Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Preventívka

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
ferenc77
Návštěvník
Návštěvník
Příspěvky: 235
Registrován: 28 lis 2012 13:21

Preventívka

#1 Příspěvek od ferenc77 »

Logfile of random's system information tool 1.10 (written by random/random)
Run by PC at 2018-01-30 10:00:45
Microsoft Windows 10 Pro
System drive C: has 76 GB (52%) free of 148 GB
Total RAM: 4091 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:00:51, on 30.1.2018
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.16299.0098)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Reader_sl.exe
C:\Program Files\trend micro\PC.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: McAfee WebAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [iFunBox] C:\Program Files (x86)\i-Funbox DevTeam\iFunBox_x64.exe /tray
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2458961067-288945821-3880192440-1000\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'defaultuser0')
O4 - HKUS\S-1-5-21-2458961067-288945821-3880192440-1000\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'defaultuser0')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra button: McAfee WebAdvisor - {48A61126-9A19-4C50-A214-FF08CB94995C} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O9 - Extra 'Tools' menuitem: McAfee WebAdvisor - {48A61126-9A19-4C50-A214-FF08CB94995C} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: aswbIDSAgent - AVAST Software - C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 10907 bytes

======Listing Processes======









winlogon.exe
c:\windows\system32\svchost.exe -k dcomlaunch -p -s PlugPlay
"fontdrvhost.exe"
"fontdrvhost.exe"
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
c:\windows\system32\svchost.exe -k rpcss -p
c:\windows\system32\svchost.exe -k dcomlaunch -p -s LSM
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s NcbService
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s TimeBrokerSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s lfsvc
c:\windows\system32\svchost.exe -k netsvcs -p -s ProfSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s UserManager
"C:\WINDOWS\system32\nvvsvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session -first
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s EventLog
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s SysMain
c:\windows\system32\svchost.exe -k netsvcs -p -s Themes
c:\windows\system32\svchost.exe -k localservice -p -s EventSystem

c:\windows\system32\svchost.exe -k netsvcs -p -s SENS
c:\windows\system32\svchost.exe -k netsvcs -p -s Schedule
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -p -s FontCache
c:\windows\system32\svchost.exe -k localservice -p -s nsi
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s Dhcp
c:\windows\system32\svchost.exe -k networkservice -p -s NlaSvc
c:\windows\system32\svchost.exe -k localservice -p -s netprofm
c:\windows\system32\svchost.exe -k localservice -p -s SEMgrSvc
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k appmodel -p -s StateRepository
c:\windows\system32\svchost.exe -k networkservice -p -s Dnscache
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s WinHttpAutoProxySvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p
c:\windows\system32\svchost.exe -k netsvcs -p -s ShellHWDetection

C:\WINDOWS\system32\WLANExt.exe 2240499152672
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s lmhosts
c:\windows\system32\svchost.exe -k networkservice -p -s LanmanWorkstation
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
c:\windows\system32\svchost.exe -k networkservice -p -s CryptSvc
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s DPS
c:\windows\system32\svchost.exe -k netsvcs -p -s Winmgmt
"C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s LanmanServer
c:\windows\system32\svchost.exe -k localservice -p -s SstpSvc
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TrkWks
c:\windows\system32\svchost.exe -k netsvcs -p -s WpnService
c:\windows\system32\svchost.exe -k networkservice -p -s TapiSrv
c:\windows\system32\svchost.exe -k netsvcs -p -s iphlpsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s DeviceAssociationService

c:\windows\system32\svchost.exe -k localservice -p -s WdiServiceHost
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s WdiSystemHost
c:\windows\system32\svchost.exe -k netsvcs
c:\windows\system32\svchost.exe -k netsvcs -p -s Browser
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s PcaSvc
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
sihost.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s TokenBroker
C:\WINDOWS\Explorer.EXE

c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s Netman
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TabletInputService
"ctfmon.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe" -userServiceMode
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\WINDOWS\System32\svchost.exe -k NetworkService -p -s DoSvc
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k localservice -p -s LicenseManager
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1803.279.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s StorSvc
"C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe"
AvastUI.exe /nogui
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
c:\windows\system32\svchost.exe -k unistacksvcgroup
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\CCleaner\CCleaner64.exe" /monitor
c:\windows\system32\svchost.exe -k netsvcs -p -s Appinfo
C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Reader_sl.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s gpsvc
C:\Windows\System32\smartscreen.exe -Embedding
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 716 720 728 8192 724
C:\WINDOWS\system32\svchost.exe -k appmodel -p -s tiledatamodelsvc
"C:\Users\PC\Desktop\RSITx64.exe"

