:\Users\Vojta\Downloads\flux-setup.exe
2017-02-08 20:11 - 2017-02-08 20:11 - 00002163 _____ C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\f.lux.lnk
2017-02-08 20:11 - 2017-02-08 20:11 - 00000000 ____D C:\Users\Vojta\AppData\Local\FluxSoftware
2017-02-08 20:01 - 2017-02-08 20:01 - 00694672 _____ (Disc Soft Ltd.) C:\Users\Vojta\Downloads\DTLiteInstaller.exe
2017-02-08 19:57 - 2017-02-08 19:57 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\WinRAR
2017-02-08 19:56 - 2017-01-01 17:51 - 00141706 _____ C:\Users\Vojta\Desktop\trénink.pdf
2017-02-08 19:55 - 2014-09-24 10:10 - 511180053 _____ C:\Users\Vojta\Downloads\Adobe-photoshop-CS-3-cz-full.rar
2017-02-08 19:54 - 2017-02-08 20:28 - 00000000 ____D C:\Users\Vojta\Desktop\Nedori
2017-02-08 19:52 - 2017-02-22 14:23 - 00000000 ____D C:\Users\Vojta\Desktop\Red Bull
2017-02-08 19:50 - 2017-02-08 19:50 - 00000000 ____D C:\Users\Vojta\AppData\LocalLow\Lenovo
2017-02-08 19:49 - 2017-02-10 18:54 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-02-08 19:49 - 2017-02-09 17:27 - 00000000 ____D C:\Program Files (x86)\Adobe
2017-02-08 19:49 - 2017-02-08 19:49 - 00000000 ____D C:\Users\Vojta\Desktop\Flat
2017-02-08 19:49 - 2017-02-08 19:49 - 00000000 ____D C:\Users\Vojta\Desktop\Faktury 2017
2017-02-08 19:48 - 2017-02-10 08:15 - 00000000 ____D C:\ProgramData\Adobe
2017-02-08 19:48 - 2017-02-08 19:49 - 00000000 ____D C:\Users\Vojta\Desktop\dokumenty a manuály
2017-02-08 19:48 - 2017-02-08 19:48 - 00000000 ____D C:\Users\Vojta\Desktop\CV
2017-02-08 19:47 - 2017-02-08 19:48 - 27078264 _____ C:\Users\Vojta\Downloads\U-medvídků-teaser.mp4
2017-02-08 19:44 - 2017-02-08 19:45 - 58136984 _____ C:\Users\Vojta\Downloads\AcroRdrDC1500720033_cs_CZ.exe
2017-02-08 19:43 - 2017-02-10 04:55 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-02-08 19:43 - 2017-02-10 04:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-02-08 19:43 - 2017-02-08 19:43 - 00000000 ____D C:\Program Files\WinRAR
2017-02-08 19:42 - 2017-02-08 19:42 - 02377944 _____ C:\Users\Vojta\Downloads\winrar-x64-540cz.exe
2017-02-08 19:25 - 2017-02-10 04:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje Microsoft Office 2016
2017-02-08 19:25 - 2017-02-08 19:25 - 00002566 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002565 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive pro firmy.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002560 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002537 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002532 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002525 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype pro firmy 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002493 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002458 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002454 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2017-02-08 19:24 - 2017-02-08 19:24 - 00040448 _____ C:\Users\Vojta\Downloads\CP_update.xls
2017-02-08 19:19 - 2017-02-08 19:19 - 00000000 ____D C:\Program Files\Microsoft Office 15
2017-02-08 19:18 - 2017-02-08 19:19 - 03802424 _____ (Microsoft Corporation) C:\Users\Vojta\Downloads\Setup.X86.cs-cz_O365ProPlusRetail_06ea1c77-764e-4fda-9194-46c1771f2944_TX_PR_b_16_.exe
2017-02-08 19:12 - 2017-02-10 04:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote
2017-02-08 19:12 - 2017-02-08 20:48 - 00000000 ____D C:\Users\Vojta\Evernote
2017-02-08 19:12 - 2017-02-08 19:12 - 00000000 ____D C:\Users\Vojta\AppData\LocalLow\Evernote
2017-02-08 19:12 - 2017-02-08 19:12 - 00000000 ____D C:\Program Files (x86)\Evernote
2017-02-08 19:11 - 2017-02-22 08:20 - 00001095 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-02-08 19:10 - 2017-02-08 19:10 - 00032088 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2017-02-08 19:09 - 2017-02-22 10:09 - 00000000 ____D C:\Program Files\Common Files\AV
2017-02-08 19:09 - 2017-02-22 08:20 - 00337080 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys
2017-02-08 19:09 - 2017-02-22 08:20 - 00001986 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2017-02-08 19:09 - 2017-02-08 19:09 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\AVAST Software
2017-02-08 19:09 - 2017-02-08 19:09 - 00000000 ____D C:\Users\Vojta\AppData\Local\CEF
2017-02-08 19:09 - 2017-02-08 19:08 - 00547904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2017-02-08 19:09 - 2017-02-08 19:08 - 00337080 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys.148774803037504
2017-02-08 19:09 - 2017-02-08 19:08 - 00162528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2017-02-08 19:09 - 2017-02-08 19:08 - 00126088 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2017-02-08 19:09 - 2017-02-08 19:08 - 00100640 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2017-02-08 19:09 - 2017-02-08 19:08 - 00074680 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2017-02-08 19:09 - 2017-02-08 19:08 - 00038296 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2017-02-08 19:09 - 2017-02-08 19:07 - 00991496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2017-02-08 19:09 - 2017-02-08 19:06 - 00334600 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbloga.sys
2017-02-08 19:09 - 2017-02-08 19:06 - 00309784 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys
2017-02-08 19:09 - 2017-02-08 19:06 - 00189768 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsha.sys
2017-02-08 19:09 - 2017-02-08 19:06 - 00048528 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbuniva.sys
2017-02-08 19:06 - 2017-02-08 19:06 - 00210432 _____ (AVAST Software s.r.o.) C:\WINDOWS\SMSS-PFRO493e.tmp
2017-02-08 19:06 - 2017-02-08 19:06 - 00196880 _____ (AVAST Software s.r.o.) C:\WINDOWS\SMSS-PFRO493f.tmp
2017-02-08 19:05 - 2017-02-08 19:51 - 00000000 ____D C:\ProgramData\AVAST Software
2017-02-08 19:05 - 2017-02-08 19:10 - 00000000 ____D C:\Program Files\AVAST Software
2017-02-08 19:05 - 2017-02-08 19:05 - 06655184 _____ (AVAST Software) C:\Users\Vojta\Downloads\avast_free_antivirus_setup_online.exe
2017-02-08 19:03 - 2017-02-08 19:05 - 102359936 _____ (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Users\Vojta\Downloads\Evernote_6.4.2.3788.exe
2017-02-08 19:01 - 2017-02-08 19:01 - 01804696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01011.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00764616 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynCOM.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00620744 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SynTP.sys
2017-02-08 19:01 - 2017-02-08 19:01 - 00421560 _____ (Synaptics Incorporated) C:\WINDOWS\SysWOW64\SynCom.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00379136 _____ (Intel Corporation) C:\WINDOWS\system32\ibtproppage.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00269000 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPAPI.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00268984 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPCo34.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00253184 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\ibtusb.sys
2017-02-08 19:01 - 2017-02-08 19:01 - 00184064 _____ (Intel Corporation) C:\WINDOWS\system32\ibtsiva.exe
2017-02-08 19:01 - 2017-02-08 19:01 - 00044216 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel_Aux.sys
2017-02-08 19:01 - 2017-02-08 19:01 - 00044216 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel.sys
2017-02-08 19:01 - 2017-02-08 19:01 - 00044216 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SET2D7E.tmp
2017-02-08 19:01 - 2017-02-08 19:01 - 00043704 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_AMDASF_Aux.sys
2017-02-08 18:59 - 2017-02-22 08:25 - 00000000 ____D C:\Users\Vojta\AppData\Local\Google
2017-02-08 18:59 - 2017-02-22 08:25 - 00000000 ____D C:\Program Files (x86)\Google
2017-02-08 18:59 - 2017-02-08 18:59 - 01129376 _____ (Google Inc.) C:\Users\Vojta\Downloads\ChromeSetup.exe
2017-02-08 18:58 - 2017-02-08 18:59 - 00000000 ____D C:\Users\Vojta\AppData\Local\MicrosoftEdge
2017-02-08 18:56 - 2017-02-08 18:56 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_ldiagio_uefi_01009.Wdf
2017-02-08 18:56 - 2017-02-08 18:56 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Lenovo
2017-02-08 18:51 - 2017-02-22 09:54 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Skype
2017-02-08 18:51 - 2017-02-08 18:51 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Macromedia
2017-02-08 18:51 - 2017-02-08 18:51 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Intel Corporation
2017-02-08 18:50 - 2017-02-10 08:15 - 00002394 _____ C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-02-08 18:50 - 2017-02-10 08:15 - 00000000 ___RD C:\Users\Vojta\OneDrive
2017-02-08 18:50 - 2017-02-08 18:50 - 00000000 ____D C:\Users\Vojta\AppData\Local\Power2Go8
2017-02-08 18:48 - 2017-02-11 18:47 - 00000000 ____D C:\Users\Vojta\AppData\Local\Lenovo
2017-02-08 18:48 - 2017-02-08 18:48 - 00000000 ____D C:\Users\Vojta\REACHit
2017-02-08 18:48 - 2017-02-08 18:48 - 00000000 ____D C:\Users\Vojta\AppData\Local\Publishers
2017-02-08 18:48 - 2017-02-08 18:48 - 00000000 ____D C:\Users\Vojta\AppData\Local\CyberLink
2017-02-08 18:47 - 2017-02-22 15:52 - 00000000 __SHD C:\Users\Vojta\IntelGraphicsProfiles
2017-02-08 18:47 - 2017-02-22 14:29 - 00000000 ____D C:\Users\Vojta\AppData\Local\Packages
2017-02-08 18:47 - 2017-02-10 18:36 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Adobe
2017-02-08 18:47 - 2017-02-08 18:47 - 00016148 _____ C:\WINDOWS\system32\LAPTOP-PSMFKCI2_defaultuser0_HistoryPrediction.bin
2017-02-08 18:47 - 2017-02-08 18:47 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Intel
2017-02-08 18:47 - 2017-02-08 18:47 - 00000000 ____D C:\Users\Vojta\AppData\Local\VirtualStore
2017-02-08 18:47 - 2017-02-08 18:47 - 00000000 ____D C:\Users\Vojta\AppData\Local\TileDataLayer
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-02-22 15:55 - 2016-11-21 05:39 - 01360368 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-02-22 15:55 - 2016-11-21 04:58 - 00402734 _____ C:\WINDOWS\system32\perfh005.dat
2017-02-22 15:55 - 2016-11-21 04:58 - 00070220 _____ C:\WINDOWS\system32\perfc005.dat
2017-02-22 15:51 - 2016-11-21 05:29 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-02-22 15:51 - 2016-11-20 20:29 - 05288752 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-02-22 15:51 - 2016-11-20 20:29 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-02-22 14:33 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-02-22 14:33 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-02-22 10:09 - 2015-11-20 09:19 - 00000000 ____D C:\ProgramData\McAfee
2017-02-22 09:56 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-02-22 09:56 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-02-22 08:57 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-02-17 08:26 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-02-11 21:41 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache
2017-02-11 20:48 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2017-02-11 20:48 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\system32\WCN
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\F12
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\MiracastView
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ___RD C:\Program Files\Windows Defender
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\migwiz
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\IME
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Help
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\System
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2017-02-11 20:48 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2017-02-11 20:48 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\servicing
2017-02-11 14:43 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-02-11 10:31 - 2015-11-20 09:18 - 00000000 ____D C:\ProgramData\CyberLink
2017-02-11 07:51 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\appcompat
2017-02-10 18:43 - 2015-11-20 10:31 - 00000000 ____D C:\Users\Public\Documents\Lenovo
2017-02-10 18:43 - 2015-11-20 09:18 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-02-10 18:43 - 2015-11-20 09:16 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2017-02-10 18:43 - 2015-11-20 09:16 - 00000000 ____D C:\ProgramData\SUPPORTDIR
2017-02-10 18:43 - 2015-11-20 09:15 - 00000000 ____D C:\Program Files (x86)\Lenovo
2017-02-10 18:42 - 2015-11-20 09:16 - 00000000 ____D C:\ProgramData\Temp
2017-02-10 18:40 - 2015-11-20 09:18 - 00000000 ____D C:\Program Files\Lenovo
2017-02-10 08:12 - 2016-11-21 05:42 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-02-10 05:07 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows NT
2017-02-10 05:05 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-02-10 05:05 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Registration
2017-02-10 05:05 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-02-10 05:00 - 2015-11-20 10:07 - 01329198 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2017-02-10 04:59 - 2016-07-16 12:47 - 00000000 __RHD C:\Users\Public\Libraries
2017-02-10 04:56 - 2016-07-16 07:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-02-10 04:55 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-02-10 04:55 - 2016-07-16 07:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2017-02-10 04:55 - 2015-11-20 10:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Realtek
2017-02-10 04:55 - 2015-11-20 10:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby
2017-02-10 04:55 - 2015-11-20 10:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2017-02-10 04:55 - 2015-11-20 10:06 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2017-02-10 04:55 - 2015-11-20 09:21 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Power2Go 8
2017-02-10 04:53 - 2015-07-10 10:05 - 00000000 ____D C:\Users\Default.migrated
2017-02-10 04:51 - 2016-11-21 05:05 - 00000000 ____D C:\WINDOWS\OCR
2017-02-10 04:51 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2017-02-10 04:51 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\system32\slmgr
2017-02-10 04:51 - 2015-11-20 10:16 - 00000000 ___HD C:\WINDOWS\system32\WLANProfiles
2017-02-10 04:50 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-02-10 04:45 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-02-10 04:44 - 2015-11-20 10:08 - 00000000 ___HD C:\Intel
2017-02-10 04:35 - 2016-07-16 12:47 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-02-10 04:28 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-02-10 04:28 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Provisioning
2017-02-10 04:28 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\bcastdvr
2017-02-10 04:28 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-02-10 04:28 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Dism
2017-02-10 04:23 - 2016-07-16 12:42 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2017-02-10 04:04 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2017-02-10 04:04 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2017-02-10 04:04 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\system32\winrm
2017-02-10 04:04 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2017-02-10 04:04 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2017-02-10 04:03 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2017-02-10 03:51 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2017-02-10 03:51 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\MUI
2017-02-09 17:27 - 2015-11-20 09:15 - 00000000 ____D C:\ProgramData\Package Cache
2017-02-09 09:48 - 2015-11-20 10:28 - 00000000 ____D C:\ProgramData\Validity
2017-02-08 22:04 - 2015-11-20 09:16 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-02-08 20:57 - 2015-07-10 12:01 - 00635904 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2017-02-08 20:57 - 2015-07-10 12:01 - 00014848 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2017-02-08 18:57 - 2015-11-20 09:27 - 00000000 ____D C:\ProgramData\Lenovo
==================== Files in the root of some directories =======
2017-02-10 04:44 - 2017-02-10 04:44 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-02-17 11:39
==================== End of FRST.txt ============================
P.S. celý FRST.txt v příloze. Děkuji
2017-02-22 16:03 - 2017-02-22 16:03 - 00000000 ____D C:\Users\Vojta\Desktop\FRST-OlderVersion
2017-02-22 16:03 - 2017-02-22 16:03 - 00000000 ____D C:\FRST
2017-02-22 15:52 - 2017-02-22 15:52 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-02-22 10:26 - 2017-02-22 10:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2017-02-22 10:26 - 2017-02-22 10:26 - 00000000 ____D C:\Program Files\McAfee Security Scan
2017-02-22 10:09 - 2017-02-22 10:09 - 00000000 ____D C:\Program Files\Common Files\McAfee
2017-02-22 10:09 - 2017-02-22 10:09 - 00000000 ____D C:\Program Files (x86)\McAfee
2017-02-22 09:57 - 2017-02-22 09:57 - 00000000 ____D C:\Users\Vojta\AppData\Local\Macromedia
2017-02-22 09:56 - 2017-02-22 15:51 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2017-02-22 09:56 - 2017-02-22 15:50 - 00000000 ____D C:\Program Files\TrueKey
2017-02-22 09:56 - 2017-02-22 09:56 - 00003890 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-02-22 09:56 - 2017-02-22 09:56 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2017-02-22 09:42 - 2017-02-22 16:03 - 02422784 _____ (Farbar) C:\Users\Vojta\Desktop\FRST64.exe
2017-02-22 09:20 - 2017-02-22 09:23 - 00000000 ____D C:\Users\Vojta\Desktop\In Loco
2017-02-22 08:56 - 2017-02-22 08:56 - 00002870 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-02-22 08:56 - 2017-02-22 08:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-02-22 08:56 - 2017-02-22 08:56 - 00000000 ____D C:\Program Files\CCleaner
2017-02-22 08:52 - 2017-02-22 08:52 - 09261616 _____ (Piriform Ltd) C:\Users\Vojta\Downloads\ccsetup527.exe
2017-02-22 08:44 - 2017-02-22 08:44 - 00001235 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-02-22 08:44 - 2017-02-22 08:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-02-22 08:39 - 2017-02-22 08:39 - 00000000 ____D C:\ProgramData\Mozilla
2017-02-22 08:20 - 2017-02-08 19:08 - 00398408 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2017-02-22 08:11 - 2017-02-22 08:11 - 06253632 _____ (AVAST Software) C:\Users\Vojta\Downloads\avast_free_antivirus_setup_online (1).exe
2017-02-22 08:03 - 2017-02-22 08:03 - 02945520 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Vojta\Downloads\AVG_Antivirus_Free_1425.exe
2017-02-22 07:38 - 2017-02-22 14:24 - 00000000 ____D C:\Users\Vojta\Desktop\M-pesa
2017-02-22 07:38 - 2017-02-22 07:38 - 00039424 _____ C:\Users\Vojta\Downloads\CP_update (4).xls
2017-02-22 07:38 - 2017-02-22 07:38 - 00039424 _____ C:\Users\Vojta\Desktop\CP_update (4).xls
2017-02-22 07:37 - 2017-02-22 07:40 - 124000965 _____ C:\Users\Vojta\Desktop\M-Pesa_MM_edit.mp4
2017-02-21 20:22 - 2017-02-21 20:23 - 20661868 _____ C:\Users\Vojta\Downloads\Hithit.cz - Adoptujte maminku! Kupte ji vstupenku na mentoring..mp4
2017-02-21 10:03 - 2017-02-21 10:03 - 00530124 _____ C:\Users\Vojta\Downloads\Scan 13. 2. 2017 9.01.pdf
2017-02-20 23:10 - 2017-02-20 23:10 - 00691112 _____ C:\Users\Vojta\Downloads\Jak používat fakultní email mimo počítačovou síť pf uk.pdf
2017-02-20 20:26 - 2017-02-20 19:16 - 21385211 _____ C:\Users\Vojta\Desktop\Aplicación móvil - EVA Facial Mouse - Apps Accesibles - Fundación Vodafone España.mp4
2017-02-20 19:15 - 2017-02-20 19:16 - 17539159 _____ C:\Users\Vojta\Downloads\Hithit.cz - Nová deska Zrní.mp4
2017-02-20 19:14 - 2017-02-20 19:16 - 21385211 _____ C:\Users\Vojta\Downloads\Aplicación móvil - EVA Facial Mouse - Apps Accesibles - Fundación Vodafone España.mp4
2017-02-20 19:02 - 2017-02-20 19:03 - 00000000 ____D C:\Users\Vojta\Desktop\U Templářů
2017-02-20 18:59 - 2017-02-20 18:59 - 00039936 _____ C:\Users\Vojta\Downloads\CP_update (3).xls
2017-02-20 10:26 - 2017-02-20 10:26 - 00076801 _____ C:\Users\Vojta\Downloads\webtrekk_report_2016-03-07_Pages.xls
2017-02-20 10:25 - 2017-02-20 10:25 - 00076801 _____ C:\Users\Vojta\Downloads\webtrekk_report_2016-05-01_Pages (2).xls
2017-02-20 10:18 - 2017-02-20 10:18 - 00075265 _____ C:\Users\Vojta\Downloads\webtrekk_report_2016-05-01_Pages (1).xls
2017-02-20 10:06 - 2017-02-20 10:06 - 00075265 _____ C:\Users\Vojta\Downloads\webtrekk_report_2016-05-01_Pages.xls
2017-02-19 20:36 - 2017-02-19 20:36 - 00001467 _____ C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LenovoSettings.lnk
2017-02-17 18:37 - 2017-02-17 18:37 - 00000000 ____D C:\Users\Vojta\AppData\Local\WMTools Downloaded Files
2017-02-17 18:36 - 2017-02-17 18:36 - 12655848 _____ C:\Users\Vojta\Downloads\MM26_CS.exe
2017-02-17 16:14 - 2017-02-17 16:15 - 34987849 _____ C:\Users\Vojta\Downloads\Hithit.cz - Rádio StreetCulture jede na Nákladové nádraží Žižkov.mp4
2017-02-17 14:32 - 2017-02-17 14:32 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-02-17 14:32 - 2017-02-17 14:32 - 00000000 ____D C:\Users\Vojta\Tracing
2017-02-17 14:32 - 2017-02-17 14:32 - 00000000 ____D C:\ProgramData\Skype
2017-02-17 14:32 - 2017-02-17 14:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-02-17 14:31 - 2017-02-17 14:31 - 01629144 _____ (Skype Technologies S.A.) C:\Users\Vojta\Downloads\SkypeSetup.exe
2017-02-17 13:03 - 2017-02-17 13:07 - 185508903 _____ C:\Users\Vojta\Downloads\Foto_SEW_9_2.zip
2017-02-15 20:26 - 2017-02-15 20:26 - 00257864 _____ (Lenovo Group Limited) C:\WINDOWS\system32\iMDriverHelper.dll
2017-02-15 18:22 - 2017-02-15 18:18 - 03413049 _____ C:\Users\Vojta\Desktop\RBMH_Google Analytics Training Programme_Description.pdf
2017-02-15 18:18 - 2017-02-15 18:18 - 03413049 _____ C:\Users\Vojta\Downloads\RBMH_Google Analytics Training Programme_Description.pdf
2017-02-15 11:07 - 2017-02-15 11:07 - 00021456 _____ C:\Users\Vojta\Downloads\MP_FB_budvar-FW-2016.xlsx
2017-02-15 09:17 - 2017-02-15 09:59 - 00000000 ____D C:\Users\Vojta\Desktop\NeverDie
2017-02-15 09:17 - 2017-02-15 09:17 - 03149193 _____ C:\Users\Vojta\Downloads\wooxupnaneverdie_cz.zip
2017-02-15 09:17 - 2017-02-15 09:17 - 03149193 _____ C:\Users\Vojta\Downloads\wooxupnaneverdie_cz (1).zip
2017-02-14 18:52 - 2017-02-14 18:52 - 00041984 _____ C:\Users\Vojta\Downloads\CP_update (2).xls
2017-02-13 16:02 - 2017-02-13 16:02 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\webex
2017-02-13 16:01 - 2017-02-13 16:02 - 00000000 ____D C:\Users\Vojta\AppData\LocalLow\WebEx
2017-02-13 16:01 - 2017-02-13 16:02 - 00000000 ____D C:\Users\Vojta\AppData\Local\WebEx
2017-02-13 16:01 - 2017-02-13 16:02 - 00000000 ____D C:\ProgramData\WebEx
2017-02-13 16:01 - 2017-02-13 16:01 - 01021896 _____ (Cisco WebEx LLC) C:\Users\Vojta\Downloads\Cisco_WebEx_Add-On.exe
2017-02-13 00:29 - 2017-02-13 00:29 - 00332050 _____ C:\Users\Vojta\Downloads\2017 RALLY SWEDEN EVENT 52 MIN SCRIPT PART 3 RD1 (1).pdf
2017-02-12 21:49 - 2017-02-12 21:50 - 00000000 ____D C:\Users\Vojta\Desktop\Četba k diplomce
2017-02-12 21:34 - 2017-02-12 21:34 - 00332225 _____ C:\Users\Vojta\Downloads\RALLY SWEDEN EVENT 52 MIN SCRIPT PART 4 RD1.pdf
2017-02-12 21:34 - 2017-02-12 21:34 - 00332050 _____ C:\Users\Vojta\Downloads\2017 RALLY SWEDEN EVENT 52 MIN SCRIPT PART 3 RD1.pdf
2017-02-12 21:20 - 2017-02-12 21:20 - 00359013 _____ C:\Users\Vojta\Downloads\2017 RALLY SWEDEN 52m HIGHLIGHTS SHOW PART 1 RD1.pdf
2017-02-12 21:20 - 2017-02-12 21:20 - 00321688 _____ C:\Users\Vojta\Downloads\2017 RALLY SWEDEN 52m HIGHLIGHTS SHOW PART 2 RD1.pdf
2017-02-12 20:14 - 2017-02-12 20:15 - 121786916 _____ C:\Users\Vojta\Desktop\Hithit.cz - Camino na kolečkách 2017 - mě se chce.avi
2017-02-12 19:58 - 2017-02-12 19:59 - 71838508 _____ C:\Users\Vojta\Desktop\Hithit.cz - Camino na kolečkách 2017 znělka cut.avi
2017-02-12 16:26 - 2017-02-12 16:28 - 67267465 _____ C:\Users\Vojta\Downloads\Hithit.cz - Camino na kolečkách 2017.mp4
2017-02-11 18:40 - 2017-02-11 18:40 - 00615707 _____ C:\Users\Vojta\Downloads\P-20170211-00862--onka_wins_in_Abu_Dhabi-English.pdf
2017-02-10 20:09 - 2017-02-10 20:09 - 00790799 _____ C:\Users\Vojta\Downloads\Undisputed_Digital_Feedback (1).pptx
2017-02-10 19:10 - 2017-02-10 19:10 - 07274216 _____ C:\Users\Vojta\Downloads\Hithit.cz - Vnímej svět jinak, z perspektivy neslyšících.mp4
2017-02-10 18:41 - 2017-02-10 18:41 - 00000000 ____D C:\ProgramData\install_backup
2017-02-10 18:40 - 2012-06-13 17:10 - 00102376 _____ ("CyberLink) C:\WINDOWS\system32\Drivers\wsvd.sys
2017-02-10 18:36 - 2017-02-10 18:36 - 00000000 ____D C:\Users\Vojta\AppData\LocalLow\Adobe
2017-02-10 18:35 - 2017-02-10 18:35 - 00376087 _____ C:\Users\Vojta\Downloads\Honorare_Bublik_Vojtech.PDF
2017-02-10 12:59 - 2017-02-10 12:59 - 00790799 _____ C:\Users\Vojta\Downloads\Undisputed_Digital_Feedback.pptx
2017-02-10 10:14 - 2016-12-21 08:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2017-02-10 10:14 - 2016-12-21 05:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2017-02-10 08:54 - 2017-02-22 15:52 - 00000000 ____D C:\Users\Vojta\AppData\LocalLow\Mozilla
2017-02-10 08:53 - 2017-02-22 08:44 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Mozilla
2017-02-10 08:53 - 2017-02-22 08:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-02-10 08:53 - 2017-02-10 10:48 - 00000000 ____D C:\Users\Vojta\AppData\Local\Mozilla
2017-02-10 08:53 - 2017-02-10 08:53 - 00245544 _____ C:\Users\Vojta\Downloads\Firefox Setup Stub 51.0.1.exe
2017-02-10 08:11 - 2017-02-11 10:31 - 00000000 ____D C:\Users\Vojta\AppData\Local\ConnectedDevicesPlatform
2017-02-10 08:11 - 2017-02-10 08:11 - 00000020 ___SH C:\Users\Vojta\ntuser.ini
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Public\Documents\Obrázky
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Public\Documents\Hudba
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Public\Documents\Filmy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Šablony
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Soubory cookie
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Poslední
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Okolní tiskárny
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Okolní síť
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Nabídka Start
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Dokumenty
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Documents\Obrázky
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Documents\Hudba
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Documents\Filmy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Data aplikací
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default User\Documents\Obrázky
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default User\Documents\Hudba
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default User\Documents\Filmy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Data aplikací
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Šablony
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Plocha
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Nabídka Start
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Dokumenty
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Data aplikací
2017-02-10 05:05 - 2017-02-10 05:06 - 00007623 _____ C:\WINDOWS\diagwrn.xml
2017-02-10 05:05 - 2017-02-10 05:06 - 00007623 _____ C:\WINDOWS\diagerr.xml
2017-02-10 05:00 - 2017-02-22 08:20 - 00004012 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1486577462
2017-02-10 05:00 - 2017-02-22 08:20 - 00003994 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2017-02-10 05:00 - 2017-02-10 18:43 - 00000000 ____D C:\WINDOWS\System32\Tasks\CyberLink
2017-02-10 05:00 - 2017-02-10 05:00 - 00022924 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-02-10 05:00 - 2017-02-10 05:00 - 00003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2017-02-10 05:00 - 2017-02-10 05:00 - 00002770 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-02-10 05:00 - 2017-02-10 05:00 - 00002334 _____ C:\WINDOWS\System32\Tasks\{3C569360-026A-463B-BC2E-3BEB688916A4}
2017-02-10 05:00 - 2017-02-10 05:00 - 00002274 _____ C:\WINDOWS\System32\Tasks\DolbySelectorTask
2017-02-10 05:00 - 2017-02-10 05:00 - 00002212 _____ C:\WINDOWS\System32\Tasks\PDVDServ12 Task
2017-02-10 05:00 - 2017-02-10 05:00 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2017-02-10 05:00 - 2017-02-10 05:00 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2017-02-10 04:57 - 2017-02-22 15:51 - 00000000 ____D C:\ProgramData\Synaptics
2017-02-10 04:53 - 2017-02-10 04:53 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-02-10 04:50 - 2017-02-10 04:55 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-02-10 04:48 - 2017-02-22 09:53 - 00000000 ____D C:\Users\Vojta
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Šablony
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Soubory cookie
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Poslední
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Okolní tiskárny
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Okolní síť
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Nabídka Start
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Dokumenty
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Documents\Obrázky
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Documents\Hudba
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Documents\Filmy
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Data aplikací
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\AppData\Local\Data aplikací
2017-02-10 04:45 - 2017-02-10 04:45 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_wbf_vfs_lvcmn_01_11_00.Wdf
2017-02-10 04:45 - 2017-02-10 04:45 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2017-02-10 04:44 - 2017-02-22 15:51 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-02-10 04:44 - 2017-02-10 04:50 - 00000000 ____D C:\Program Files\Intel
2017-02-10 04:44 - 2017-02-10 04:50 - 00000000 ____D C:\Program Files\AMD
2017-02-10 04:44 - 2017-02-10 04:44 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2017-02-10 04:44 - 2017-02-10 04:44 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2017-02-10 04:44 - 2017-02-10 04:44 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2017-02-10 04:44 - 2017-02-10 04:44 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-02-10 04:44 - 2017-02-10 04:44 - 00000000 ____D C:\WINDOWS\system32\DAX2
2017-02-10 04:44 - 2017-02-10 04:44 - 00000000 ____D C:\Program Files\Realtek
2017-02-10 04:43 - 2017-02-10 04:45 - 00000000 ____D C:\Program Files\Synaptics
2017-02-10 04:43 - 2017-02-10 04:43 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2017-02-10 04:35 - 2017-02-22 08:57 - 00000000 ___DC C:\WINDOWS\Panther
2017-02-10 04:31 - 2017-02-21 09:06 - 00000000 ____D C:\Windows.old
2017-02-10 04:26 - 2017-02-10 04:26 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 13084160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 12177920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 08168000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 07812096 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 07654400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 06109184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 05380608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04746752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04673304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04130440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03777536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 03441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03306496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02953216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02828376 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02820096 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02677544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02669056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02611200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02484736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02362880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02323728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02277248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02256384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02189664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 02186896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02109952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01969912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01886344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01779712 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01738560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01691136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 01637728 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01595392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01589760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01556480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 01477632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01473048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01454504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01366016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 01354320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2017-02-10 04:26 - 2017-02-10 04:26 - 01336320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01293152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01220096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2017-02-10 04:26 - 2017-02-10 04:26 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01196544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2017-02-10 04:26 - 2017-02-10 04:26 - 01173496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01123912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01051112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2017-02-10 04:26 - 2017-02-10 04:26 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2017-02-10 04:26 - 2017-02-10 04:26 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00912896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00894096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00882680 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00861024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00811872 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00772608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00730624 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00707584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00658784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00637400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00527880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00454592 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00433504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00424616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00377184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00374448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxclu.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00319288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00266544 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcuiu.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00248480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00198856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRHelper.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00187520 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00172528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00167848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00163752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00157536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudStorageWizard.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00152416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EDPCleanup.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00142176 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00126568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfaudiocnv.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00122208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\migisol.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00117240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReportingCSP.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00091936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfaudiocnv.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00089416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\modem.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\EAMProgressHandler.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe
2017-02-10 04:25 - 2017-02-10 04:26 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 17188864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 06668040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 05722832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 05114368 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 04136448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 03542016 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 03370496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 03198464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 02913144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 02287616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 02166752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 02104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01576448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01503544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01357824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01263856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01069720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00967168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00869848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-02-10 04:25 - 2017-02-10 04:25 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-02-10 04:25 - 2017-02-10 04:25 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00352096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00219488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00168424 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2017-02-10 04:25 - 2017-02-10 04:25 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00106896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe
2017-02-10 04:25 - 2017-02-10 04:25 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
2017-02-10 03:54 - 2017-02-10 03:54 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2017-02-10 03:51 - 2017-02-10 03:51 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2017-02-10 03:51 - 2017-02-10 03:51 - 00000000 ____D C:\Program Files\Reference Assemblies
2017-02-10 03:51 - 2017-02-10 03:51 - 00000000 ____D C:\Program Files\MSBuild
2017-02-10 03:51 - 2017-02-10 03:51 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-02-10 03:51 - 2017-02-10 03:51 - 00000000 ____D C:\Program Files (x86)\MSBuild
2017-02-10 03:50 - 2016-05-25 14:31 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-02-10 03:50 - 2016-05-25 14:31 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-02-10 03:50 - 2016-05-25 14:31 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2017-02-10 03:50 - 2016-05-25 11:03 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2017-02-10 03:50 - 2016-05-25 11:03 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-02-10 03:50 - 2016-05-25 11:03 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2017-02-09 21:18 - 2017-02-20 22:48 - 00000000 ____D C:\Users\Vojta\Desktop\Sprinklr cover
2017-02-09 19:16 - 2017-02-09 19:16 - 03657376 _____ (Synaptics Incorporated) C:\WINDOWS\system32\vcsAPIFORWBF.dll
2017-02-09 19:16 - 2017-02-09 19:16 - 00980648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120.dll
2017-02-09 19:16 - 2017-02-09 19:16 - 00086544 _____ (Synaptics Incorporated) C:\WINDOWS\system32\valWBFPolicyService.exe
2017-02-09 19:16 - 2017-02-09 19:16 - 00080544 _____ (Synaptics Incorporated) C:\WINDOWS\system32\LenovoSysCheck.dll
2017-02-09 19:16 - 2017-02-09 19:16 - 00056848 _____ (Synaptics Incorporated) C:\WINDOWS\system32\valWbioSyncSvc.exe
2017-02-09 19:16 - 2017-02-09 19:16 - 00039488 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\smi.sys
2017-02-09 19:16 - 2013-10-05 08:58 - 00660128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp120.dll
2017-02-09 17:43 - 2017-02-10 19:30 - 00000000 ____D C:\ProgramData\boost_interprocess
2017-02-09 17:30 - 2017-02-09 17:30 - 00001158 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Premiere Pro CC 2017.lnk
2017-02-09 17:30 - 2017-02-09 17:30 - 00000000 ____D C:\Users\Public\Documents\Adobe
2017-02-09 17:28 - 2017-02-09 17:28 - 00000000 ____D C:\Users\Public\Documents\AdobeInstalledCodecs
2017-02-09 17:27 - 2017-02-09 17:27 - 00001305 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2017-02-09 17:26 - 2017-02-22 14:28 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\vlc
2017-02-09 17:25 - 2017-02-10 04:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-02-09 17:25 - 2017-02-09 17:25 - 00000000 ____D C:\Program Files\VideoLAN
2017-02-09 17:24 - 2017-02-09 17:24 - 31717016 _____ C:\Users\Vojta\Downloads\vlc-2.2.4-win64.exe
2017-02-09 14:24 - 2017-02-09 14:26 - 00000000 ____D C:\Users\Vojta\AppData\Local\Comms
2017-02-09 13:20 - 2017-02-09 13:20 - 00043520 _____ C:\Users\Vojta\Downloads\CP_update (1).xls
2017-02-09 13:18 - 2017-02-09 14:36 - 1405987770 _____ C:\Users\Vojta\Downloads\Adobe-Premiere-Pro-CC-2017-v11.0-+-Crack-[Kedar_CZ].rar
2017-02-09 13:00 - 2017-02-09 17:34 - 00000000 ____D C:\Program Files\Adobe
2017-02-09 12:49 - 2017-02-09 12:49 - 27576965 _____ C:\Users\Vojta\Downloads\Hithit.cz - Bučovice Blind Football Cup 2017.mp4
2017-02-09 12:49 - 2017-02-09 12:49 - 27576965 _____ C:\Users\Vojta\Downloads\Hithit.cz - Bučovice Blind Football Cup 2017 (1).mp4
2017-02-09 12:49 - 2017-02-09 12:49 - 27576965 _____ C:\Users\Vojta\Desktop\Hithit.cz - Bučovice Blind Football Cup 2017.mp4
2017-02-09 12:48 - 2017-02-09 12:48 - 11927462 _____ C:\Users\Vojta\Downloads\Hithit.cz - Eagleheart nahrává třetí album.mp4
2017-02-09 09:57 - 2017-02-09 12:53 - 00000000 ____D C:\Program Files (x86)\Avidemux 2.6 - 64 bits
2017-02-09 09:57 - 2017-02-09 12:51 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\avidemux
2017-02-09 09:56 - 2017-02-09 09:56 - 20541107 _____ C:\Users\Vojta\Downloads\avidemux_2.6.18_win64.exe
2017-02-09 09:36 - 2017-02-09 13:11 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2017-02-09 09:15 - 2017-02-09 09:15 - 00001217 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS3.lnk
2017-02-09 09:15 - 2017-02-09 09:15 - 00000000 ____D C:\Program Files (x86)\Bonjour
2017-02-09 09:14 - 2017-02-09 09:14 - 00001487 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit 2.lnk
2017-02-09 09:14 - 2017-02-09 09:14 - 00001303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Stock Photos CS3.lnk
2017-02-09 09:14 - 2017-02-09 09:14 - 00001272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS3.lnk
2017-02-09 09:13 - 2017-02-09 09:13 - 00001179 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS3.lnk
2017-02-09 09:03 - 2017-02-09 17:32 - 00000000 ____D C:\Users\Vojta\Documents\Adobe
2017-02-09 09:03 - 2017-02-09 09:03 - 00000000 ____D C:\Users\Vojta\AppData\Local\AMD
2017-02-09 08:44 - 2017-02-09 17:30 - 00000000 ____D C:\Program Files\Common Files\Adobe
2017-02-09 08:40 - 2017-02-22 09:57 - 00000000 ____D C:\Users\Vojta\AppData\Local\Adobe
2017-02-09 07:47 - 2017-02-09 07:47 - 00000000 ____D C:\Users\Vojta\AppData\Local\NetworkTiles
2017-02-09 07:46 - 2017-02-22 15:53 - 00014625 _____ C:\WINDOWS\system32\InstallUtil.InstallLog
2017-02-08 23:04 - 2017-02-08 23:04 - 02365296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WudfUpdate_01011.dll
2017-02-08 22:30 - 2017-02-09 09:39 - 44874097 _____ C:\Users\Vojta\Desktop\Hithit.cz - Samolibé verše Honzy Badalce.mp4
2017-02-08 22:20 - 2017-02-08 22:22 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-02-08 22:20 - 2017-02-08 22:20 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-02-08 21:42 - 2016-09-30 04:28 - 00161792 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2017-02-08 21:39 - 2016-09-07 05:22 - 00041472 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Speech.Pal.dll
2017-02-08 21:25 - 2017-02-08 21:25 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\LSC
2017-02-08 21:05 - 2017-02-08 21:06 - 00000000 ____D C:\ProgramData\FLEXnet
2017-02-08 20:36 - 2017-02-08 20:36 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\SuperAdBlocker.com
2017-02-08 20:31 - 2017-02-08 20:31 - 00000000 ____D C:\Users\Vojta\Documents\Vlastní šablony Office
2017-02-08 20:21 - 2017-02-08 20:22 - 44870141 _____ C:\Users\Vojta\Downloads\Hithit.cz - Samolibé verše Honzy Badalce.mp4
2017-02-08 20:18 - 2017-02-08 20:19 - 05426464 _____ C:\Users\Vojta\Downloads\SuperAdBlocker.exe
2017-02-08 20:11 - 2017-02-10 04:51 - 00000000 ____D C:\WINDOWS\SysWOW64\spool
2017-02-08 20:11 - 2017-02-08 20:11 - 00496896 _____ C:\Users\Vojta\Downloads\flux-setup.exe
2017-02-08 20:11 - 2017-02-08 20:11 - 00002163 _____ C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\f.lux.lnk
2017-02-08 20:11 - 2017-02-08 20:11 - 00000000 ____D C:\Users\Vojta\AppData\Local\FluxSoftware
2017-02-08 20:01 - 2017-02-08 20:01 - 00694672 _____ (Disc Soft Ltd.) C:\Users\Vojta\Downloads\DTLiteInstaller.exe
2017-02-08 19:57 - 2017-02-08 19:57 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\WinRAR
2017-02-08 19:56 - 2017-01-01 17:51 - 00141706 _____ C:\Users\Vojta\Desktop\trénink.pdf
2017-02-08 19:55 - 2014-09-24 10:10 - 511180053 _____ C:\Users\Vojta\Downloads\Adobe-photoshop-CS-3-cz-full.rar
2017-02-08 19:54 - 2017-02-08 20:28 - 00000000 ____D C:\Users\Vojta\Desktop\Nedori
2017-02-08 19:52 - 2017-02-22 14:23 - 00000000 ____D C:\Users\Vojta\Desktop\Red Bull
2017-02-08 19:50 - 2017-02-08 19:50 - 00000000 ____D C:\Users\Vojta\AppData\LocalLow\Lenovo
2017-02-08 19:49 - 2017-02-10 18:54 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-02-08 19:49 - 2017-02-09 17:27 - 00000000 ____D C:\Program Files (x86)\Adobe
2017-02-08 19:49 - 2017-02-08 19:49 - 00000000 ____D C:\Users\Vojta\Desktop\Flat
2017-02-08 19:49 - 2017-02-08 19:49 - 00000000 ____D C:\Users\Vojta\Desktop\Faktury 2017