=========Mozilla firefox=========

ProfilePath - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\8d5aix54.default

prefs.js - "browser.startup.homepage" - "www.google.sk"

"{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"=C:\Program Files (x86)\McAfee\SiteAdvisor\e10ssaffplg.xpi


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-01-22 206512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee WebAdvisor BHO - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll [2018-01-19 199648]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee WebAdvisor BHO - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll [2018-01-19 167480]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2017-09-29 630168]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-11-14 2397120]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2016-11-14 1767712]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvLaunch.exe [2018-01-20 246120]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2017-12-05 297272]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2018-01-09 10257872]
"iFunBox"=C:\Program Files (x86)\i-Funbox DevTeam\iFunBox_x64.exe [2017-03-18 4873728]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1
"ConsentPromptBehaviorAdmin"=0
"PromptOnSecureDesktop"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-01-30 10:00:45 ----D---- C:\rsit
2018-01-30 10:00:45 ----D---- C:\Program Files\trend micro
2018-01-30 09:53:07 ----D---- C:\ProgramData\SWCUTemp
2018-01-30 09:41:36 ----D---- C:\Users\PC\AppData\Roaming\Mozilla
2018-01-30 09:41:28 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2018-01-30 09:41:13 ----D---- C:\Program Files\Mozilla Firefox
2018-01-27 22:04:57 ----D---- C:\ProgramData\Microsoft OneDrive
2018-01-27 21:57:10 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2018-01-27 21:42:03 ----D---- C:\ProgramData\USOShared
2018-01-27 21:36:35 ----SD---- C:\Users\PC\AppData\Roaming\Microsoft
2018-01-27 21:34:05 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2018-01-27 21:32:35 ----AS---- C:\WINDOWS\bootstat.dat
2018-01-27 21:31:42 ----D---- C:\WINDOWS\Prefetch
2018-01-27 21:30:36 ----D---- C:\WINDOWS\system32\SleepStudy
2018-01-27 21:30:29 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2018-01-27 21:29:20 ----SHD---- C:\Recovery
2018-01-27 21:25:59 ----D---- C:\Windows.old
2018-01-27 21:17:12 ----D---- C:\WINDOWS\system32\Microsoft
2018-01-27 21:17:12 ----D---- C:\WINDOWS\ServiceProfiles
2018-01-27 21:15:01 ----D---- C:\WINDOWS\containers
2018-01-27 21:13:33 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2018-01-27 21:13:32 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2018-01-27 21:13:32 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2018-01-27 21:13:32 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2018-01-27 21:13:32 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2018-01-27 21:13:32 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2018-01-27 21:13:32 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2018-01-27 21:13:32 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2018-01-27 21:13:32 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2018-01-27 21:13:32 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2018-01-27 21:13:32 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2018-01-27 21:13:32 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2018-01-27 21:13:32 ----A---- C:\WINDOWS\system32\wmp.dll
2018-01-27 21:13:32 ----A---- C:\WINDOWS\system32\msvproc.dll
2018-01-27 21:13:31 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2018-01-27 21:13:31 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2018-01-27 21:13:31 ----A---- C:\WINDOWS\system32\mfplat.dll
2018-01-27 21:13:31 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2018-01-27 21:13:31 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2018-01-27 21:13:31 ----A---- C:\WINDOWS\system32\mfcore.dll
2018-01-27 21:13:31 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2018-01-27 21:13:30 ----A---- C:\WINDOWS\system32\mfsvr.dll
2018-01-27 21:13:30 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2018-01-27 21:13:30 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2018-01-27 21:13:30 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2018-01-27 21:13:14 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2018-01-27 21:13:14 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2018-01-27 21:13:14 ----A---- C:\WINDOWS\SYSWOW64\evr.dll
2018-01-27 21:13:14 ----A---- C:\WINDOWS\system32\evr.dll
2018-01-27 21:13:13 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2018-01-27 21:13:13 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2018-01-27 21:13:13 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2018-01-27 21:13:13 ----A---- C:\WINDOWS\SYSWOW64\Chakradiag.dll
2018-01-27 21:13:12 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2018-01-27 21:13:11 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2018-01-27 21:13:10 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2018-01-27 21:13:09 ----A---- C:\WINDOWS\system32\mshtml.dll
2018-01-27 21:13:09 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2018-01-27 21:13:09 ----A---- C:\WINDOWS\system32\jscript9.dll
2018-01-27 21:13:09 ----A---- C:\WINDOWS\system32\jscript.dll
2018-01-27 21:13:09 ----A---- C:\WINDOWS\system32\edgehtml.dll
2018-01-27 21:13:08 ----A---- C:\WINDOWS\system32\ieproxy.dll
2018-01-27 21:13:08 ----A---- C:\WINDOWS\system32\ieframe.dll
2018-01-27 21:13:08 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2018-01-27 21:13:08 ----A---- C:\WINDOWS\system32\Chakra.dll
2018-01-27 21:13:06 ----A---- C:\WINDOWS\system32\Hydrogen.dll
2018-01-27 21:13:06 ----A---- C:\WINDOWS\system32\HolographicExtensions.dll
2018-01-27 21:13:06 ----A---- C:\WINDOWS\system32\DHolographicDisplay.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\wscript.exe
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.Internal.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Speech.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\usoapi.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\usercpl.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\t2embed.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\sspicli.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\sppcext.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\SndVolSSO.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\slcext.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\scrobj.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\mswstr10.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\msvcrt.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\msjint40.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\msexcl40.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\msdtcVSp1res.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\LockAppBroker.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\KeyboardFilterShim.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\itss.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\iprtrmgr.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\edgeIso.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\cscript.exe
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\batmeter.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\apphelp.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\AcSpecfc.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\acppage.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\SYSWOW64\AcGenral.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\system32\HolographicRuntimes.dll
2018-01-27 21:13:05 ----A---- C:\WINDOWS\system32\HologramCompositor.dll
2018-01-27 21:12:48 ----A---- C:\WINDOWS\SYSWOW64\Windows.Services.TargetedContent.dll
2018-01-27 21:12:48 ----A---- C:\WINDOWS\SYSWOW64\DictationManager.dll