2017-02-08 19:48 - 2017-02-10 08:15 - 00000000 ____D C:\ProgramData\Adobe
2017-02-08 19:48 - 2017-02-08 19:49 - 00000000 ____D C:\Users\Vojta\Desktop\dokumenty a manuály
2017-02-08 19:48 - 2017-02-08 19:48 - 00000000 ____D C:\Users\Vojta\Desktop\CV
2017-02-08 19:47 - 2017-02-08 19:48 - 27078264 _____ C:\Users\Vojta\Downloads\U-medvídků-teaser.mp4
2017-02-08 19:44 - 2017-02-08 19:45 - 58136984 _____ C:\Users\Vojta\Downloads\AcroRdrDC1500720033_cs_CZ.exe
2017-02-08 19:43 - 2017-02-10 04:55 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-02-08 19:43 - 2017-02-10 04:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-02-08 19:43 - 2017-02-08 19:43 - 00000000 ____D C:\Program Files\WinRAR
2017-02-08 19:42 - 2017-02-08 19:42 - 02377944 _____ C:\Users\Vojta\Downloads\winrar-x64-540cz.exe
2017-02-08 19:25 - 2017-02-10 04:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje Microsoft Office 2016
2017-02-08 19:25 - 2017-02-08 19:25 - 00002566 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002565 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive pro firmy.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002560 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002537 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002532 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002525 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype pro firmy 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002493 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002458 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002454 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2017-02-08 19:24 - 2017-02-08 19:24 - 00040448 _____ C:\Users\Vojta\Downloads\CP_update.xls
2017-02-08 19:19 - 2017-02-08 19:19 - 00000000 ____D C:\Program Files\Microsoft Office 15
2017-02-08 19:18 - 2017-02-08 19:19 - 03802424 _____ (Microsoft Corporation) C:\Users\Vojta\Downloads\Setup.X86.cs-cz_O365ProPlusRetail_06ea1c77-764e-4fda-9194-46c1771f2944_TX_PR_b_16_.exe
2017-02-08 19:12 - 2017-02-10 04:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote
2017-02-08 19:12 - 2017-02-08 20:48 - 00000000 ____D C:\Users\Vojta\Evernote
2017-02-08 19:12 - 2017-02-08 19:12 - 00000000 ____D C:\Users\Vojta\AppData\LocalLow\Evernote
2017-02-08 19:12 - 2017-02-08 19:12 - 00000000 ____D C:\Program Files (x86)\Evernote
2017-02-08 19:11 - 2017-02-22 08:20 - 00001095 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-02-08 19:10 - 2017-02-08 19:10 - 00032088 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2017-02-08 19:09 - 2017-02-22 10:09 - 00000000 ____D C:\Program Files\Common Files\AV
2017-02-08 19:09 - 2017-02-22 08:20 - 00337080 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys
2017-02-08 19:09 - 2017-02-22 08:20 - 00001986 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2017-02-08 19:09 - 2017-02-08 19:09 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\AVAST Software
2017-02-08 19:09 - 2017-02-08 19:09 - 00000000 ____D C:\Users\Vojta\AppData\Local\CEF
2017-02-08 19:09 - 2017-02-08 19:08 - 00547904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2017-02-08 19:09 - 2017-02-08 19:08 - 00337080 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys.148774803037504
2017-02-08 19:09 - 2017-02-08 19:08 - 00162528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2017-02-08 19:09 - 2017-02-08 19:08 - 00126088 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2017-02-08 19:09 - 2017-02-08 19:08 - 00100640 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2017-02-08 19:09 - 2017-02-08 19:08 - 00074680 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2017-02-08 19:09 - 2017-02-08 19:08 - 00038296 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2017-02-08 19:09 - 2017-02-08 19:07 - 00991496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2017-02-08 19:09 - 2017-02-08 19:06 - 00334600 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbloga.sys
2017-02-08 19:09 - 2017-02-08 19:06 - 00309784 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys
2017-02-08 19:09 - 2017-02-08 19:06 - 00189768 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsha.sys
2017-02-08 19:09 - 2017-02-08 19:06 - 00048528 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbuniva.sys
2017-02-08 19:06 - 2017-02-08 19:06 - 00210432 _____ (AVAST Software s.r.o.) C:\WINDOWS\SMSS-PFRO493e.tmp
2017-02-08 19:06 - 2017-02-08 19:06 - 00196880 _____ (AVAST Software s.r.o.) C:\WINDOWS\SMSS-PFRO493f.tmp
2017-02-08 19:05 - 2017-02-08 19:51 - 00000000 ____D C:\ProgramData\AVAST Software
2017-02-08 19:05 - 2017-02-08 19:10 - 00000000 ____D C:\Program Files\AVAST Software
2017-02-08 19:05 - 2017-02-08 19:05 - 06655184 _____ (AVAST Software) C:\Users\Vojta\Downloads\avast_free_antivirus_setup_online.exe
2017-02-08 19:03 - 2017-02-08 19:05 - 102359936 _____ (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Users\Vojta\Downloads\Evernote_6.4.2.3788.exe
2017-02-08 19:01 - 2017-02-08 19:01 - 01804696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01011.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00764616 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynCOM.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00620744 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SynTP.sys
2017-02-08 19:01 - 2017-02-08 19:01 - 00421560 _____ (Synaptics Incorporated) C:\WINDOWS\SysWOW64\SynCom.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00379136 _____ (Intel Corporation) C:\WINDOWS\system32\ibtproppage.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00269000 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPAPI.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00268984 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPCo34.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00253184 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\ibtusb.sys
2017-02-08 19:01 - 2017-02-08 19:01 - 00184064 _____ (Intel Corporation) C:\WINDOWS\system32\ibtsiva.exe
2017-02-08 19:01 - 2017-02-08 19:01 - 00044216 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel_Aux.sys
2017-02-08 19:01 - 2017-02-08 19:01 - 00044216 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel.sys
2017-02-08 19:01 - 2017-02-08 19:01 - 00044216 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SET2D7E.tmp
2017-02-08 19:01 - 2017-02-08 19:01 - 00043704 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_AMDASF_Aux.sys
2017-02-08 18:59 - 2017-02-22 08:25 - 00000000 ____D C:\Users\Vojta\AppData\Local\Google
2017-02-08 18:59 - 2017-02-22 08:25 - 00000000 ____D C:\Program Files (x86)\Google
2017-02-08 18:59 - 2017-02-08 18:59 - 01129376 _____ (Google Inc.) C:\Users\Vojta\Downloads\ChromeSetup.exe
2017-02-08 18:58 - 2017-02-08 18:59 - 00000000 ____D C:\Users\Vojta\AppData\Local\MicrosoftEdge
2017-02-08 18:56 - 2017-02-08 18:56 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_ldiagio_uefi_01009.Wdf
2017-02-08 18:56 - 2017-02-08 18:56 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Lenovo
2017-02-08 18:51 - 2017-02-22 09:54 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Skype
2017-02-08 18:51 - 2017-02-08 18:51 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Macromedia
2017-02-08 18:51 - 2017-02-08 18:51 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Intel Corporation
2017-02-08 18:50 - 2017-02-10 08:15 - 00002394 _____ C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-02-08 18:50 - 2017-02-10 08:15 - 00000000 ___RD C:\Users\Vojta\OneDrive
2017-02-08 18:50 - 2017-02-08 18:50 - 00000000 ____D C:\Users\Vojta\AppData\Local\Power2Go8
2017-02-08 18:48 - 2017-02-11 18:47 - 00000000 ____D C:\Users\Vojta\AppData\Local\Lenovo
2017-02-08 18:48 - 2017-02-08 18:48 - 00000000 ____D C:\Users\Vojta\REACHit
2017-02-08 18:48 - 2017-02-08 18:48 - 00000000 ____D C:\Users\Vojta\AppData\Local\Publishers
2017-02-08 18:48 - 2017-02-08 18:48 - 00000000 ____D C:\Users\Vojta\AppData\Local\CyberLink
2017-02-08 18:47 - 2017-02-22 15:52 - 00000000 __SHD C:\Users\Vojta\IntelGraphicsProfiles
2017-02-08 18:47 - 2017-02-22 14:29 - 00000000 ____D C:\Users\Vojta\AppData\Local\Packages
2017-02-08 18:47 - 2017-02-10 18:36 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Adobe
2017-02-08 18:47 - 2017-02-08 18:47 - 00016148 _____ C:\WINDOWS\system32\LAPTOP-PSMFKCI2_defaultuser0_HistoryPrediction.bin
2017-02-08 18:47 - 2017-02-08 18:47 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Intel
2017-02-08 18:47 - 2017-02-08 18:47 - 00000000 ____D C:\Users\Vojta\AppData\Local\VirtualStore
2017-02-08 18:47 - 2017-02-08 18:47 - 00000000 ____D C:\Users\Vojta\AppData\Local\TileDataLayer
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-02-22 15:55 - 2016-11-21 05:39 - 01360368 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-02-22 15:55 - 2016-11-21 04:58 - 00402734 _____ C:\WINDOWS\system32\perfh005.dat
2017-02-22 15:55 - 2016-11-21 04:58 - 00070220 _____ C:\WINDOWS\system32\perfc005.dat
2017-02-22 15:51 - 2016-11-21 05:29 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-02-22 15:51 - 2016-11-20 20:29 - 05288752 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-02-22 15:51 - 2016-11-20 20:29 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-02-22 14:33 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-02-22 14:33 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-02-22 10:09 - 2015-11-20 09:19 - 00000000 ____D C:\ProgramData\McAfee
2017-02-22 09:56 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-02-22 09:56 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-02-22 08:57 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-02-17 08:26 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-02-11 21:41 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache
2017-02-11 20:48 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2017-02-11 20:48 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\system32\WCN
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\F12
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\MiracastView
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ___RD C:\Program Files\Windows Defender
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\migwiz
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\IME
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Help
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\System
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2017-02-11 20:48 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2017-02-11 20:48 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\servicing
2017-02-11 14:43 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-02-11 10:31 - 2015-11-20 09:18 - 00000000 ____D C:\ProgramData\CyberLink
2017-02-11 07:51 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\appcompat
2017-02-10 18:43 - 2015-11-20 10:31 - 00000000 ____D C:\Users\Public\Documents\Lenovo
2017-02-10 18:43 - 2015-11-20 09:18 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-02-10 18:43 - 2015-11-20 09:16 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2017-02-10 18:43 - 2015-11-20 09:16 - 00000000 ____D C:\ProgramData\SUPPORTDIR
2017-02-10 18:43 - 2015-11-20 09:15 - 00000000 ____D C:\Program Files (x86)\Lenovo
2017-02-10 18:42 - 2015-11-20 09:16 - 00000000 ____D C:\ProgramData\Temp
2017-02-10 18:40 - 2015-11-20 09:18 - 00000000 ____D C:\Program Files\Lenovo
2017-02-10 08:12 - 2016-11-21 05:42 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-02-10 05:07 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows NT
2017-02-10 05:05 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-02-10 05:05 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Registration
2017-02-10 05:05 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-02-10 05:00 - 2015-11-20 10:07 - 01329198 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2017-02-10 04:59 - 2016-07-16 12:47 - 00000000 __RHD C:\Users\Public\Libraries
2017-02-10 04:56 - 2016-07-16 07:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-02-10 04:55 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-02-10 04:55 - 2016-07-16 07:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2017-02-10 04:55 - 2015-11-20 10:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Realtek
2017-02-10 04:55 - 2015-11-20 10:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby
2017-02-10 04:55 - 2015-11-20 10:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2017-02-10 04:55 - 2015-11-20 10:06 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2017-02-10 04:55 - 2015-11-20 09:21 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Power2Go 8
2017-02-10 04:53 - 2015-07-10 10:05 - 00000000 ____D C:\Users\Default.migrated
2017-02-10 04:51 - 2016-11-21 05:05 - 00000000 ____D C:\WINDOWS\OCR
2017-02-10 04:51 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2017-02-10 04:51 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\system32\slmgr
2017-02-10 04:51 - 2015-11-20 10:16 - 00000000 ___HD C:\WINDOWS\system32\WLANProfiles
2017-02-10 04:50 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-02-10 04:45 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-02-10 04:44 - 2015-11-20 10:08 - 00000000 ___HD C:\Intel
2017-02-10 04:35 - 2016-07-16 12:47 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-02-10 04:28 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-02-10 04:28 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Provisioning
2017-02-10 04:28 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\bcastdvr
2017-02-10 04:28 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-02-10 04:28 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Dism
2017-02-10 04:23 - 2016-07-16 12:42 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2017-02-10 04:04 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2017-02-10 04:04 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2017-02-10 04:04 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\system32\winrm
2017-02-10 04:04 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2017-02-10 04:04 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2017-02-10 04:03 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2017-02-10 03:51 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2017-02-10 03:51 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\MUI
2017-02-09 17:27 - 2015-11-20 09:15 - 00000000 ____D C:\ProgramData\Package Cache
2017-02-09 09:48 - 2015-11-20 10:28 - 00000000 ____D C:\ProgramData\Validity
2017-02-08 22:04 - 2015-11-20 09:16 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-02-08 20:57 - 2015-07-10 12:01 - 00635904 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2017-02-08 20:57 - 2015-07-10 12:01 - 00014848 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2017-02-08 18:57 - 2015-11-20 09:27 - 00000000 ____D C:\ProgramData\Lenovo
==================== Files in the root of some directories =======
2017-02-10 04:44 - 2017-02-10 04:44 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-02-17 11:39
==================== End of FRST.txt ============================
P.S. celý FRST.txt v příloze. Děkuji
- Přílohy
-
- FRST.rar
- (17.45 KiB) Staženo 96 x
- Rudy
- Site Admin

- Příspěvky: 119672
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Podezření na malware - FRST 2 posty
Zdravím!
Spusťte tuto utilitu:
Spusťte tuto utilitu:
Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Podezření na malware - FRST 2 posty
Moc díky! Log zde:
# AdwCleaner v6.043 - Log vytvořen 22/02/2017 v 20:32:56
# Aktualizováno dne 27/01/2017 z Malwarebytes
# Databáze : 2017-02-22.1 [Server]
# Operační systém : Windows 10 Home (X64)
# Uživatelské jméno : Vojta - LAPTOP-PSMFKCI2
# Spuštěno z : C:\Users\Vojta\Desktop\adwcleaner_6.043.exe
# Mod: Čištění
# Podpora : https://www.malwarebytes.com/support
***** [ Služby ] *****
***** [ Složky ] *****
***** [ Soubory ] *****
***** [ DLL ] *****
***** [ WMI ] *****
***** [ Zástupci ] *****
***** [ Naplánované úlohy ] *****
***** [ Registry ] *****
[-] Data obnovena: HKU\S-1-5-21-198560242-2740718659-3163697484-1001\Software\Microsoft\Internet Explorer\Main [Secondary Start Pages]
[-] Data obnovena: HKU\S-1-5-21-198560242-2740718659-3163697484-1001\Software\Microsoft\Internet Explorer\Main [Default_Secondary_Page_URL]
[-] Data obnovena: HKCU\Software\Microsoft\Internet Explorer\Main [Secondary Start Pages]
[-] Data obnovena: HKCU\Software\Microsoft\Internet Explorer\Main [Default_Secondary_Page_URL]
[-] Data obnovena: [x64] HKCU\Software\Microsoft\Internet Explorer\Main [Secondary Start Pages]
[-] Data obnovena: [x64] HKCU\Software\Microsoft\Internet Explorer\Main [Default_Secondary_Page_URL]
***** [ Prohlížeče ] *****
*************************
:: "Tracing" klíče smazány
:: Winsock nastavení vyčištěno
*************************
C:\AdwCleaner\AdwCleaner[C0].txt - [1460 Bajty] - [22/02/2017 20:32:56]
C:\AdwCleaner\AdwCleaner[S0].txt - [2121 Bajty] - [22/02/2017 20:32:44]
########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1606 Bajty] ##########
# AdwCleaner v6.043 - Log vytvořen 22/02/2017 v 20:32:56
# Aktualizováno dne 27/01/2017 z Malwarebytes
# Databáze : 2017-02-22.1 [Server]
# Operační systém : Windows 10 Home (X64)
# Uživatelské jméno : Vojta - LAPTOP-PSMFKCI2
# Spuštěno z : C:\Users\Vojta\Desktop\adwcleaner_6.043.exe
# Mod: Čištění
# Podpora : https://www.malwarebytes.com/support
***** [ Služby ] *****
***** [ Složky ] *****
***** [ Soubory ] *****
***** [ DLL ] *****
***** [ WMI ] *****
***** [ Zástupci ] *****
***** [ Naplánované úlohy ] *****
***** [ Registry ] *****
[-] Data obnovena: HKU\S-1-5-21-198560242-2740718659-3163697484-1001\Software\Microsoft\Internet Explorer\Main [Secondary Start Pages]
[-] Data obnovena: HKU\S-1-5-21-198560242-2740718659-3163697484-1001\Software\Microsoft\Internet Explorer\Main [Default_Secondary_Page_URL]
[-] Data obnovena: HKCU\Software\Microsoft\Internet Explorer\Main [Secondary Start Pages]
[-] Data obnovena: HKCU\Software\Microsoft\Internet Explorer\Main [Default_Secondary_Page_URL]
[-] Data obnovena: [x64] HKCU\Software\Microsoft\Internet Explorer\Main [Secondary Start Pages]
[-] Data obnovena: [x64] HKCU\Software\Microsoft\Internet Explorer\Main [Default_Secondary_Page_URL]
***** [ Prohlížeče ] *****
*************************
:: "Tracing" klíče smazány
:: Winsock nastavení vyčištěno
*************************
C:\AdwCleaner\AdwCleaner[C0].txt - [1460 Bajty] - [22/02/2017 20:32:56]
C:\AdwCleaner\AdwCleaner[S0].txt - [2121 Bajty] - [22/02/2017 20:32:44]
########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1606 Bajty] ##########
- Rudy
- Site Admin

- Příspěvky: 119672
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Podezření na malware - FRST 2 posty
Dejte nový log FRST.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Podezření na malware - FRST 2 posty
Napravuju. Musím zase rozdělit:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 22-02-2017 01
Ran by Vojta (administrator) on LAPTOP-PSMFKCI2 (22-02-2017 21:23:08)
Running from C:\Users\Vojta\Desktop
Loaded Profiles: Vojta (Available Profiles: Vojta)
Platform: Windows 10 Home Version 1607 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Synaptics Incorporated) C:\Windows\System32\valWbioSyncSvc.exe
(Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynFP\Shared\SensorDBSynch.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
() C:\Program Files\Lenovo\LenovoUtility\utility.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Flux Software LLC) C:\Users\Vojta\AppData\Local\FluxSoftware\Flux\flux.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD12\PDVD12Serv.exe
(Lenovo) C:\Program Files\Lenovo\QuickOptimizer\QuickOptimizerIcon.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.500\SSScheduler.exe
(CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe.148779251151501
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.110.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-11-21] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16152792 2015-07-17] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1394392 2015-07-14] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1394392 2015-07-14] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1394392 2015-07-14] (Realtek Semiconductor)
HKLM\...\Run: [LenovoUtility] => C:\Program Files\Lenovo\LenovoUtility\utility.exe [791848 2015-11-20] ()
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [322472 2015-07-22] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3947704 2017-02-08] (Synaptics Incorporated)
HKLM-x32\...\Run: [Lenovo Smart Fingerprint] => C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe [1758480 2015-07-10] (Lenovo)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe [110344 2014-09-09] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\Lenovo\Power2Go\VirtualDrive.exe [492808 2014-09-09] (CyberLink Corp.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-07] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [205512 2017-02-08] (AVAST Software)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2383040 2016-10-12] (Adobe Systems Incorporated)
HKU\S-1-5-21-198560242-2740718659-3163697484-1001\...\Run: [f.lux] => C:\Users\Vojta\AppData\Local\FluxSoftware\Flux\flux.exe [1024240 2016-12-06] (Flux Software LLC)
HKU\S-1-5-21-198560242-2740718659-3163697484-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9363672 2017-02-08] (Piriform Ltd)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-06-10] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-06-10] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-06-10] ()
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-02-08] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-02-22]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.500\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2017-02-08]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: 0.0.0.1 mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 10.255.255.10 10.255.255.20
Tcpip\..\Interfaces\{46d1c46c-3644-4734-b234-e50e3e09e4d6}: [DhcpNameServer] 10.255.255.10 10.255.255.20
Tcpip\..\Interfaces\{ddbfe38c-ad2f-4845-b31e-f83df0e3d83f}: [NameServer] 10.255.255.10,10.255.255.20
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-198560242-2740718659-3163697484-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-198560242-2740718659-3163697484-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo15.msn.com/?pc=LCTE
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-02-08] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-02-08] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-02-08] (Microsoft Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2016-10-31] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-02-08] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-08] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-08] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-08] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-08] (Microsoft Corporation)
FireFox:
========
FF DefaultProfile: p9tq7kus.default
FF ProfilePath: C:\Users\Vojta\AppData\Roaming\Mozilla\Firefox\Profiles\p9tq7kus.default [2017-02-22]
FF Session Restore: Mozilla\Firefox\Profiles\p9tq7kus.default -> is enabled.