2018-01-27 21:12:47 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2018-01-27 21:12:47 ----A---- C:\WINDOWS\SYSWOW64\WwaApi.dll
2018-01-27 21:12:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2018-01-27 21:12:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Input.Inking.dll
2018-01-27 21:12:47 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2018-01-27 21:12:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2018-01-27 21:12:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2018-01-27 21:12:47 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2018-01-27 21:12:47 ----A---- C:\WINDOWS\SYSWOW64\TileDataRepository.dll
2018-01-27 21:12:47 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2018-01-27 21:12:47 ----A---- C:\WINDOWS\SYSWOW64\InstallService.dll
2018-01-27 21:12:47 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2018-01-27 21:12:47 ----A---- C:\WINDOWS\SYSWOW64\cryptngc.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\SYSWOW64\XblAuthTokenBrokerExt.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\SYSWOW64\Windows.Perception.Stub.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\SYSWOW64\SpatializerApo.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\SYSWOW64\smartscreenps.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\SYSWOW64\gamingtcui.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\SYSWOW64\FSClient.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\SYSWOW64\ExecModelClient.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\SYSWOW64\d3d9on12.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\SYSWOW64\ContentDeliveryManager.Utilities.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\SYSWOW64\CloudExperienceHostCommon.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\SYSWOW64\CapabilityAccessManagerClient.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\SYSWOW64\ActivationManager.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\wwansvc.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\wscript.exe
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\wow64win.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\wow64.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\wlansec.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\winresume.exe
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\winload.exe
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\wininet.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\Windows.Mirage.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\Windows.Media.Speech.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\wimserv.exe
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\wimgapi.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\WebRuntimeManager.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\vbscript.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\usercpl.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\urlmon.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\twinui.pcshell.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\twinui.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\TpmTasks.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\t2embed.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\storagewmi.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\StartTileData.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\sspicli.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\SRH.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\sppwinob.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\sppsvc.exe
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\sppcext.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\Spectrum.exe
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\SndVolSSO.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\slcext.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\SIHClient.exe
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\schedsvc.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\shell32.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\SettingsHandlers_SIUF.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\SettingsHandlers_ContentDeliveryManager.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\services.exe
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\SecurityHealthService.exe
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\scrobj.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\ResetEngine.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\reseteng.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\RecoveryDrive.exe
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\provtool.exe
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\provisioningcsp.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\provhandlers.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\provengine.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\pnidui.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\PCPKsp.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\ntdll.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\msvcrt.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\msIso.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\msdtcVSp1res.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\msctf.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\mispace.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\LogonController.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\itss.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\iprtrmgr.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\iertutil.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\hal.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\generaltel.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\gdi32full.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\edgeIso.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\dwmcore.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\drivers\vwifimp.sys
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\drivers\volsnap.sys
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\drivers\luafv.sys
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\drivers\bam.sys
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\DictationManager.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\devinv.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\DeviceUpdateAgent.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\d3d9.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\cscript.exe
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\cryptcatsvc.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\comdlg32.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\CloudExperienceHost.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\batmeter.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\appraiser.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\apphelp.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\aeinv.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\actxprxy.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\AcSpecfc.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\acppage.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\acmigration.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\AcLayers.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\AcGenral.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\system32\aadjcsp.dll
2018-01-27 21:12:46 ----A---- C:\WINDOWS\explorer.exe
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\WWAHost.exe
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\WwaApi.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\wuautoappupdate.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\Windows.Networking.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\win32kfull.sys
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\win32kbase.sys