FF Extension: (Zoom Page) - C:\Users\Vojta\AppData\Roaming\Mozilla\Firefox\Profiles\p9tq7kus.default\Extensions\zoompage@DW-dev.xpi [2017-02-22]
FF Extension: (Adblock Plus) - C:\Users\Vojta\AppData\Roaming\Mozilla\Firefox\Profiles\p9tq7kus.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-02-22]
FF Extension: (SHA-1 deprecation staged rollout) - C:\Users\Vojta\AppData\Roaming\Mozilla\Firefox\Profiles\p9tq7kus.default\features\{71e22dc2-d49d-431e-a30c-4c694adde3e1}\disableSHA1rollout@mozilla.org.xpi [2017-02-22]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF48
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF48 [2017-02-22]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF48
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF48 [2017-02-22]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF48
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF48
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_221.dll [2017-02-22] ()
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-10-12] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_221.dll [2017-02-22] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-02-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-02-08] (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-10-12] (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Users\Vojta\AppData\Roaming\mozilla\plugins\npatgpc.dll [2017-02-13] (Cisco WebEx LLC)
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [744640 2016-10-12] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-01-19] (Adobe Systems, Incorporated)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7142136 2017-02-22] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [262736 2017-02-08] (AVAST Software)
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3702472 2017-01-29] (Microsoft Corporation)
S3 cplspcon; C:\WINDOWS\system32\IntelCpHDCPSvc.exe [595560 2015-09-04] (Intel Corporation)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2017-02-09] (Macrovision Europe Ltd.) [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [18856 2015-07-22] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [350312 2015-09-04] (Intel Corporation)
R2 ImControllerService; c:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [61768 2017-02-15] (Lenovo Group Limited)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [271296 2015-07-17] (Lenovo)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.500\McCHSvc.exe [329480 2017-01-19] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-06-12] ()
R2 valWBFPolicyService; C:\WINDOWS\system32\valWBFPolicyService.exe [86544 2017-02-09] (Synaptics Incorporated)
R2 valWbioSyncSvc; C:\WINDOWS\system32\valWbioSyncSvc.exe [56848 2017-02-09] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3831200 2015-06-12] (Intel® Corporation)
R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]
S2 InstallerService; C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe -originalversion 4.4.127.0 [X]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [309784 2017-02-08] (AVAST Software s.r.o.)
R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [189768 2017-02-08] (AVAST Software s.r.o.)
R0 aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [334600 2017-02-08] (AVAST Software s.r.o.)
R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [48528 2017-02-08] (AVAST Software s.r.o.)
S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [38296 2017-02-08] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [32088 2017-02-08] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [126088 2017-02-08] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [100640 2017-02-08] (AVAST Software)
R0 AswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [74680 2017-02-08] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [991496 2017-02-08] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [547904 2017-02-08] (AVAST Software)
R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [162528 2017-02-08] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [337080 2017-02-22] (AVAST Software)
R1 CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [253184 2017-02-08] (Intel Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
S3 NETwNe64; C:\WINDOWS\System32\drivers\NETwew01.sys [3354384 2015-07-10] (Intel Corporation)
R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7116288 2016-07-16] (Intel Corporation)
R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [310528 2015-05-21] (Realtek Semiconductor Corp.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [886528 2015-07-30] (Realtek )
R3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [3059416 2015-06-11] (Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [44216 2017-02-08] (Synaptics Incorporated)
R1 SMIDriver; C:\WINDOWS\system32\DRIVERS\smi.sys [39488 2017-02-09] (Synaptics Incorporated)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 22-02-2017 01
Ran by Vojta (administrator) on LAPTOP-PSMFKCI2 (22-02-2017 21:23:08)
Running from C:\Users\Vojta\Desktop
Loaded Profiles: Vojta (Available Profiles: Vojta)
Platform: Windows 10 Home Version 1607 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Synaptics Incorporated) C:\Windows\System32\valWbioSyncSvc.exe
(Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynFP\Shared\SensorDBSynch.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
() C:\Program Files\Lenovo\LenovoUtility\utility.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Flux Software LLC) C:\Users\Vojta\AppData\Local\FluxSoftware\Flux\flux.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD12\PDVD12Serv.exe
(Lenovo) C:\Program Files\Lenovo\QuickOptimizer\QuickOptimizerIcon.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.500\SSScheduler.exe
(CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe.148779251151501
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.110.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-11-21] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16152792 2015-07-17] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1394392 2015-07-14] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1394392 2015-07-14] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1394392 2015-07-14] (Realtek Semiconductor)
HKLM\...\Run: [LenovoUtility] => C:\Program Files\Lenovo\LenovoUtility\utility.exe [791848 2015-11-20] ()
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [322472 2015-07-22] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3947704 2017-02-08] (Synaptics Incorporated)
HKLM-x32\...\Run: [Lenovo Smart Fingerprint] => C:\Program Files (x86)\Lenovo\Lenovo Smart Fingerprint\fplmonitor.exe [1758480 2015-07-10] (Lenovo)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe [110344 2014-09-09] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\Lenovo\Power2Go\VirtualDrive.exe [492808 2014-09-09] (CyberLink Corp.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-07] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [205512 2017-02-08] (AVAST Software)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2383040 2016-10-12] (Adobe Systems Incorporated)
HKU\S-1-5-21-198560242-2740718659-3163697484-1001\...\Run: [f.lux] => C:\Users\Vojta\AppData\Local\FluxSoftware\Flux\flux.exe [1024240 2016-12-06] (Flux Software LLC)
HKU\S-1-5-21-198560242-2740718659-3163697484-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9363672 2017-02-08] (Piriform Ltd)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-06-10] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-06-10] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-06-10] ()
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-02-08] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-02-22]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.500\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2017-02-08]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: 0.0.0.1 mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 10.255.255.10 10.255.255.20
Tcpip\..\Interfaces\{46d1c46c-3644-4734-b234-e50e3e09e4d6}: [DhcpNameServer] 10.255.255.10 10.255.255.20
Tcpip\..\Interfaces\{ddbfe38c-ad2f-4845-b31e-f83df0e3d83f}: [NameServer] 10.255.255.10,10.255.255.20
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-198560242-2740718659-3163697484-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-198560242-2740718659-3163697484-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo15.msn.com/?pc=LCTE
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-02-08] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-02-08] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-02-08] (Microsoft Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2016-10-31] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-02-08] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-08] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-08] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-08] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-08] (Microsoft Corporation)
FireFox:
========
FF DefaultProfile: p9tq7kus.default
FF ProfilePath: C:\Users\Vojta\AppData\Roaming\Mozilla\Firefox\Profiles\p9tq7kus.default [2017-02-22]
FF Session Restore: Mozilla\Firefox\Profiles\p9tq7kus.default -> is enabled.
FF Extension: (Zoom Page) - C:\Users\Vojta\AppData\Roaming\Mozilla\Firefox\Profiles\p9tq7kus.default\Extensions\zoompage@DW-dev.xpi [2017-02-22]
FF Extension: (Adblock Plus) - C:\Users\Vojta\AppData\Roaming\Mozilla\Firefox\Profiles\p9tq7kus.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-02-22]
FF Extension: (SHA-1 deprecation staged rollout) - C:\Users\Vojta\AppData\Roaming\Mozilla\Firefox\Profiles\p9tq7kus.default\features\{71e22dc2-d49d-431e-a30c-4c694adde3e1}\disableSHA1rollout@mozilla.org.xpi [2017-02-22]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF48
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF48 [2017-02-22]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF48
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF48 [2017-02-22]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF48
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF48
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_221.dll [2017-02-22] ()
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-10-12] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_221.dll [2017-02-22] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-02-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-02-08] (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-10-12] (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Users\Vojta\AppData\Roaming\mozilla\plugins\npatgpc.dll [2017-02-13] (Cisco WebEx LLC)
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [744640 2016-10-12] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-01-19] (Adobe Systems, Incorporated)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7142136 2017-02-22] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [262736 2017-02-08] (AVAST Software)
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3702472 2017-01-29] (Microsoft Corporation)
S3 cplspcon; C:\WINDOWS\system32\IntelCpHDCPSvc.exe [595560 2015-09-04] (Intel Corporation)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2017-02-09] (Macrovision Europe Ltd.) [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [18856 2015-07-22] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [350312 2015-09-04] (Intel Corporation)
R2 ImControllerService; c:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [61768 2017-02-15] (Lenovo Group Limited)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [271296 2015-07-17] (Lenovo)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.500\McCHSvc.exe [329480 2017-01-19] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-06-12] ()
R2 valWBFPolicyService; C:\WINDOWS\system32\valWBFPolicyService.exe [86544 2017-02-09] (Synaptics Incorporated)
R2 valWbioSyncSvc; C:\WINDOWS\system32\valWbioSyncSvc.exe [56848 2017-02-09] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3831200 2015-06-12] (Intel® Corporation)
R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]
S2 InstallerService; C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe -originalversion 4.4.127.0 [X]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [309784 2017-02-08] (AVAST Software s.r.o.)
R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [189768 2017-02-08] (AVAST Software s.r.o.)
R0 aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [334600 2017-02-08] (AVAST Software s.r.o.)
R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [48528 2017-02-08] (AVAST Software s.r.o.)
S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [38296 2017-02-08] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [32088 2017-02-08] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [126088 2017-02-08] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [100640 2017-02-08] (AVAST Software)
R0 AswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [74680 2017-02-08] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [991496 2017-02-08] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [547904 2017-02-08] (AVAST Software)
R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [162528 2017-02-08] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [337080 2017-02-22] (AVAST Software)
R1 CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [253184 2017-02-08] (Intel Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
S3 NETwNe64; C:\WINDOWS\System32\drivers\NETwew01.sys [3354384 2015-07-10] (Intel Corporation)
R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7116288 2016-07-16] (Intel Corporation)
R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [310528 2015-05-21] (Realtek Semiconductor Corp.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [886528 2015-07-30] (Realtek )
R3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [3059416 2015-06-11] (Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [44216 2017-02-08] (Synaptics Incorporated)
R1 SMIDriver; C:\WINDOWS\system32\DRIVERS\smi.sys [39488 2017-02-09] (Synaptics Incorporated)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
- Přílohy
-
- Addition.rar
- (10.19 KiB) Staženo 78 x
Re: Podezření na malware - FRST 2 posty
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-02-22 20:31 - 2017-02-22 20:32 - 00000000 ____D C:\AdwCleaner
2017-02-22 20:31 - 2017-02-22 20:31 - 04015056 _____ C:\Users\Vojta\Desktop\adwcleaner_6.043.exe
2017-02-22 16:03 - 2017-02-22 21:23 - 00020487 _____ C:\Users\Vojta\Desktop\FRST.txt
2017-02-22 16:03 - 2017-02-22 21:23 - 00000000 ____D C:\Users\Vojta\Desktop\FRST-OlderVersion
2017-02-22 16:03 - 2017-02-22 21:23 - 00000000 ____D C:\FRST
2017-02-22 15:52 - 2017-02-22 15:52 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-02-22 10:26 - 2017-02-22 10:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2017-02-22 10:26 - 2017-02-22 10:26 - 00000000 ____D C:\Program Files\McAfee Security Scan
2017-02-22 10:09 - 2017-02-22 10:09 - 00000000 ____D C:\Program Files\Common Files\McAfee
2017-02-22 10:09 - 2017-02-22 10:09 - 00000000 ____D C:\Program Files (x86)\McAfee
2017-02-22 09:57 - 2017-02-22 09:57 - 00000000 ____D C:\Users\Vojta\AppData\Local\Macromedia
2017-02-22 09:56 - 2017-02-22 15:51 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2017-02-22 09:56 - 2017-02-22 15:50 - 00000000 ____D C:\Program Files\TrueKey
2017-02-22 09:56 - 2017-02-22 09:56 - 00003890 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-02-22 09:56 - 2017-02-22 09:56 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2017-02-22 09:42 - 2017-02-22 21:23 - 02423296 _____ (Farbar) C:\Users\Vojta\Desktop\FRST64.exe
2017-02-22 09:20 - 2017-02-22 09:23 - 00000000 ____D C:\Users\Vojta\Desktop\In Loco
2017-02-22 08:56 - 2017-02-22 08:56 - 00002870 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-02-22 08:56 - 2017-02-22 08:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-02-22 08:56 - 2017-02-22 08:56 - 00000000 ____D C:\Program Files\CCleaner
2017-02-22 08:52 - 2017-02-22 08:52 - 09261616 _____ (Piriform Ltd) C:\Users\Vojta\Downloads\ccsetup527.exe
2017-02-22 08:44 - 2017-02-22 08:44 - 00001235 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-02-22 08:44 - 2017-02-22 08:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-02-22 08:39 - 2017-02-22 08:39 - 00000000 ____D C:\ProgramData\Mozilla
2017-02-22 08:20 - 2017-02-08 19:08 - 00398408 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2017-02-22 08:11 - 2017-02-22 08:11 - 06253632 _____ (AVAST Software) C:\Users\Vojta\Downloads\avast_free_antivirus_setup_online (1).exe
2017-02-22 08:03 - 2017-02-22 08:03 - 02945520 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Vojta\Downloads\AVG_Antivirus_Free_1425.exe
2017-02-22 07:38 - 2017-02-22 07:38 - 00039424 _____ C:\Users\Vojta\Downloads\CP_update (4).xls
2017-02-22 07:38 - 2017-02-22 07:38 - 00039424 _____ C:\Users\Vojta\Desktop\CP_update (4).xls
2017-02-21 20:22 - 2017-02-21 20:23 - 20661868 _____ C:\Users\Vojta\Downloads\Hithit.cz - Adoptujte maminku! Kupte ji vstupenku na mentoring..mp4
2017-02-21 10:03 - 2017-02-21 10:03 - 00530124 _____ C:\Users\Vojta\Downloads\Scan 13. 2. 2017 9.01.pdf
2017-02-20 23:10 - 2017-02-20 23:10 - 00691112 _____ C:\Users\Vojta\Downloads\Jak používat fakultní email mimo počítačovou síť pf uk.pdf
2017-02-20 20:26 - 2017-02-20 19:16 - 21385211 _____ C:\Users\Vojta\Desktop\Aplicación móvil - EVA Facial Mouse - Apps Accesibles - Fundación Vodafone España.mp4
2017-02-20 19:15 - 2017-02-20 19:16 - 17539159 _____ C:\Users\Vojta\Downloads\Hithit.cz - Nová deska Zrní.mp4
2017-02-20 19:14 - 2017-02-20 19:16 - 21385211 _____ C:\Users\Vojta\Downloads\Aplicación móvil - EVA Facial Mouse - Apps Accesibles - Fundación Vodafone España.mp4
2017-02-20 19:02 - 2017-02-20 19:03 - 00000000 ____D C:\Users\Vojta\Desktop\U Templářů
2017-02-20 18:59 - 2017-02-20 18:59 - 00039936 _____ C:\Users\Vojta\Downloads\CP_update (3).xls
2017-02-20 10:26 - 2017-02-20 10:26 - 00076801 _____ C:\Users\Vojta\Downloads\webtrekk_report_2016-03-07_Pages.xls
2017-02-20 10:25 - 2017-02-20 10:25 - 00076801 _____ C:\Users\Vojta\Downloads\webtrekk_report_2016-05-01_Pages (2).xls
2017-02-20 10:18 - 2017-02-20 10:18 - 00075265 _____ C:\Users\Vojta\Downloads\webtrekk_report_2016-05-01_Pages (1).xls
2017-02-20 10:06 - 2017-02-20 10:06 - 00075265 _____ C:\Users\Vojta\Downloads\webtrekk_report_2016-05-01_Pages.xls
2017-02-19 20:36 - 2017-02-19 20:36 - 00001467 _____ C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LenovoSettings.lnk
2017-02-17 18:37 - 2017-02-17 18:37 - 00000000 ____D C:\Users\Vojta\AppData\Local\WMTools Downloaded Files
2017-02-17 18:36 - 2017-02-17 18:36 - 12655848 _____ C:\Users\Vojta\Downloads\MM26_CS.exe
2017-02-17 16:14 - 2017-02-17 16:15 - 34987849 _____ C:\Users\Vojta\Downloads\Hithit.cz - Rádio StreetCulture jede na Nákladové nádraží Žižkov.mp4
2017-02-17 14:32 - 2017-02-17 14:32 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-02-17 14:32 - 2017-02-17 14:32 - 00000000 ____D C:\Users\Vojta\Tracing
2017-02-17 14:32 - 2017-02-17 14:32 - 00000000 ____D C:\ProgramData\Skype
2017-02-17 14:32 - 2017-02-17 14:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-02-17 14:31 - 2017-02-17 14:31 - 01629144 _____ (Skype Technologies S.A.) C:\Users\Vojta\Downloads\SkypeSetup.exe
2017-02-17 13:03 - 2017-02-17 13:07 - 185508903 _____ C:\Users\Vojta\Downloads\Foto_SEW_9_2.zip
2017-02-15 20:26 - 2017-02-15 20:26 - 00257864 _____ (Lenovo Group Limited) C:\WINDOWS\system32\iMDriverHelper.dll
2017-02-15 18:22 - 2017-02-15 18:18 - 03413049 _____ C:\Users\Vojta\Desktop\RBMH_Google Analytics Training Programme_Description.pdf
2017-02-15 18:18 - 2017-02-15 18:18 - 03413049 _____ C:\Users\Vojta\Downloads\RBMH_Google Analytics Training Programme_Description.pdf
2017-02-15 11:07 - 2017-02-15 11:07 - 00021456 _____ C:\Users\Vojta\Downloads\MP_FB_budvar-FW-2016.xlsx
2017-02-15 09:17 - 2017-02-15 09:59 - 00000000 ____D C:\Users\Vojta\Desktop\NeverDie
2017-02-15 09:17 - 2017-02-15 09:17 - 03149193 _____ C:\Users\Vojta\Downloads\wooxupnaneverdie_cz.zip
2017-02-15 09:17 - 2017-02-15 09:17 - 03149193 _____ C:\Users\Vojta\Downloads\wooxupnaneverdie_cz (1).zip
2017-02-14 18:52 - 2017-02-14 18:52 - 00041984 _____ C:\Users\Vojta\Downloads\CP_update (2).xls
2017-02-13 16:02 - 2017-02-13 16:02 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\webex
2017-02-13 16:01 - 2017-02-13 16:02 - 00000000 ____D C:\Users\Vojta\AppData\LocalLow\WebEx
2017-02-13 16:01 - 2017-02-13 16:02 - 00000000 ____D C:\Users\Vojta\AppData\Local\WebEx
2017-02-13 16:01 - 2017-02-13 16:02 - 00000000 ____D C:\ProgramData\WebEx
2017-02-13 16:01 - 2017-02-13 16:01 - 01021896 _____ (Cisco WebEx LLC) C:\Users\Vojta\Downloads\Cisco_WebEx_Add-On.exe
2017-02-13 00:29 - 2017-02-13 00:29 - 00332050 _____ C:\Users\Vojta\Downloads\2017 RALLY SWEDEN EVENT 52 MIN SCRIPT PART 3 RD1 (1).pdf
2017-02-12 21:49 - 2017-02-12 21:50 - 00000000 ____D C:\Users\Vojta\Desktop\Četba k diplomce
2017-02-12 21:34 - 2017-02-12 21:34 - 00332225 _____ C:\Users\Vojta\Downloads\RALLY SWEDEN EVENT 52 MIN SCRIPT PART 4 RD1.pdf
2017-02-12 21:34 - 2017-02-12 21:34 - 00332050 _____ C:\Users\Vojta\Downloads\2017 RALLY SWEDEN EVENT 52 MIN SCRIPT PART 3 RD1.pdf
2017-02-12 21:20 - 2017-02-12 21:20 - 00359013 _____ C:\Users\Vojta\Downloads\2017 RALLY SWEDEN 52m HIGHLIGHTS SHOW PART 1 RD1.pdf
2017-02-12 21:20 - 2017-02-12 21:20 - 00321688 _____ C:\Users\Vojta\Downloads\2017 RALLY SWEDEN 52m HIGHLIGHTS SHOW PART 2 RD1.pdf
2017-02-12 20:14 - 2017-02-12 20:15 - 121786916 _____ C:\Users\Vojta\Desktop\Hithit.cz - Camino na kolečkách 2017 - mě se chce.avi
2017-02-12 19:58 - 2017-02-12 19:59 - 71838508 _____ C:\Users\Vojta\Desktop\Hithit.cz - Camino na kolečkách 2017 znělka cut.avi
2017-02-12 16:26 - 2017-02-12 16:28 - 67267465 _____ C:\Users\Vojta\Downloads\Hithit.cz - Camino na kolečkách 2017.mp4
2017-02-11 18:40 - 2017-02-11 18:40 - 00615707 _____ C:\Users\Vojta\Downloads\P-20170211-00862--onka_wins_in_Abu_Dhabi-English.pdf