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\user32.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\TpmCoreProvisioning.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\TileDataRepository.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\smartscreenps.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\smartscreen.exe
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\PushToInstall.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\NgcCtnr.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\msxml6.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\ISM.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\InstallService.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\hascsp.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\FirewallAPI.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\FaceProcessorCore.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\FaceProcessor.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\dxgi.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\drivers\urscx01000.sys
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\drivers\UcmCx.sys
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\dmcertinst.exe
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\DeviceSetupManager.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\d3d9on12.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\d3d11.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\cryptngc.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\bisrv.dll
2018-01-27 21:12:41 ----A---- C:\WINDOWS\system32\BioIso.exe
2018-01-27 21:12:40 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\SYSWOW64\winhttp.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2018-01-27 21:12:40 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\SYSWOW64\updatepolicy.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\SYSWOW64\ucrtbase.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\SYSWOW64\tzres.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\SYSWOW64\TpmCoreProvisioning.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\SYSWOW64\rdrleakdiag.exe
2018-01-27 21:12:40 ----A---- C:\WINDOWS\SYSWOW64\PCPKsp.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\SYSWOW64\FirewallAPI.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\SYSWOW64\dnsapi.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\SYSWOW64\bcrypt.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\SYSWOW64\AppVEntSubsystems32.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\SYSWOW64\AcLayers.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\wuuhosdeployment.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\wuuhext.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\wuaueng.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\wuauclt.exe
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\wuapi.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\winmde.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\winhttp.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\windows.storage.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\Windows.Perception.Stub.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\Windows.CloudStore.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\vac.exe
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\usocore.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\usoapi.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\updatepolicy.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\UpdateAgent.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\umpo.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\ucrtbase.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\tzres.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\SpatializerApo.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\samsrv.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\runexehelper.exe
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\RDXService.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\rdrleakdiag.exe
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\MusNotifyIcon.exe
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\MusNotification.exe
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\msv1_0.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\lsasrv.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\hvix64.exe
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\hvax64.exe
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\gamingtcui.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\FSClient.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\ExecModelClient.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\dusmsvc.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\drivers\wcifs.sys
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\drivers\volmgr.sys
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\drivers\UcmUcsi.sys
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\drivers\storufs.sys
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\drivers\storahci.sys
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\drivers\spaceport.sys
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\drivers\netvsc.sys
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\drivers\hvsocket.sys
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\drivers\BasicRender.sys
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\dnsapi.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\diagtrack.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\ci.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\CapabilityAccessManager.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\browserbroker.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\bcrypt.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\audiosrv.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\AudioSes.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\AudioEng.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\audiodg.exe
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\AppVReporting.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\AppVPublishing.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\AppVOrchestration.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\AppVIntegration.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\AppVEntVirtualization.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\AppVEntSubsystems64.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\AppVEntSubsystemController.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\AppVEntStreamingManager.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\AppVClient.exe
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\AppVCatalog.dll
2018-01-27 21:12:40 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2018-01-27 21:04:39 ----D---- C:\Program Files\Reference Assemblies
2018-01-27 21:04:39 ----D---- C:\Program Files\MSBuild
2018-01-27 21:04:39 ----D---- C:\Program Files (x86)\Reference Assemblies
2018-01-27 21:04:39 ----D---- C:\Program Files (x86)\MSBuild
2018-01-27 21:04:11 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2018-01-27 21:04:11 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2018-01-27 21:04:10 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2018-01-27 21:04:10 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2018-01-27 21:04:09 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2018-01-27 21:04:09 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-01-21 12:26:53 ----DC---- C:\WINDOWS\Panther
2018-01-21 09:36:52 ----D---- C:\Program Files\iPod
2018-01-21 09:35:39 ----AD---- C:\Program Files\iTunes
2018-01-21 09:30:35 ----AD---- C:\Program Files (x86)\Apple Software Update
2018-01-20 13:54:47 ----AD---- C:\Program Files\rempl
2018-01-20 13:45:54 ----A---- C:\WINDOWS\system32\drivers\lpsport.sys
2018-01-20 13:44:42 ----A---- C:\WINDOWS\system32\drivers\aswHdsKe.sys
2018-01-20 13:44:24 ----A---- C:\WINDOWS\system32\aswBoot.exe