2017-02-10 20:09 - 2017-02-10 20:09 - 00790799 _____ C:\Users\Vojta\Downloads\Undisputed_Digital_Feedback (1).pptx
2017-02-10 19:10 - 2017-02-10 19:10 - 07274216 _____ C:\Users\Vojta\Downloads\Hithit.cz - Vnímej svět jinak, z perspektivy neslyšících.mp4
2017-02-10 18:41 - 2017-02-10 18:41 - 00000000 ____D C:\ProgramData\install_backup
2017-02-10 18:40 - 2012-06-13 17:10 - 00102376 _____ ("CyberLink) C:\WINDOWS\system32\Drivers\wsvd.sys
2017-02-10 18:36 - 2017-02-10 18:36 - 00000000 ____D C:\Users\Vojta\AppData\LocalLow\Adobe
2017-02-10 18:35 - 2017-02-10 18:35 - 00376087 _____ C:\Users\Vojta\Downloads\Honorare_Bublik_Vojtech.PDF
2017-02-10 12:59 - 2017-02-10 12:59 - 00790799 _____ C:\Users\Vojta\Downloads\Undisputed_Digital_Feedback.pptx
2017-02-10 10:14 - 2016-12-21 08:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2017-02-10 10:14 - 2016-12-21 05:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2017-02-10 08:54 - 2017-02-22 20:35 - 00000000 ____D C:\Users\Vojta\AppData\LocalLow\Mozilla
2017-02-10 08:53 - 2017-02-22 08:44 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Mozilla
2017-02-10 08:53 - 2017-02-22 08:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-02-10 08:53 - 2017-02-10 10:48 - 00000000 ____D C:\Users\Vojta\AppData\Local\Mozilla
2017-02-10 08:53 - 2017-02-10 08:53 - 00245544 _____ C:\Users\Vojta\Downloads\Firefox Setup Stub 51.0.1.exe
2017-02-10 08:11 - 2017-02-11 10:31 - 00000000 ____D C:\Users\Vojta\AppData\Local\ConnectedDevicesPlatform
2017-02-10 08:11 - 2017-02-10 08:11 - 00000020 ___SH C:\Users\Vojta\ntuser.ini
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Public\Documents\Obrázky
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Public\Documents\Hudba
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Public\Documents\Filmy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Šablony
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Soubory cookie
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Poslední
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Okolní tiskárny
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Okolní síť
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Nabídka Start
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Dokumenty
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Documents\Obrázky
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Documents\Hudba
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Documents\Filmy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Data aplikací
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default User\Documents\Obrázky
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default User\Documents\Hudba
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default User\Documents\Filmy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Data aplikací
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Šablony
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Plocha
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Nabídka Start
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Dokumenty
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Data aplikací
2017-02-10 05:05 - 2017-02-10 05:06 - 00007623 _____ C:\WINDOWS\diagwrn.xml
2017-02-10 05:05 - 2017-02-10 05:06 - 00007623 _____ C:\WINDOWS\diagerr.xml
2017-02-10 05:00 - 2017-02-22 16:07 - 00004022 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1486577462
2017-02-10 05:00 - 2017-02-22 08:20 - 00003994 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2017-02-10 05:00 - 2017-02-10 18:43 - 00000000 ____D C:\WINDOWS\System32\Tasks\CyberLink
2017-02-10 05:00 - 2017-02-10 05:00 - 00022924 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-02-10 05:00 - 2017-02-10 05:00 - 00003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2017-02-10 05:00 - 2017-02-10 05:00 - 00002770 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-02-10 05:00 - 2017-02-10 05:00 - 00002334 _____ C:\WINDOWS\System32\Tasks\{3C569360-026A-463B-BC2E-3BEB688916A4}
2017-02-10 05:00 - 2017-02-10 05:00 - 00002274 _____ C:\WINDOWS\System32\Tasks\DolbySelectorTask
2017-02-10 05:00 - 2017-02-10 05:00 - 00002212 _____ C:\WINDOWS\System32\Tasks\PDVDServ12 Task
2017-02-10 05:00 - 2017-02-10 05:00 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2017-02-10 05:00 - 2017-02-10 05:00 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2017-02-10 04:57 - 2017-02-22 20:33 - 00000000 ____D C:\ProgramData\Synaptics
2017-02-10 04:53 - 2017-02-10 04:53 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-02-10 04:50 - 2017-02-10 04:55 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-02-10 04:48 - 2017-02-22 20:33 - 00000000 ____D C:\Users\Vojta
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Šablony
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Soubory cookie
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Poslední
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Okolní tiskárny
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Okolní síť
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Nabídka Start
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Dokumenty
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Documents\Obrázky
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Documents\Hudba
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Documents\Filmy
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Data aplikací
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\AppData\Local\Data aplikací
2017-02-10 04:45 - 2017-02-10 04:45 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_wbf_vfs_lvcmn_01_11_00.Wdf
2017-02-10 04:45 - 2017-02-10 04:45 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2017-02-10 04:44 - 2017-02-22 20:34 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-02-10 04:44 - 2017-02-10 04:50 - 00000000 ____D C:\Program Files\Intel
2017-02-10 04:44 - 2017-02-10 04:50 - 00000000 ____D C:\Program Files\AMD
2017-02-10 04:44 - 2017-02-10 04:44 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2017-02-10 04:44 - 2017-02-10 04:44 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2017-02-10 04:44 - 2017-02-10 04:44 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2017-02-10 04:44 - 2017-02-10 04:44 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-02-10 04:44 - 2017-02-10 04:44 - 00000000 ____D C:\WINDOWS\system32\DAX2
2017-02-10 04:44 - 2017-02-10 04:44 - 00000000 ____D C:\Program Files\Realtek
2017-02-10 04:43 - 2017-02-10 04:45 - 00000000 ____D C:\Program Files\Synaptics
2017-02-10 04:43 - 2017-02-10 04:43 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2017-02-10 04:35 - 2017-02-22 08:57 - 00000000 ___DC C:\WINDOWS\Panther
2017-02-10 04:31 - 2017-02-21 09:06 - 00000000 ____D C:\Windows.old
2017-02-10 04:26 - 2017-02-10 04:26 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 13084160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 12177920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 08168000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 07812096 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 07654400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 06109184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 05380608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04746752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04673304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04130440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03777536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 03441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03306496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02953216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02828376 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02820096 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02677544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02669056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02611200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02484736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02362880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02323728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02277248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02256384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02189664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 02186896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02109952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01969912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01886344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01779712 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01738560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01691136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 01637728 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01595392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01589760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01556480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 01477632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01473048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01454504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01366016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 01354320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2017-02-10 04:26 - 2017-02-10 04:26 - 01336320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01293152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01220096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2017-02-10 04:26 - 2017-02-10 04:26 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01196544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2017-02-10 04:26 - 2017-02-10 04:26 - 01173496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01123912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01051112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2017-02-10 04:26 - 2017-02-10 04:26 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2017-02-10 04:26 - 2017-02-10 04:26 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00912896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00894096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00882680 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00861024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00811872 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00772608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00730624 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00707584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00658784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00637400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00527880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00454592 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00433504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00424616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00377184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00374448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxclu.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00319288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00266544 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcuiu.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00248480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00198856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRHelper.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00187520 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00172528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00167848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00163752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00157536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudStorageWizard.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00152416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EDPCleanup.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00142176 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00126568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfaudiocnv.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00122208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\migisol.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00117240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReportingCSP.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00091936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfaudiocnv.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00089416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\modem.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\EAMProgressHandler.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe
2017-02-10 04:25 - 2017-02-10 04:26 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 17188864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 06668040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 05722832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 05114368 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 04136448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 03542016 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 03370496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 03198464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 02913144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 02287616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 02166752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 02104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01576448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01503544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01357824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01263856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01069720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00967168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00869848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-02-10 04:25 - 2017-02-10 04:25 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-02-10 04:25 - 2017-02-10 04:25 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00352096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00219488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00168424 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2017-02-10 04:25 - 2017-02-10 04:25 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00106896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe
2017-02-10 04:25 - 2017-02-10 04:25 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
2017-02-10 03:54 - 2017-02-10 03:54 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2017-02-10 03:51 - 2017-02-10 03:51 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2017-02-10 03:51 - 2017-02-10 03:51 - 00000000 ____D C:\Program Files\Reference Assemblies
2017-02-10 03:51 - 2017-02-10 03:51 - 00000000 ____D C:\Program Files\MSBuild
2017-02-10 03:51 - 2017-02-10 03:51 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-02-10 03:51 - 2017-02-10 03:51 - 00000000 ____D C:\Program Files (x86)\MSBuild
2017-02-10 03:50 - 2016-05-25 14:31 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-02-10 03:50 - 2016-05-25 14:31 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-02-10 03:50 - 2016-05-25 14:31 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2017-02-10 03:50 - 2016-05-25 11:03 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2017-02-10 03:50 - 2016-05-25 11:03 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-02-10 03:50 - 2016-05-25 11:03 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2017-02-09 21:18 - 2017-02-20 22:48 - 00000000 ____D C:\Users\Vojta\Desktop\Sprinklr cover
2017-02-09 19:16 - 2017-02-09 19:16 - 03657376 _____ (Synaptics Incorporated) C:\WINDOWS\system32\vcsAPIFORWBF.dll
2017-02-09 19:16 - 2017-02-09 19:16 - 00980648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120.dll
2017-02-09 19:16 - 2017-02-09 19:16 - 00086544 _____ (Synaptics Incorporated) C:\WINDOWS\system32\valWBFPolicyService.exe
2017-02-09 19:16 - 2017-02-09 19:16 - 00080544 _____ (Synaptics Incorporated) C:\WINDOWS\system32\LenovoSysCheck.dll
2017-02-09 19:16 - 2017-02-09 19:16 - 00056848 _____ (Synaptics Incorporated) C:\WINDOWS\system32\valWbioSyncSvc.exe
2017-02-09 19:16 - 2017-02-09 19:16 - 00039488 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\smi.sys
2017-02-09 19:16 - 2013-10-05 08:58 - 00660128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp120.dll
2017-02-09 17:43 - 2017-02-10 19:30 - 00000000 ____D C:\ProgramData\boost_interprocess
2017-02-09 17:30 - 2017-02-09 17:30 - 00001158 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Premiere Pro CC 2017.lnk
2017-02-09 17:30 - 2017-02-09 17:30 - 00000000 ____D C:\Users\Public\Documents\Adobe
2017-02-09 17:28 - 2017-02-09 17:28 - 00000000 ____D C:\Users\Public\Documents\AdobeInstalledCodecs
2017-02-09 17:27 - 2017-02-09 17:27 - 00001305 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2017-02-09 17:26 - 2017-02-22 14:28 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\vlc
2017-02-09 17:25 - 2017-02-10 04:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-02-09 17:25 - 2017-02-09 17:25 - 00000000 ____D C:\Program Files\VideoLAN
2017-02-09 17:24 - 2017-02-09 17:24 - 31717016 _____ C:\Users\Vojta\Downloads\vlc-2.2.4-win64.exe
2017-02-09 14:24 - 2017-02-09 14:26 - 00000000 ____D C:\Users\Vojta\AppData\Local\Comms
2017-02-09 13:20 - 2017-02-09 13:20 - 00043520 _____ C:\Users\Vojta\Downloads\CP_update (1).xls
2017-02-09 13:18 - 2017-02-09 14:36 - 1405987770 _____ C:\Users\Vojta\Downloads\Adobe-Premiere-Pro-CC-2017-v11.0-+-Crack-[Kedar_CZ].rar
2017-02-09 13:00 - 2017-02-09 17:34 - 00000000 ____D C:\Program Files\Adobe
2017-02-09 12:49 - 2017-02-09 12:49 - 27576965 _____ C:\Users\Vojta\Downloads\Hithit.cz - Bučovice Blind Football Cup 2017.mp4
2017-02-09 12:49 - 2017-02-09 12:49 - 27576965 _____ C:\Users\Vojta\Downloads\Hithit.cz - Bučovice Blind Football Cup 2017 (1).mp4
2017-02-09 12:49 - 2017-02-09 12:49 - 27576965 _____ C:\Users\Vojta\Desktop\Hithit.cz - Bučovice Blind Football Cup 2017.mp4
2017-02-09 12:48 - 2017-02-09 12:48 - 11927462 _____ C:\Users\Vojta\Downloads\Hithit.cz - Eagleheart nahrává třetí album.mp4
2017-02-09 09:57 - 2017-02-09 12:53 - 00000000 ____D C:\Program Files (x86)\Avidemux 2.6 - 64 bits
2017-02-09 09:57 - 2017-02-09 12:51 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\avidemux
2017-02-09 09:56 - 2017-02-09 09:56 - 20541107 _____ C:\Users\Vojta\Downloads\avidemux_2.6.18_win64.exe
2017-02-09 09:36 - 2017-02-09 13:11 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2017-02-09 09:15 - 2017-02-09 09:15 - 00001217 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS3.lnk
2017-02-09 09:15 - 2017-02-09 09:15 - 00000000 ____D C:\Program Files (x86)\Bonjour
2017-02-09 09:14 - 2017-02-09 09:14 - 00001487 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit 2.lnk
2017-02-09 09:14 - 2017-02-09 09:14 - 00001303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Stock Photos CS3.lnk
2017-02-09 09:14 - 2017-02-09 09:14 - 00001272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS3.lnk
2017-02-09 09:13 - 2017-02-09 09:13 - 00001179 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS3.lnk
2017-02-09 09:03 - 2017-02-09 17:32 - 00000000 ____D C:\Users\Vojta\Documents\Adobe
2017-02-09 09:03 - 2017-02-09 09:03 - 00000000 ____D C:\Users\Vojta\AppData\Local\AMD
2017-02-09 08:44 - 2017-02-09 17:30 - 00000000 ____D C:\Program Files\Common Files\Adobe
2017-02-09 08:40 - 2017-02-22 09:57 - 00000000 ____D C:\Users\Vojta\AppData\Local\Adobe
2017-02-09 07:47 - 2017-02-09 07:47 - 00000000 ____D C:\Users\Vojta\AppData\Local\NetworkTiles
2017-02-09 07:46 - 2017-02-22 20:35 - 00015607 _____ C:\WINDOWS\system32\InstallUtil.InstallLog
2017-02-08 23:04 - 2017-02-08 23:04 - 02365296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WudfUpdate_01011.dll
2017-02-08 22:30 - 2017-02-09 09:39 - 44874097 _____ C:\Users\Vojta\Desktop\Hithit.cz - Samolibé verše Honzy Badalce.mp4
2017-02-08 22:20 - 2017-02-08 22:22 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-02-08 22:20 - 2017-02-08 22:20 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-02-08 21:42 - 2016-09-30 04:28 - 00161792 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2017-02-08 21:39 - 2016-09-07 05:22 - 00041472 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Speech.Pal.dll
2017-02-08 21:25 - 2017-02-08 21:25 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\LSC
2017-02-08 21:05 - 2017-02-08 21:06 - 00000000 ____D C:\ProgramData\FLEXnet
2017-02-08 20:36 - 2017-02-08 20:36 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\SuperAdBlocker.com
2017-02-08 20:31 - 2017-02-08 20:31 - 00000000 ____D C:\Users\Vojta\Documents\Vlastní šablony Office
2017-02-08 20:21 - 2017-02-08 20:22 - 44870141 _____ C:\Users\Vojta\Downloads\Hithit.cz - Samolibé verše Honzy Badalce.mp4
2017-02-08 20:18 - 2017-02-08 20:19 - 05426464 _____ C:\Users\Vojta\Downloads\SuperAdBlocker.exe
2017-02-08 20:11 - 2017-02-10 04:51 - 00000000 ____D C:\WINDOWS\SysWOW64\spool
2017-02-08 20:11 - 2017-02-08 20:11 - 00496896 _____ C:\Users\Vojta\Downloads\flux-setup.exe
2017-02-08 20:11 - 2017-02-08 20:11 - 00002163 _____ C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\f.lux.lnk
2017-02-08 20:11 - 2017-02-08 20:11 - 00000000 ____D C:\Users\Vojta\AppData\Local\FluxSoftware
2017-02-08 20:01 - 2017-02-08 20:01 - 00694672 _____ (Disc Soft Ltd.) C:\Users\Vojta\Downloads\DTLiteInstaller.exe
2017-02-08 19:57 - 2017-02-08 19:57 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\WinRAR
2017-02-08 19:56 - 2017-01-01 17:51 - 00141706 _____ C:\Users\Vojta\Desktop\trénink.pdf
2017-02-08 19:55 - 2014-09-24 10:10 - 511180053 _____ C:\Users\Vojta\Downloads\Adobe-photoshop-CS-3-cz-full.rar
2017-02-08 19:54 - 2017-02-08 20:28 - 00000000 ____D C:\Users\Vojta\Desktop\Nedori
2017-02-08 19:52 - 2017-02-22 14:23 - 00000000 ____D C:\Users\Vojta\Desktop\Red Bull
2017-02-08 19:50 - 2017-02-08 19:50 - 00000000 ____D C:\Users\Vojta\AppData\LocalLow\Lenovo
2017-02-08 19:49 - 2017-02-10 18:54 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-02-08 19:49 - 2017-02-09 17:27 - 00000000 ____D C:\Program Files (x86)\Adobe
2017-02-08 19:49 - 2017-02-08 19:49 - 00000000 ____D C:\Users\Vojta\Desktop\Flat
2017-02-08 19:49 - 2017-02-08 19:49 - 00000000 ____D C:\Users\Vojta\Desktop\Faktury 2017
2017-02-08 19:48 - 2017-02-10 08:15 - 00000000 ____D C:\ProgramData\Adobe
2017-02-08 19:48 - 2017-02-08 19:49 - 00000000 ____D C:\Users\Vojta\Desktop\dokumenty a manuály
2017-02-08 19:48 - 2017-02-08 19:48 - 00000000 ____D C:\Users\Vojta\Desktop\CV
2017-02-08 19:47 - 2017-02-08 19:48 - 27078264 _____ C:\Users\Vojta\Downloads\U-medvídků-teaser.mp4
2017-02-08 19:44 - 2017-02-08 19:45 - 58136984 _____ C:\Users\Vojta\Downloads\AcroRdrDC1500720033_cs_CZ.exe
2017-02-08 19:43 - 2017-02-10 04:55 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-02-08 19:43 - 2017-02-10 04:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-02-08 19:43 - 2017-02-08 19:43 - 00000000 ____D C:\Program Files\WinRAR
2017-02-08 19:42 - 2017-02-08 19:42 - 02377944 _____ C:\Users\Vojta\Downloads\winrar-x64-540cz.exe
2017-02-08 19:25 - 2017-02-10 04:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje Microsoft Office 2016
2017-02-08 19:25 - 2017-02-08 19:25 - 00002566 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002565 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive pro firmy.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002560 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002537 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002532 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002525 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype pro firmy 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002493 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002458 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002454 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2017-02-08 19:24 - 2017-02-08 19:24 - 00040448 _____ C:\Users\Vojta\Downloads\CP_update.xls
2017-02-08 19:19 - 2017-02-08 19:19 - 00000000 ____D C:\Program Files\Microsoft Office 15
2017-02-08 19:18 - 2017-02-08 19:19 - 03802424 _____ (Microsoft Corporation) C:\Users\Vojta\Downloads\Setup.X86.cs-cz_O365ProPlusRetail_06ea1c77-764e-4fda-9194-46c1771f2944_TX_PR_b_16_.exe
2017-02-08 19:12 - 2017-02-10 04:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote
2017-02-08 19:12 - 2017-02-08 20:48 - 00000000 ____D C:\Users\Vojta\Evernote
2017-02-08 19:12 - 2017-02-08 19:12 - 00000000 ____D C:\Users\Vojta\AppData\LocalLow\Evernote
2017-02-08 19:12 - 2017-02-08 19:12 - 00000000 ____D C:\Program Files (x86)\Evernote
2017-02-08 19:11 - 2017-02-22 16:07 - 00001095 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-02-08 19:10 - 2017-02-08 19:10 - 00032088 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2017-02-08 19:09 - 2017-02-22 10:09 - 00000000 ____D C:\Program Files\Common Files\AV
2017-02-08 19:09 - 2017-02-22 08:20 - 00337080 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys
2017-02-08 19:09 - 2017-02-22 08:20 - 00001986 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2017-02-08 19:09 - 2017-02-08 19:09 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\AVAST Software
2017-02-08 19:09 - 2017-02-08 19:09 - 00000000 ____D C:\Users\Vojta\AppData\Local\CEF
2017-02-08 19:09 - 2017-02-08 19:08 - 00547904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2017-02-08 19:09 - 2017-02-08 19:08 - 00337080 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys.148774803037504
2017-02-08 19:09 - 2017-02-08 19:08 - 00162528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2017-02-08 19:09 - 2017-02-08 19:08 - 00126088 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2017-02-08 19:09 - 2017-02-08 19:08 - 00100640 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2017-02-08 19:09 - 2017-02-08 19:08 - 00074680 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2017-02-08 19:09 - 2017-02-08 19:08 - 00038296 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2017-02-08 19:09 - 2017-02-08 19:07 - 00991496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2017-02-08 19:09 - 2017-02-08 19:06 - 00334600 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbloga.sys
2017-02-08 19:09 - 2017-02-08 19:06 - 00309784 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys
2017-02-08 19:09 - 2017-02-08 19:06 - 00189768 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsha.sys
2017-02-08 19:09 - 2017-02-08 19:06 - 00048528 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbuniva.sys
2017-02-08 19:05 - 2017-02-08 19:51 - 00000000 ____D C:\ProgramData\AVAST Software
2017-02-08 19:05 - 2017-02-08 19:10 - 00000000 ____D C:\Program Files\AVAST Software
2017-02-08 19:05 - 2017-02-08 19:05 - 06655184 _____ (AVAST Software) C:\Users\Vojta\Downloads\avast_free_antivirus_setup_online.exe
2017-02-08 19:03 - 2017-02-08 19:05 - 102359936 _____ (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Users\Vojta\Downloads\Evernote_6.4.2.3788.exe
2017-02-08 19:01 - 2017-02-08 19:01 - 01804696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01011.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00764616 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynCOM.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00620744 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SynTP.sys
2017-02-08 19:01 - 2017-02-08 19:01 - 00421560 _____ (Synaptics Incorporated) C:\WINDOWS\SysWOW64\SynCom.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00379136 _____ (Intel Corporation) C:\WINDOWS\system32\ibtproppage.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00269000 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPAPI.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00268984 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPCo34.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00253184 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\ibtusb.sys
2017-02-08 19:01 - 2017-02-08 19:01 - 00184064 _____ (Intel Corporation) C:\WINDOWS\system32\ibtsiva.exe
2017-02-08 19:01 - 2017-02-08 19:01 - 00044216 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel_Aux.sys
2017-02-08 19:01 - 2017-02-08 19:01 - 00044216 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel.sys
2017-02-08 19:01 - 2017-02-08 19:01 - 00044216 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SET2D7E.tmp
2017-02-08 19:01 - 2017-02-08 19:01 - 00043704 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_AMDASF_Aux.sys
2017-02-08 18:59 - 2017-02-22 08:25 - 00000000 ____D C:\Users\Vojta\AppData\Local\Google
2017-02-08 18:59 - 2017-02-22 08:25 - 00000000 ____D C:\Program Files (x86)\Google
2017-02-08 18:59 - 2017-02-08 18:59 - 01129376 _____ (Google Inc.) C:\Users\Vojta\Downloads\ChromeSetup.exe
2017-02-08 18:58 - 2017-02-08 18:59 - 00000000 ____D C:\Users\Vojta\AppData\Local\MicrosoftEdge
2017-02-08 18:56 - 2017-02-08 18:56 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_ldiagio_uefi_01009.Wdf
2017-02-08 18:56 - 2017-02-08 18:56 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Lenovo
2017-02-08 18:51 - 2017-02-22 09:54 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Skype
2017-02-08 18:51 - 2017-02-08 18:51 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Macromedia
2017-02-08 18:51 - 2017-02-08 18:51 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Intel Corporation
2017-02-08 18:50 - 2017-02-10 08:15 - 00002394 _____ C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-02-08 18:50 - 2017-02-10 08:15 - 00000000 ___RD C:\Users\Vojta\OneDrive
2017-02-08 18:50 - 2017-02-08 18:50 - 00000000 ____D C:\Users\Vojta\AppData\Local\Power2Go8
2017-02-08 18:48 - 2017-02-11 18:47 - 00000000 ____D C:\Users\Vojta\AppData\Local\Lenovo
2017-02-08 18:48 - 2017-02-08 18:48 - 00000000 ____D C:\Users\Vojta\REACHit
2017-02-08 18:48 - 2017-02-08 18:48 - 00000000 ____D C:\Users\Vojta\AppData\Local\Publishers
2017-02-08 18:48 - 2017-02-08 18:48 - 00000000 ____D C:\Users\Vojta\AppData\Local\CyberLink
2017-02-08 18:47 - 2017-02-22 20:34 - 00000000 __SHD C:\Users\Vojta\IntelGraphicsProfiles
2017-02-08 18:47 - 2017-02-22 14:29 - 00000000 ____D C:\Users\Vojta\AppData\Local\Packages
2017-02-08 18:47 - 2017-02-10 18:36 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Adobe
2017-02-08 18:47 - 2017-02-08 18:47 - 00016148 _____ C:\WINDOWS\system32\LAPTOP-PSMFKCI2_defaultuser0_HistoryPrediction.bin
2017-02-08 18:47 - 2017-02-08 18:47 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Intel
2017-02-08 18:47 - 2017-02-08 18:47 - 00000000 ____D C:\Users\Vojta\AppData\Local\VirtualStore
2017-02-08 18:47 - 2017-02-08 18:47 - 00000000 ____D C:\Users\Vojta\AppData\Local\TileDataLayer
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-02-22 20:38 - 2016-11-21 05:39 - 01388298 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-02-22 20:38 - 2016-11-21 04:58 - 00417352 _____ C:\WINDOWS\system32\perfh005.dat
2017-02-22 20:38 - 2016-11-21 04:58 - 00074440 _____ C:\WINDOWS\system32\perfc005.dat
2017-02-22 20:33 - 2016-11-21 05:29 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-02-22 20:33 - 2016-07-16 07:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-02-22 20:27 - 2016-11-20 20:29 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-02-22 15:51 - 2016-11-20 20:29 - 05288752 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-02-22 14:33 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-02-22 14:33 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-02-22 10:09 - 2015-11-20 09:19 - 00000000 ____D C:\ProgramData\McAfee
2017-02-22 09:56 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-02-22 09:56 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-02-22 08:57 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-02-17 08:26 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-02-11 21:41 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache
2017-02-11 20:48 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2017-02-11 20:48 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\system32\WCN
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\F12
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\MiracastView
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ___RD C:\Program Files\Windows Defender
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\migwiz
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\IME
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Help
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\System
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2017-02-11 20:48 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2017-02-11 20:48 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\servicing
2017-02-11 14:43 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-02-11 10:31 - 2015-11-20 09:18 - 00000000 ____D C:\ProgramData\CyberLink
2017-02-11 07:51 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\appcompat
2017-02-10 18:43 - 2015-11-20 10:31 - 00000000 ____D C:\Users\Public\Documents\Lenovo
2017-02-10 18:43 - 2015-11-20 09:18 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-02-10 18:43 - 2015-11-20 09:16 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2017-02-10 18:43 - 2015-11-20 09:16 - 00000000 ____D C:\ProgramData\SUPPORTDIR
2017-02-10 18:43 - 2015-11-20 09:15 - 00000000 ____D C:\Program Files (x86)\Lenovo
2017-02-10 18:42 - 2015-11-20 09:16 - 00000000 ____D C:\ProgramData\Temp
2017-02-10 18:40 - 2015-11-20 09:18 - 00000000 ____D C:\Program Files\Lenovo
2017-02-10 08:12 - 2016-11-21 05:42 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-02-10 05:07 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows NT
2017-02-10 05:05 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-02-10 05:05 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Registration
2017-02-10 05:05 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-02-10 05:00 - 2015-11-20 10:07 - 01329198 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2017-02-10 04:59 - 2016-07-16 12:47 - 00000000 __RHD C:\Users\Public\Libraries
2017-02-10 04:55 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-02-10 04:55 - 2016-07-16 07:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2017-02-10 04:55 - 2015-11-20 10:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Realtek
2017-02-10 04:55 - 2015-11-20 10:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby
2017-02-10 04:55 - 2015-11-20 10:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2017-02-10 04:55 - 2015-11-20 10:06 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2017-02-10 04:55 - 2015-11-20 09:21 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Power2Go 8
2017-02-10 04:53 - 2015-07-10 10:05 - 00000000 ____D C:\Users\Default.migrated
2017-02-10 04:51 - 2016-11-21 05:05 - 00000000 ____D C:\WINDOWS\OCR
2017-02-10 04:51 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2017-02-10 04:51 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\system32\slmgr
2017-02-10 04:51 - 2015-11-20 10:16 - 00000000 ___HD C:\WINDOWS\system32\WLANProfiles
2017-02-10 04:50 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-02-10 04:45 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-02-10 04:44 - 2015-11-20 10:08 - 00000000 ___HD C:\Intel
2017-02-10 04:35 - 2016-07-16 12:47 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-02-10 04:28 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-02-10 04:28 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Provisioning
2017-02-10 04:28 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\bcastdvr
2017-02-10 04:28 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-02-10 04:28 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Dism
2017-02-10 04:23 - 2016-07-16 12:42 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2017-02-10 04:04 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2017-02-10 04:04 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2017-02-10 04:04 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\system32\winrm
2017-02-10 04:04 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2017-02-10 04:04 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2017-02-10 04:03 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2017-02-10 03:51 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2017-02-10 03:51 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\MUI
2017-02-09 17:27 - 2015-11-20 09:15 - 00000000 ____D C:\ProgramData\Package Cache
2017-02-09 09:48 - 2015-11-20 10:28 - 00000000 ____D C:\ProgramData\Validity
2017-02-08 22:04 - 2015-11-20 09:16 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-02-08 20:57 - 2015-07-10 12:01 - 00635904 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2017-02-08 20:57 - 2015-07-10 12:01 - 00014848 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2017-02-08 18:57 - 2015-11-20 09:27 - 00000000 ____D C:\ProgramData\Lenovo
==================== Files in the root of some directories =======
2017-02-10 04:44 - 2017-02-10 04:44 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-02-17 11:39
==================== End of FRST.txt ============================
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-02-22 20:31 - 2017-02-22 20:32 - 00000000 ____D C:\AdwCleaner
2017-02-22 20:31 - 2017-02-22 20:31 - 04015056 _____ C:\Users\Vojta\Desktop\adwcleaner_6.043.exe
2017-02-22 16:03 - 2017-02-22 21:23 - 00020487 _____ C:\Users\Vojta\Desktop\FRST.txt
2017-02-22 16:03 - 2017-02-22 21:23 - 00000000 ____D C:\Users\Vojta\Desktop\FRST-OlderVersion
2017-02-22 16:03 - 2017-02-22 21:23 - 00000000 ____D C:\FRST
2017-02-22 15:52 - 2017-02-22 15:52 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-02-22 10:26 - 2017-02-22 10:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2017-02-22 10:26 - 2017-02-22 10:26 - 00000000 ____D C:\Program Files\McAfee Security Scan
2017-02-22 10:09 - 2017-02-22 10:09 - 00000000 ____D C:\Program Files\Common Files\McAfee
2017-02-22 10:09 - 2017-02-22 10:09 - 00000000 ____D C:\Program Files (x86)\McAfee
2017-02-22 09:57 - 2017-02-22 09:57 - 00000000 ____D C:\Users\Vojta\AppData\Local\Macromedia
2017-02-22 09:56 - 2017-02-22 15:51 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2017-02-22 09:56 - 2017-02-22 15:50 - 00000000 ____D C:\Program Files\TrueKey
2017-02-22 09:56 - 2017-02-22 09:56 - 00003890 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-02-22 09:56 - 2017-02-22 09:56 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2017-02-22 09:42 - 2017-02-22 21:23 - 02423296 _____ (Farbar) C:\Users\Vojta\Desktop\FRST64.exe
2017-02-22 09:20 - 2017-02-22 09:23 - 00000000 ____D C:\Users\Vojta\Desktop\In Loco
2017-02-22 08:56 - 2017-02-22 08:56 - 00002870 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-02-22 08:56 - 2017-02-22 08:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-02-22 08:56 - 2017-02-22 08:56 - 00000000 ____D C:\Program Files\CCleaner
2017-02-22 08:52 - 2017-02-22 08:52 - 09261616 _____ (Piriform Ltd) C:\Users\Vojta\Downloads\ccsetup527.exe
2017-02-22 08:44 - 2017-02-22 08:44 - 00001235 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-02-22 08:44 - 2017-02-22 08:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-02-22 08:39 - 2017-02-22 08:39 - 00000000 ____D C:\ProgramData\Mozilla
2017-02-22 08:20 - 2017-02-08 19:08 - 00398408 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2017-02-22 08:11 - 2017-02-22 08:11 - 06253632 _____ (AVAST Software) C:\Users\Vojta\Downloads\avast_free_antivirus_setup_online (1).exe
2017-02-22 08:03 - 2017-02-22 08:03 - 02945520 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Vojta\Downloads\AVG_Antivirus_Free_1425.exe
2017-02-22 07:38 - 2017-02-22 07:38 - 00039424 _____ C:\Users\Vojta\Downloads\CP_update (4).xls
2017-02-22 07:38 - 2017-02-22 07:38 - 00039424 _____ C:\Users\Vojta\Desktop\CP_update (4).xls
2017-02-21 20:22 - 2017-02-21 20:23 - 20661868 _____ C:\Users\Vojta\Downloads\Hithit.cz - Adoptujte maminku! Kupte ji vstupenku na mentoring..mp4
2017-02-21 10:03 - 2017-02-21 10:03 - 00530124 _____ C:\Users\Vojta\Downloads\Scan 13. 2. 2017 9.01.pdf
2017-02-20 23:10 - 2017-02-20 23:10 - 00691112 _____ C:\Users\Vojta\Downloads\Jak používat fakultní email mimo počítačovou síť pf uk.pdf
2017-02-20 20:26 - 2017-02-20 19:16 - 21385211 _____ C:\Users\Vojta\Desktop\Aplicación móvil - EVA Facial Mouse - Apps Accesibles - Fundación Vodafone España.mp4
2017-02-20 19:15 - 2017-02-20 19:16 - 17539159 _____ C:\Users\Vojta\Downloads\Hithit.cz - Nová deska Zrní.mp4
2017-02-20 19:14 - 2017-02-20 19:16 - 21385211 _____ C:\Users\Vojta\Downloads\Aplicación móvil - EVA Facial Mouse - Apps Accesibles - Fundación Vodafone España.mp4
2017-02-20 19:02 - 2017-02-20 19:03 - 00000000 ____D C:\Users\Vojta\Desktop\U Templářů
2017-02-20 18:59 - 2017-02-20 18:59 - 00039936 _____ C:\Users\Vojta\Downloads\CP_update (3).xls
2017-02-20 10:26 - 2017-02-20 10:26 - 00076801 _____ C:\Users\Vojta\Downloads\webtrekk_report_2016-03-07_Pages.xls
2017-02-20 10:25 - 2017-02-20 10:25 - 00076801 _____ C:\Users\Vojta\Downloads\webtrekk_report_2016-05-01_Pages (2).xls
2017-02-20 10:18 - 2017-02-20 10:18 - 00075265 _____ C:\Users\Vojta\Downloads\webtrekk_report_2016-05-01_Pages (1).xls
2017-02-20 10:06 - 2017-02-20 10:06 - 00075265 _____ C:\Users\Vojta\Downloads\webtrekk_report_2016-05-01_Pages.xls
2017-02-19 20:36 - 2017-02-19 20:36 - 00001467 _____ C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LenovoSettings.lnk
2017-02-17 18:37 - 2017-02-17 18:37 - 00000000 ____D C:\Users\Vojta\AppData\Local\WMTools Downloaded Files
2017-02-17 18:36 - 2017-02-17 18:36 - 12655848 _____ C:\Users\Vojta\Downloads\MM26_CS.exe
2017-02-17 16:14 - 2017-02-17 16:15 - 34987849 _____ C:\Users\Vojta\Downloads\Hithit.cz - Rádio StreetCulture jede na Nákladové nádraží Žižkov.mp4
2017-02-17 14:32 - 2017-02-17 14:32 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-02-17 14:32 - 2017-02-17 14:32 - 00000000 ____D C:\Users\Vojta\Tracing
2017-02-17 14:32 - 2017-02-17 14:32 - 00000000 ____D C:\ProgramData\Skype
2017-02-17 14:32 - 2017-02-17 14:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-02-17 14:31 - 2017-02-17 14:31 - 01629144 _____ (Skype Technologies S.A.) C:\Users\Vojta\Downloads\SkypeSetup.exe
2017-02-17 13:03 - 2017-02-17 13:07 - 185508903 _____ C:\Users\Vojta\Downloads\Foto_SEW_9_2.zip
2017-02-15 20:26 - 2017-02-15 20:26 - 00257864 _____ (Lenovo Group Limited) C:\WINDOWS\system32\iMDriverHelper.dll
2017-02-15 18:22 - 2017-02-15 18:18 - 03413049 _____ C:\Users\Vojta\Desktop\RBMH_Google Analytics Training Programme_Description.pdf
2017-02-15 18:18 - 2017-02-15 18:18 - 03413049 _____ C:\Users\Vojta\Downloads\RBMH_Google Analytics Training Programme_Description.pdf
2017-02-15 11:07 - 2017-02-15 11:07 - 00021456 _____ C:\Users\Vojta\Downloads\MP_FB_budvar-FW-2016.xlsx
2017-02-15 09:17 - 2017-02-15 09:59 - 00000000 ____D C:\Users\Vojta\Desktop\NeverDie
2017-02-15 09:17 - 2017-02-15 09:17 - 03149193 _____ C:\Users\Vojta\Downloads\wooxupnaneverdie_cz.zip
2017-02-15 09:17 - 2017-02-15 09:17 - 03149193 _____ C:\Users\Vojta\Downloads\wooxupnaneverdie_cz (1).zip
2017-02-14 18:52 - 2017-02-14 18:52 - 00041984 _____ C:\Users\Vojta\Downloads\CP_update (2).xls
2017-02-13 16:02 - 2017-02-13 16:02 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\webex
2017-02-13 16:01 - 2017-02-13 16:02 - 00000000 ____D C:\Users\Vojta\AppData\LocalLow\WebEx
2017-02-13 16:01 - 2017-02-13 16:02 - 00000000 ____D C:\Users\Vojta\AppData\Local\WebEx
2017-02-13 16:01 - 2017-02-13 16:02 - 00000000 ____D C:\ProgramData\WebEx
2017-02-13 16:01 - 2017-02-13 16:01 - 01021896 _____ (Cisco WebEx LLC) C:\Users\Vojta\Downloads\Cisco_WebEx_Add-On.exe
2017-02-13 00:29 - 2017-02-13 00:29 - 00332050 _____ C:\Users\Vojta\Downloads\2017 RALLY SWEDEN EVENT 52 MIN SCRIPT PART 3 RD1 (1).pdf