======List of files/folders modified in the last 1 month======

2018-01-30 10:00:45 ----RD---- C:\Program Files
2018-01-30 10:00:43 ----D---- C:\WINDOWS\Temp
2018-01-30 09:58:02 ----D---- C:\WINDOWS\INF
2018-01-30 09:58:01 ----D---- C:\WINDOWS\LiveKernelReports
2018-01-30 09:58:01 ----D---- C:\WINDOWS\debug
2018-01-30 09:58:01 ----D---- C:\Windows
2018-01-30 09:57:11 ----AD---- C:\Program Files\CCleaner
2018-01-30 09:57:10 ----D---- C:\WINDOWS\system32\Tasks
2018-01-30 09:55:54 ----D---- C:\WINDOWS\System32
2018-01-30 09:54:04 ----D---- C:\WINDOWS\system32\WDI
2018-01-30 09:53:07 ----HD---- C:\ProgramData
2018-01-30 09:50:59 ----D---- C:\WINDOWS\system32\config
2018-01-30 09:50:29 ----D---- C:\Program Files (x86)\McAfee
2018-01-30 09:48:36 ----D---- C:\WINDOWS\system32\sru
2018-01-30 09:48:26 ----D---- C:\WINDOWS\system32\catroot2
2018-01-30 09:48:16 ----D---- C:\WINDOWS\WinSxS
2018-01-30 09:48:16 ----D---- C:\WINDOWS\SysWOW64
2018-01-30 09:41:28 ----RD---- C:\Program Files (x86)
2018-01-30 09:23:01 ----RD---- C:\WINDOWS\Microsoft.NET
2018-01-30 09:22:33 ----D---- C:\WINDOWS\AppReadiness
2018-01-30 09:18:42 ----D---- C:\Users\PC\AppData\Roaming\vlc
2018-01-30 08:03:43 ----RD---- C:\WINDOWS\assembly
2018-01-30 08:02:19 ----D---- C:\WINDOWS\system32\LogFiles
2018-01-30 08:02:19 ----D---- C:\WINDOWS\Logs
2018-01-30 07:49:36 ----D---- C:\WINDOWS\DeliveryOptimization
2018-01-30 07:03:45 ----D---- C:\WINDOWS\CbsTemp
2018-01-30 07:02:54 ----SHD---- C:\System Volume Information
2018-01-30 07:02:52 ----HD---- C:\Program Files\WindowsApps
2018-01-30 07:02:22 ----D---- C:\WINDOWS\system32\restore
2018-01-28 16:46:18 ----D---- C:\WINDOWS\system32\drivers
2018-01-28 16:03:27 ----D---- C:\WINDOWS\system32\drivers\UMDF
2018-01-28 11:17:16 ----D---- C:\WINDOWS\appcompat
2018-01-27 21:58:54 ----D---- C:\WINDOWS\SoftwareDistribution
2018-01-27 21:58:49 ----D---- C:\WINDOWS\Tasks
2018-01-27 21:57:08 ----D---- C:\WINDOWS\Registration
2018-01-27 21:56:16 ----SD---- C:\ProgramData\Microsoft
2018-01-27 21:56:14 ----D---- C:\WINDOWS\SYSWOW64\wbem
2018-01-27 21:56:14 ----D---- C:\WINDOWS\system32\wbem
2018-01-27 21:52:28 ----D---- C:\WINDOWS\system32\DriverStore