2017-02-12 21:49 - 2017-02-12 21:50 - 00000000 ____D C:\Users\Vojta\Desktop\Četba k diplomce
2017-02-12 21:34 - 2017-02-12 21:34 - 00332225 _____ C:\Users\Vojta\Downloads\RALLY SWEDEN EVENT 52 MIN SCRIPT PART 4 RD1.pdf
2017-02-12 21:34 - 2017-02-12 21:34 - 00332050 _____ C:\Users\Vojta\Downloads\2017 RALLY SWEDEN EVENT 52 MIN SCRIPT PART 3 RD1.pdf
2017-02-12 21:20 - 2017-02-12 21:20 - 00359013 _____ C:\Users\Vojta\Downloads\2017 RALLY SWEDEN 52m HIGHLIGHTS SHOW PART 1 RD1.pdf
2017-02-12 21:20 - 2017-02-12 21:20 - 00321688 _____ C:\Users\Vojta\Downloads\2017 RALLY SWEDEN 52m HIGHLIGHTS SHOW PART 2 RD1.pdf
2017-02-12 20:14 - 2017-02-12 20:15 - 121786916 _____ C:\Users\Vojta\Desktop\Hithit.cz - Camino na kolečkách 2017 - mě se chce.avi
2017-02-12 19:58 - 2017-02-12 19:59 - 71838508 _____ C:\Users\Vojta\Desktop\Hithit.cz - Camino na kolečkách 2017 znělka cut.avi
2017-02-12 16:26 - 2017-02-12 16:28 - 67267465 _____ C:\Users\Vojta\Downloads\Hithit.cz - Camino na kolečkách 2017.mp4
2017-02-11 18:40 - 2017-02-11 18:40 - 00615707 _____ C:\Users\Vojta\Downloads\P-20170211-00862--onka_wins_in_Abu_Dhabi-English.pdf
2017-02-10 20:09 - 2017-02-10 20:09 - 00790799 _____ C:\Users\Vojta\Downloads\Undisputed_Digital_Feedback (1).pptx
2017-02-10 19:10 - 2017-02-10 19:10 - 07274216 _____ C:\Users\Vojta\Downloads\Hithit.cz - Vnímej svět jinak, z perspektivy neslyšících.mp4
2017-02-10 18:41 - 2017-02-10 18:41 - 00000000 ____D C:\ProgramData\install_backup
2017-02-10 18:40 - 2012-06-13 17:10 - 00102376 _____ ("CyberLink) C:\WINDOWS\system32\Drivers\wsvd.sys
2017-02-10 18:36 - 2017-02-10 18:36 - 00000000 ____D C:\Users\Vojta\AppData\LocalLow\Adobe
2017-02-10 18:35 - 2017-02-10 18:35 - 00376087 _____ C:\Users\Vojta\Downloads\Honorare_Bublik_Vojtech.PDF
2017-02-10 12:59 - 2017-02-10 12:59 - 00790799 _____ C:\Users\Vojta\Downloads\Undisputed_Digital_Feedback.pptx
2017-02-10 10:14 - 2016-12-21 08:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2017-02-10 10:14 - 2016-12-21 05:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2017-02-10 08:54 - 2017-02-22 20:35 - 00000000 ____D C:\Users\Vojta\AppData\LocalLow\Mozilla
2017-02-10 08:53 - 2017-02-22 08:44 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Mozilla
2017-02-10 08:53 - 2017-02-22 08:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-02-10 08:53 - 2017-02-10 10:48 - 00000000 ____D C:\Users\Vojta\AppData\Local\Mozilla
2017-02-10 08:53 - 2017-02-10 08:53 - 00245544 _____ C:\Users\Vojta\Downloads\Firefox Setup Stub 51.0.1.exe
2017-02-10 08:11 - 2017-02-11 10:31 - 00000000 ____D C:\Users\Vojta\AppData\Local\ConnectedDevicesPlatform
2017-02-10 08:11 - 2017-02-10 08:11 - 00000020 ___SH C:\Users\Vojta\ntuser.ini
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Public\Documents\Obrázky
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Public\Documents\Hudba
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Public\Documents\Filmy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Šablony
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Soubory cookie
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Poslední
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Okolní tiskárny
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Okolní síť
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Nabídka Start
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Dokumenty
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Documents\Obrázky
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Documents\Hudba
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Documents\Filmy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\Data aplikací
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default User\Documents\Obrázky
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default User\Documents\Hudba
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default User\Documents\Filmy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Data aplikací
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Šablony
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Plocha
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Nabídka Start
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Dokumenty
2017-02-10 05:07 - 2017-02-10 05:07 - 00000000 _SHDL C:\ProgramData\Data aplikací
2017-02-10 05:05 - 2017-02-10 05:06 - 00007623 _____ C:\WINDOWS\diagwrn.xml
2017-02-10 05:05 - 2017-02-10 05:06 - 00007623 _____ C:\WINDOWS\diagerr.xml
2017-02-10 05:00 - 2017-02-22 16:07 - 00004022 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1486577462
2017-02-10 05:00 - 2017-02-22 08:20 - 00003994 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2017-02-10 05:00 - 2017-02-10 18:43 - 00000000 ____D C:\WINDOWS\System32\Tasks\CyberLink
2017-02-10 05:00 - 2017-02-10 05:00 - 00022924 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-02-10 05:00 - 2017-02-10 05:00 - 00003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2017-02-10 05:00 - 2017-02-10 05:00 - 00002770 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-02-10 05:00 - 2017-02-10 05:00 - 00002334 _____ C:\WINDOWS\System32\Tasks\{3C569360-026A-463B-BC2E-3BEB688916A4}
2017-02-10 05:00 - 2017-02-10 05:00 - 00002274 _____ C:\WINDOWS\System32\Tasks\DolbySelectorTask
2017-02-10 05:00 - 2017-02-10 05:00 - 00002212 _____ C:\WINDOWS\System32\Tasks\PDVDServ12 Task
2017-02-10 05:00 - 2017-02-10 05:00 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2017-02-10 05:00 - 2017-02-10 05:00 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2017-02-10 04:57 - 2017-02-22 20:33 - 00000000 ____D C:\ProgramData\Synaptics
2017-02-10 04:53 - 2017-02-10 04:53 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-02-10 04:50 - 2017-02-10 04:55 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-02-10 04:48 - 2017-02-22 20:33 - 00000000 ____D C:\Users\Vojta
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Šablony
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Soubory cookie
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Poslední
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Okolní tiskárny
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Okolní síť
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Nabídka Start
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Dokumenty
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Documents\Obrázky
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Documents\Hudba
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Documents\Filmy
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\Data aplikací
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-02-10 04:48 - 2017-02-10 04:48 - 00000000 _SHDL C:\Users\Vojta\AppData\Local\Data aplikací
2017-02-10 04:45 - 2017-02-10 04:45 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_wbf_vfs_lvcmn_01_11_00.Wdf
2017-02-10 04:45 - 2017-02-10 04:45 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2017-02-10 04:44 - 2017-02-22 20:34 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-02-10 04:44 - 2017-02-10 04:50 - 00000000 ____D C:\Program Files\Intel
2017-02-10 04:44 - 2017-02-10 04:50 - 00000000 ____D C:\Program Files\AMD
2017-02-10 04:44 - 2017-02-10 04:44 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2017-02-10 04:44 - 2017-02-10 04:44 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2017-02-10 04:44 - 2017-02-10 04:44 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2017-02-10 04:44 - 2017-02-10 04:44 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-02-10 04:44 - 2017-02-10 04:44 - 00000000 ____D C:\WINDOWS\system32\DAX2
2017-02-10 04:44 - 2017-02-10 04:44 - 00000000 ____D C:\Program Files\Realtek
2017-02-10 04:43 - 2017-02-10 04:45 - 00000000 ____D C:\Program Files\Synaptics
2017-02-10 04:43 - 2017-02-10 04:43 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2017-02-10 04:35 - 2017-02-22 08:57 - 00000000 ___DC C:\WINDOWS\Panther
2017-02-10 04:31 - 2017-02-21 09:06 - 00000000 ____D C:\Windows.old
2017-02-10 04:26 - 2017-02-10 04:26 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 13084160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 12177920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 08168000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 07812096 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 07654400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 06109184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 05380608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04746752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04673304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 04130440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03777536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03689984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 03441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03306496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02953216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02828376 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02820096 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02677544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02669056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02611200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02484736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02362880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02323728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02277248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02256384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02189664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 02186896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02109952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01969912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01886344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01779712 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01738560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01691136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 01637728 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01595392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01589760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01556480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 01477632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01473048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01461200 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01454504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01435896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01366016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 01354320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2017-02-10 04:26 - 2017-02-10 04:26 - 01336320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01293152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01220096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2017-02-10 04:26 - 2017-02-10 04:26 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01196544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2017-02-10 04:26 - 2017-02-10 04:26 - 01173496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01123912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01051112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2017-02-10 04:26 - 2017-02-10 04:26 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2017-02-10 04:26 - 2017-02-10 04:26 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00912896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00894096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00882680 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00861024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00811872 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00772608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00730624 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00707584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00658784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00637400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00527880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00454592 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00433504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00424616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00377184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00374448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxclu.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00319288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00266544 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcuiu.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00248480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00198856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRHelper.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00187520 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00172528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00167848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00163752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00157536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudStorageWizard.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00152416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EDPCleanup.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00142176 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00126568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfaudiocnv.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00122208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\migisol.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00117240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReportingCSP.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00091936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfaudiocnv.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00089416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\modem.sys
2017-02-10 04:26 - 2017-02-10 04:26 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\EAMProgressHandler.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2017-02-10 04:26 - 2017-02-10 04:26 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
2017-02-10 04:26 - 2017-02-10 04:26 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe
2017-02-10 04:25 - 2017-02-10 04:26 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 17188864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 06668040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 05722832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 05114368 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 04136448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 03542016 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 03370496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 03198464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 02913144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 02287616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 02166752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 02104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01576448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01503544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01415752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01357824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01263856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01069720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00967168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00869848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-02-10 04:25 - 2017-02-10 04:25 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-02-10 04:25 - 2017-02-10 04:25 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00352096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00219488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00168424 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2017-02-10 04:25 - 2017-02-10 04:25 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2017-02-10 04:25 - 2017-02-10 04:25 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00106896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2017-02-10 04:25 - 2017-02-10 04:25 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe
2017-02-10 04:25 - 2017-02-10 04:25 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
2017-02-10 03:54 - 2017-02-10 03:54 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2017-02-10 03:51 - 2017-02-10 03:51 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2017-02-10 03:51 - 2017-02-10 03:51 - 00000000 ____D C:\Program Files\Reference Assemblies
2017-02-10 03:51 - 2017-02-10 03:51 - 00000000 ____D C:\Program Files\MSBuild
2017-02-10 03:51 - 2017-02-10 03:51 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-02-10 03:51 - 2017-02-10 03:51 - 00000000 ____D C:\Program Files (x86)\MSBuild
2017-02-10 03:50 - 2016-05-25 14:31 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-02-10 03:50 - 2016-05-25 14:31 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-02-10 03:50 - 2016-05-25 14:31 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2017-02-10 03:50 - 2016-05-25 11:03 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2017-02-10 03:50 - 2016-05-25 11:03 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-02-10 03:50 - 2016-05-25 11:03 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2017-02-09 21:18 - 2017-02-20 22:48 - 00000000 ____D C:\Users\Vojta\Desktop\Sprinklr cover
2017-02-09 19:16 - 2017-02-09 19:16 - 03657376 _____ (Synaptics Incorporated) C:\WINDOWS\system32\vcsAPIFORWBF.dll
2017-02-09 19:16 - 2017-02-09 19:16 - 00980648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120.dll
2017-02-09 19:16 - 2017-02-09 19:16 - 00086544 _____ (Synaptics Incorporated) C:\WINDOWS\system32\valWBFPolicyService.exe
2017-02-09 19:16 - 2017-02-09 19:16 - 00080544 _____ (Synaptics Incorporated) C:\WINDOWS\system32\LenovoSysCheck.dll
2017-02-09 19:16 - 2017-02-09 19:16 - 00056848 _____ (Synaptics Incorporated) C:\WINDOWS\system32\valWbioSyncSvc.exe
2017-02-09 19:16 - 2017-02-09 19:16 - 00039488 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\smi.sys
2017-02-09 19:16 - 2013-10-05 08:58 - 00660128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp120.dll
2017-02-09 17:43 - 2017-02-10 19:30 - 00000000 ____D C:\ProgramData\boost_interprocess
2017-02-09 17:30 - 2017-02-09 17:30 - 00001158 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Premiere Pro CC 2017.lnk
2017-02-09 17:30 - 2017-02-09 17:30 - 00000000 ____D C:\Users\Public\Documents\Adobe
2017-02-09 17:28 - 2017-02-09 17:28 - 00000000 ____D C:\Users\Public\Documents\AdobeInstalledCodecs
2017-02-09 17:27 - 2017-02-09 17:27 - 00001305 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2017-02-09 17:26 - 2017-02-22 14:28 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\vlc
2017-02-09 17:25 - 2017-02-10 04:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-02-09 17:25 - 2017-02-09 17:25 - 00000000 ____D C:\Program Files\VideoLAN
2017-02-09 17:24 - 2017-02-09 17:24 - 31717016 _____ C:\Users\Vojta\Downloads\vlc-2.2.4-win64.exe
2017-02-09 14:24 - 2017-02-09 14:26 - 00000000 ____D C:\Users\Vojta\AppData\Local\Comms
2017-02-09 13:20 - 2017-02-09 13:20 - 00043520 _____ C:\Users\Vojta\Downloads\CP_update (1).xls
2017-02-09 13:18 - 2017-02-09 14:36 - 1405987770 _____ C:\Users\Vojta\Downloads\Adobe-Premiere-Pro-CC-2017-v11.0-+-Crack-[Kedar_CZ].rar
2017-02-09 13:00 - 2017-02-09 17:34 - 00000000 ____D C:\Program Files\Adobe
2017-02-09 12:49 - 2017-02-09 12:49 - 27576965 _____ C:\Users\Vojta\Downloads\Hithit.cz - Bučovice Blind Football Cup 2017.mp4
2017-02-09 12:49 - 2017-02-09 12:49 - 27576965 _____ C:\Users\Vojta\Downloads\Hithit.cz - Bučovice Blind Football Cup 2017 (1).mp4
2017-02-09 12:49 - 2017-02-09 12:49 - 27576965 _____ C:\Users\Vojta\Desktop\Hithit.cz - Bučovice Blind Football Cup 2017.mp4
2017-02-09 12:48 - 2017-02-09 12:48 - 11927462 _____ C:\Users\Vojta\Downloads\Hithit.cz - Eagleheart nahrává třetí album.mp4
2017-02-09 09:57 - 2017-02-09 12:53 - 00000000 ____D C:\Program Files (x86)\Avidemux 2.6 - 64 bits
2017-02-09 09:57 - 2017-02-09 12:51 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\avidemux
2017-02-09 09:56 - 2017-02-09 09:56 - 20541107 _____ C:\Users\Vojta\Downloads\avidemux_2.6.18_win64.exe
2017-02-09 09:36 - 2017-02-09 13:11 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2017-02-09 09:15 - 2017-02-09 09:15 - 00001217 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS3.lnk
2017-02-09 09:15 - 2017-02-09 09:15 - 00000000 ____D C:\Program Files (x86)\Bonjour
2017-02-09 09:14 - 2017-02-09 09:14 - 00001487 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit 2.lnk
2017-02-09 09:14 - 2017-02-09 09:14 - 00001303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Stock Photos CS3.lnk
2017-02-09 09:14 - 2017-02-09 09:14 - 00001272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS3.lnk
2017-02-09 09:13 - 2017-02-09 09:13 - 00001179 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS3.lnk
2017-02-09 09:03 - 2017-02-09 17:32 - 00000000 ____D C:\Users\Vojta\Documents\Adobe
2017-02-09 09:03 - 2017-02-09 09:03 - 00000000 ____D C:\Users\Vojta\AppData\Local\AMD
2017-02-09 08:44 - 2017-02-09 17:30 - 00000000 ____D C:\Program Files\Common Files\Adobe
2017-02-09 08:40 - 2017-02-22 09:57 - 00000000 ____D C:\Users\Vojta\AppData\Local\Adobe
2017-02-09 07:47 - 2017-02-09 07:47 - 00000000 ____D C:\Users\Vojta\AppData\Local\NetworkTiles
2017-02-09 07:46 - 2017-02-22 20:35 - 00015607 _____ C:\WINDOWS\system32\InstallUtil.InstallLog
2017-02-08 23:04 - 2017-02-08 23:04 - 02365296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WudfUpdate_01011.dll
2017-02-08 22:30 - 2017-02-09 09:39 - 44874097 _____ C:\Users\Vojta\Desktop\Hithit.cz - Samolibé verše Honzy Badalce.mp4
2017-02-08 22:20 - 2017-02-08 22:22 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-02-08 22:20 - 2017-02-08 22:20 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-02-08 21:42 - 2016-09-30 04:28 - 00161792 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2017-02-08 21:39 - 2016-09-07 05:22 - 00041472 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Speech.Pal.dll
2017-02-08 21:25 - 2017-02-08 21:25 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\LSC
2017-02-08 21:05 - 2017-02-08 21:06 - 00000000 ____D C:\ProgramData\FLEXnet
2017-02-08 20:36 - 2017-02-08 20:36 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\SuperAdBlocker.com
2017-02-08 20:31 - 2017-02-08 20:31 - 00000000 ____D C:\Users\Vojta\Documents\Vlastní šablony Office
2017-02-08 20:21 - 2017-02-08 20:22 - 44870141 _____ C:\Users\Vojta\Downloads\Hithit.cz - Samolibé verše Honzy Badalce.mp4
2017-02-08 20:18 - 2017-02-08 20:19 - 05426464 _____ C:\Users\Vojta\Downloads\SuperAdBlocker.exe
2017-02-08 20:11 - 2017-02-10 04:51 - 00000000 ____D C:\WINDOWS\SysWOW64\spool
2017-02-08 20:11 - 2017-02-08 20:11 - 00496896 _____ C:\Users\Vojta\Downloads\flux-setup.exe
2017-02-08 20:11 - 2017-02-08 20:11 - 00002163 _____ C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\f.lux.lnk
2017-02-08 20:11 - 2017-02-08 20:11 - 00000000 ____D C:\Users\Vojta\AppData\Local\FluxSoftware
2017-02-08 20:01 - 2017-02-08 20:01 - 00694672 _____ (Disc Soft Ltd.) C:\Users\Vojta\Downloads\DTLiteInstaller.exe
2017-02-08 19:57 - 2017-02-08 19:57 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\WinRAR
2017-02-08 19:56 - 2017-01-01 17:51 - 00141706 _____ C:\Users\Vojta\Desktop\trénink.pdf
2017-02-08 19:55 - 2014-09-24 10:10 - 511180053 _____ C:\Users\Vojta\Downloads\Adobe-photoshop-CS-3-cz-full.rar
2017-02-08 19:54 - 2017-02-08 20:28 - 00000000 ____D C:\Users\Vojta\Desktop\Nedori
2017-02-08 19:52 - 2017-02-22 14:23 - 00000000 ____D C:\Users\Vojta\Desktop\Red Bull
2017-02-08 19:50 - 2017-02-08 19:50 - 00000000 ____D C:\Users\Vojta\AppData\LocalLow\Lenovo
2017-02-08 19:49 - 2017-02-10 18:54 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-02-08 19:49 - 2017-02-09 17:27 - 00000000 ____D C:\Program Files (x86)\Adobe
2017-02-08 19:49 - 2017-02-08 19:49 - 00000000 ____D C:\Users\Vojta\Desktop\Flat
2017-02-08 19:49 - 2017-02-08 19:49 - 00000000 ____D C:\Users\Vojta\Desktop\Faktury 2017
2017-02-08 19:48 - 2017-02-10 08:15 - 00000000 ____D C:\ProgramData\Adobe
2017-02-08 19:48 - 2017-02-08 19:49 - 00000000 ____D C:\Users\Vojta\Desktop\dokumenty a manuály
2017-02-08 19:48 - 2017-02-08 19:48 - 00000000 ____D C:\Users\Vojta\Desktop\CV
2017-02-08 19:47 - 2017-02-08 19:48 - 27078264 _____ C:\Users\Vojta\Downloads\U-medvídků-teaser.mp4
2017-02-08 19:44 - 2017-02-08 19:45 - 58136984 _____ C:\Users\Vojta\Downloads\AcroRdrDC1500720033_cs_CZ.exe
2017-02-08 19:43 - 2017-02-10 04:55 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-02-08 19:43 - 2017-02-10 04:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-02-08 19:43 - 2017-02-08 19:43 - 00000000 ____D C:\Program Files\WinRAR
2017-02-08 19:42 - 2017-02-08 19:42 - 02377944 _____ C:\Users\Vojta\Downloads\winrar-x64-540cz.exe
2017-02-08 19:25 - 2017-02-10 04:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje Microsoft Office 2016
2017-02-08 19:25 - 2017-02-08 19:25 - 00002566 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002565 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive pro firmy.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002560 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002537 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002532 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002525 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype pro firmy 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002493 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002458 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2017-02-08 19:25 - 2017-02-08 19:25 - 00002454 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2017-02-08 19:24 - 2017-02-08 19:24 - 00040448 _____ C:\Users\Vojta\Downloads\CP_update.xls
2017-02-08 19:19 - 2017-02-08 19:19 - 00000000 ____D C:\Program Files\Microsoft Office 15
2017-02-08 19:18 - 2017-02-08 19:19 - 03802424 _____ (Microsoft Corporation) C:\Users\Vojta\Downloads\Setup.X86.cs-cz_O365ProPlusRetail_06ea1c77-764e-4fda-9194-46c1771f2944_TX_PR_b_16_.exe
2017-02-08 19:12 - 2017-02-10 04:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote
2017-02-08 19:12 - 2017-02-08 20:48 - 00000000 ____D C:\Users\Vojta\Evernote
2017-02-08 19:12 - 2017-02-08 19:12 - 00000000 ____D C:\Users\Vojta\AppData\LocalLow\Evernote
2017-02-08 19:12 - 2017-02-08 19:12 - 00000000 ____D C:\Program Files (x86)\Evernote
2017-02-08 19:11 - 2017-02-22 16:07 - 00001095 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-02-08 19:10 - 2017-02-08 19:10 - 00032088 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2017-02-08 19:09 - 2017-02-22 10:09 - 00000000 ____D C:\Program Files\Common Files\AV
2017-02-08 19:09 - 2017-02-22 08:20 - 00337080 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys
2017-02-08 19:09 - 2017-02-22 08:20 - 00001986 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2017-02-08 19:09 - 2017-02-08 19:09 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\AVAST Software
2017-02-08 19:09 - 2017-02-08 19:09 - 00000000 ____D C:\Users\Vojta\AppData\Local\CEF
2017-02-08 19:09 - 2017-02-08 19:08 - 00547904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2017-02-08 19:09 - 2017-02-08 19:08 - 00337080 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys.148774803037504
2017-02-08 19:09 - 2017-02-08 19:08 - 00162528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2017-02-08 19:09 - 2017-02-08 19:08 - 00126088 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2017-02-08 19:09 - 2017-02-08 19:08 - 00100640 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2017-02-08 19:09 - 2017-02-08 19:08 - 00074680 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2017-02-08 19:09 - 2017-02-08 19:08 - 00038296 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2017-02-08 19:09 - 2017-02-08 19:07 - 00991496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2017-02-08 19:09 - 2017-02-08 19:06 - 00334600 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbloga.sys
2017-02-08 19:09 - 2017-02-08 19:06 - 00309784 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys
2017-02-08 19:09 - 2017-02-08 19:06 - 00189768 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsha.sys
2017-02-08 19:09 - 2017-02-08 19:06 - 00048528 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbuniva.sys
2017-02-08 19:05 - 2017-02-08 19:51 - 00000000 ____D C:\ProgramData\AVAST Software
2017-02-08 19:05 - 2017-02-08 19:10 - 00000000 ____D C:\Program Files\AVAST Software
2017-02-08 19:05 - 2017-02-08 19:05 - 06655184 _____ (AVAST Software) C:\Users\Vojta\Downloads\avast_free_antivirus_setup_online.exe
2017-02-08 19:03 - 2017-02-08 19:05 - 102359936 _____ (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Users\Vojta\Downloads\Evernote_6.4.2.3788.exe
2017-02-08 19:01 - 2017-02-08 19:01 - 01804696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01011.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00764616 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynCOM.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00620744 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SynTP.sys
2017-02-08 19:01 - 2017-02-08 19:01 - 00421560 _____ (Synaptics Incorporated) C:\WINDOWS\SysWOW64\SynCom.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00379136 _____ (Intel Corporation) C:\WINDOWS\system32\ibtproppage.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00269000 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPAPI.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00268984 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPCo34.dll
2017-02-08 19:01 - 2017-02-08 19:01 - 00253184 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\ibtusb.sys
2017-02-08 19:01 - 2017-02-08 19:01 - 00184064 _____ (Intel Corporation) C:\WINDOWS\system32\ibtsiva.exe
2017-02-08 19:01 - 2017-02-08 19:01 - 00044216 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel_Aux.sys
2017-02-08 19:01 - 2017-02-08 19:01 - 00044216 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel.sys
2017-02-08 19:01 - 2017-02-08 19:01 - 00044216 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SET2D7E.tmp
2017-02-08 19:01 - 2017-02-08 19:01 - 00043704 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_AMDASF_Aux.sys
2017-02-08 18:59 - 2017-02-22 08:25 - 00000000 ____D C:\Users\Vojta\AppData\Local\Google
2017-02-08 18:59 - 2017-02-22 08:25 - 00000000 ____D C:\Program Files (x86)\Google
2017-02-08 18:59 - 2017-02-08 18:59 - 01129376 _____ (Google Inc.) C:\Users\Vojta\Downloads\ChromeSetup.exe
2017-02-08 18:58 - 2017-02-08 18:59 - 00000000 ____D C:\Users\Vojta\AppData\Local\MicrosoftEdge
2017-02-08 18:56 - 2017-02-08 18:56 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_ldiagio_uefi_01009.Wdf
2017-02-08 18:56 - 2017-02-08 18:56 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Lenovo
2017-02-08 18:51 - 2017-02-22 09:54 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Skype
2017-02-08 18:51 - 2017-02-08 18:51 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Macromedia
2017-02-08 18:51 - 2017-02-08 18:51 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Intel Corporation
2017-02-08 18:50 - 2017-02-10 08:15 - 00002394 _____ C:\Users\Vojta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-02-08 18:50 - 2017-02-10 08:15 - 00000000 ___RD C:\Users\Vojta\OneDrive
2017-02-08 18:50 - 2017-02-08 18:50 - 00000000 ____D C:\Users\Vojta\AppData\Local\Power2Go8
2017-02-08 18:48 - 2017-02-11 18:47 - 00000000 ____D C:\Users\Vojta\AppData\Local\Lenovo
2017-02-08 18:48 - 2017-02-08 18:48 - 00000000 ____D C:\Users\Vojta\REACHit
2017-02-08 18:48 - 2017-02-08 18:48 - 00000000 ____D C:\Users\Vojta\AppData\Local\Publishers
2017-02-08 18:48 - 2017-02-08 18:48 - 00000000 ____D C:\Users\Vojta\AppData\Local\CyberLink
2017-02-08 18:47 - 2017-02-22 20:34 - 00000000 __SHD C:\Users\Vojta\IntelGraphicsProfiles
2017-02-08 18:47 - 2017-02-22 14:29 - 00000000 ____D C:\Users\Vojta\AppData\Local\Packages
2017-02-08 18:47 - 2017-02-10 18:36 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Adobe
2017-02-08 18:47 - 2017-02-08 18:47 - 00016148 _____ C:\WINDOWS\system32\LAPTOP-PSMFKCI2_defaultuser0_HistoryPrediction.bin
2017-02-08 18:47 - 2017-02-08 18:47 - 00000000 ____D C:\Users\Vojta\AppData\Roaming\Intel
2017-02-08 18:47 - 2017-02-08 18:47 - 00000000 ____D C:\Users\Vojta\AppData\Local\VirtualStore
2017-02-08 18:47 - 2017-02-08 18:47 - 00000000 ____D C:\Users\Vojta\AppData\Local\TileDataLayer
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-02-22 20:38 - 2016-11-21 05:39 - 01388298 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-02-22 20:38 - 2016-11-21 04:58 - 00417352 _____ C:\WINDOWS\system32\perfh005.dat
2017-02-22 20:38 - 2016-11-21 04:58 - 00074440 _____ C:\WINDOWS\system32\perfc005.dat
2017-02-22 20:33 - 2016-11-21 05:29 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-02-22 20:33 - 2016-07-16 07:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-02-22 20:27 - 2016-11-20 20:29 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-02-22 15:51 - 2016-11-20 20:29 - 05288752 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-02-22 14:33 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-02-22 14:33 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-02-22 10:09 - 2015-11-20 09:19 - 00000000 ____D C:\ProgramData\McAfee
2017-02-22 09:56 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-02-22 09:56 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-02-22 08:57 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-02-17 08:26 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-02-11 21:41 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache
2017-02-11 20:48 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2017-02-11 20:48 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\system32\WCN
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\F12
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\MiracastView
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ___RD C:\Program Files\Windows Defender
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\migwiz
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\IME
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Help
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\System
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-02-11 20:48 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2017-02-11 20:48 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2017-02-11 20:48 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\servicing
2017-02-11 14:43 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-02-11 10:31 - 2015-11-20 09:18 - 00000000 ____D C:\ProgramData\CyberLink
2017-02-11 07:51 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\appcompat
2017-02-10 18:43 - 2015-11-20 10:31 - 00000000 ____D C:\Users\Public\Documents\Lenovo
2017-02-10 18:43 - 2015-11-20 09:18 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-02-10 18:43 - 2015-11-20 09:16 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2017-02-10 18:43 - 2015-11-20 09:16 - 00000000 ____D C:\ProgramData\SUPPORTDIR
2017-02-10 18:43 - 2015-11-20 09:15 - 00000000 ____D C:\Program Files (x86)\Lenovo
2017-02-10 18:42 - 2015-11-20 09:16 - 00000000 ____D C:\ProgramData\Temp
2017-02-10 18:40 - 2015-11-20 09:18 - 00000000 ____D C:\Program Files\Lenovo
2017-02-10 08:12 - 2016-11-21 05:42 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-02-10 05:07 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Windows NT
2017-02-10 05:05 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-02-10 05:05 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Registration
2017-02-10 05:05 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-02-10 05:00 - 2015-11-20 10:07 - 01329198 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2017-02-10 04:59 - 2016-07-16 12:47 - 00000000 __RHD C:\Users\Public\Libraries
2017-02-10 04:55 - 2016-07-16 12:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-02-10 04:55 - 2016-07-16 07:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2017-02-10 04:55 - 2015-11-20 10:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Realtek
2017-02-10 04:55 - 2015-11-20 10:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby
2017-02-10 04:55 - 2015-11-20 10:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2017-02-10 04:55 - 2015-11-20 10:06 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2017-02-10 04:55 - 2015-11-20 09:21 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Power2Go 8
2017-02-10 04:53 - 2015-07-10 10:05 - 00000000 ____D C:\Users\Default.migrated
2017-02-10 04:51 - 2016-11-21 05:05 - 00000000 ____D C:\WINDOWS\OCR
2017-02-10 04:51 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2017-02-10 04:51 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\system32\slmgr
2017-02-10 04:51 - 2015-11-20 10:16 - 00000000 ___HD C:\WINDOWS\system32\WLANProfiles
2017-02-10 04:50 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-02-10 04:45 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-02-10 04:44 - 2015-11-20 10:08 - 00000000 ___HD C:\Intel
2017-02-10 04:35 - 2016-07-16 12:47 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-02-10 04:28 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-02-10 04:28 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Provisioning
2017-02-10 04:28 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\bcastdvr
2017-02-10 04:28 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-02-10 04:28 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Dism
2017-02-10 04:23 - 2016-07-16 12:42 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2017-02-10 04:04 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2017-02-10 04:04 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2017-02-10 04:04 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\system32\winrm
2017-02-10 04:04 - 2016-11-21 04:58 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2017-02-10 04:04 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2017-02-10 04:03 - 2016-07-16 12:47 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2017-02-10 03:51 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2017-02-10 03:51 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\MUI
2017-02-09 17:27 - 2015-11-20 09:15 - 00000000 ____D C:\ProgramData\Package Cache
2017-02-09 09:48 - 2015-11-20 10:28 - 00000000 ____D C:\ProgramData\Validity
2017-02-08 22:04 - 2015-11-20 09:16 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-02-08 20:57 - 2015-07-10 12:01 - 00635904 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2017-02-08 20:57 - 2015-07-10 12:01 - 00014848 ____N (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2017-02-08 18:57 - 2015-11-20 09:27 - 00000000 ____D C:\ProgramData\Lenovo
==================== Files in the root of some directories =======
2017-02-10 04:44 - 2017-02-10 04:44 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-02-17 11:39
==================== End of FRST.txt ============================
- Přílohy
-
- FRST.rar
- (17.41 KiB) Staženo 74 x
- Rudy
- Site Admin

- Příspěvky: 119672
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Podezření na malware - FRST 2 posty
Otevřte poznámkový blok a zkopírujte do něj:
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Start
C:\Program Files\McAfee Security Scan
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
C:\Program Files (x86)\Bonjour
C:\ProgramData\DP45977C.lfl
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [File not signed]
EmptyTemp:
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Podezření na malware - FRST 2 posty
Díky. Log zde
Fix result of Farbar Recovery Scan Tool (x64) Version: 22-02-2017 01
Ran by Vojta (22-02-2017 22:13:43) Run:1
Running from C:\Users\Vojta\Desktop
Loaded Profiles: Vojta (Available Profiles: Vojta)
Boot Mode: Normal
==============================================
fixlist content:
*****************
C:\Program Files\McAfee Security Scan
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
C:\Program Files (x86)\Bonjour
C:\ProgramData\DP45977C.lfl
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [File not signed]
EmptyTemp:
End
*****************
"C:\Program Files\McAfee Security Scan" folder move:
Could not move "C:\Program Files\McAfee Security Scan" => Scheduled to move on reboot.
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat => moved successfully
C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat => moved successfully
C:\Program Files (x86)\Bonjour => moved successfully
C:\ProgramData\DP45977C.lfl => moved successfully
Bonjour Service => Unable to stop service.
HKLM\System\CurrentControlSet\Services\Bonjour Service => key removed successfully
Bonjour Service => service removed successfully
=========== EmptyTemp: ==========
BITS transfer queue => 12007760 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 48733389 B
Java, Flash, Steam htmlcache => 984 B
Windows/system/drivers => 14041213 B
Edge => 7997204 B
Chrome => 0 B
Firefox => 380963883 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 10020848 B
LocalService => 1634 B
NetworkService => 0 B
Vojta => 102775954 B
RecycleBin => 345860 B
EmptyTemp: => 550.2 MB temporary data Removed.
================================
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 22-02-2017 22:15:13)
C:\Program Files\McAfee Security Scan => Is moved successfully
==== End of Fixlog 22:15:13 ====
Fix result of Farbar Recovery Scan Tool (x64) Version: 22-02-2017 01
Ran by Vojta (22-02-2017 22:13:43) Run:1
Running from C:\Users\Vojta\Desktop
Loaded Profiles: Vojta (Available Profiles: Vojta)
Boot Mode: Normal
==============================================
fixlist content:
*****************
C:\Program Files\McAfee Security Scan
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
C:\Program Files (x86)\Bonjour
C:\ProgramData\DP45977C.lfl
R2 Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [229376 2006-02-28] (Apple Computer, Inc.) [File not signed]
EmptyTemp:
End
*****************
"C:\Program Files\McAfee Security Scan" folder move:
Could not move "C:\Program Files\McAfee Security Scan" => Scheduled to move on reboot.
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat => moved successfully
C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat => moved successfully
C:\Program Files (x86)\Bonjour => moved successfully
C:\ProgramData\DP45977C.lfl => moved successfully
Bonjour Service => Unable to stop service.
HKLM\System\CurrentControlSet\Services\Bonjour Service => key removed successfully
Bonjour Service => service removed successfully
=========== EmptyTemp: ==========
BITS transfer queue => 12007760 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 48733389 B
Java, Flash, Steam htmlcache => 984 B
Windows/system/drivers => 14041213 B
Edge => 7997204 B
Chrome => 0 B
Firefox => 380963883 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 10020848 B
LocalService => 1634 B
NetworkService => 0 B
Vojta => 102775954 B
RecycleBin => 345860 B
EmptyTemp: => 550.2 MB temporary data Removed.
================================
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 22-02-2017 22:15:13)
C:\Program Files\McAfee Security Scan => Is moved successfully
==== End of Fixlog 22:15:13 ====
- Rudy
- Site Admin

- Příspěvky: 119672
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Podezření na malware - FRST 2 posty
Smazáno, log by již měl být OK.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Podezření na malware - FRST 2 posty
Děkuju moc
- Rudy
- Site Admin

- Příspěvky: 119672
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Podezření na malware - FRST 2 posty
Rádo se stalo! 
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Přispějete na provoz fóra?