2018-01-27 21:49:16 ----D---- C:\ProgramData\NVIDIA
2018-01-27 21:42:03 ----D---- C:\ProgramData\USOPrivate
2018-01-27 21:41:01 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2018-01-27 21:40:51 ----D---- C:\WINDOWS\system32\CodeIntegrity
2018-01-27 21:36:37 ----RD---- C:\Users
2018-01-27 21:35:35 ----D---- C:\WINDOWS\system32\Sysprep
2018-01-27 21:35:26 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2018-01-27 21:32:32 ----D---- C:\Program Files\NVIDIA Corporation
2018-01-27 21:26:01 ----RSD---- C:\WINDOWS\Fonts
2018-01-27 21:26:01 ----HD---- C:\WINDOWS\system32\WLANProfiles
2018-01-27 21:26:01 ----D---- C:\WINDOWS\system32\zh-HK
2018-01-27 21:26:01 ----D---- C:\WINDOWS\system32\WinBioDatabase
2018-01-27 21:26:01 ----D---- C:\WINDOWS\system32\Tasks_Migrated
2018-01-27 21:26:01 ----D---- C:\WINDOWS\system32\spool
2018-01-27 21:26:01 ----D---- C:\WINDOWS\system32\NDF
2018-01-27 21:26:01 ----D---- C:\WINDOWS\system32\en-US
2018-01-27 21:26:01 ----D---- C:\WINDOWS\system32\drivers\etc
2018-01-27 21:26:00 ----HD---- C:\WINDOWS\Installer
2018-01-27 21:26:00 ----D---- C:\WINDOWS\system32\Recovery
2018-01-27 21:26:00 ----D---- C:\WINDOWS\Help
2018-01-27 21:26:00 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2018-01-27 21:26:00 ----D---- C:\Program Files\Common Files\microsoft shared
2018-01-27 21:26:00 ----D---- C:\Program Files\Common Files
2018-01-27 21:26:00 ----D---- C:\Program Files (x86)\Microsoft.NET
2018-01-27 21:26:00 ----D---- C:\Program Files (x86)\Common Files
2018-01-27 21:26:00 ----AD---- C:\Program Files\UNP
2018-01-27 21:26:00 ----AD---- C:\Program Files\Intel
2018-01-27 21:25:49 ----D---- C:\WINDOWS\Setup
2018-01-27 21:20:29 ----D---- C:\WINDOWS\SYSWOW64\drivers\UMDF
2018-01-27 21:19:30 ----D---- C:\Program Files (x86)\Windows Mail
2018-01-27 21:19:28 ----D---- C:\Program Files\Windows Mail
2018-01-27 21:19:27 ----D---- C:\Program Files\AuthenTec
2018-01-27 21:15:07 ----SD---- C:\WINDOWS\SYSWOW64\F12
2018-01-27 21:15:07 ----D---- C:\WINDOWS\TextInput
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\zu-ZA
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\yo-NG
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\xh-ZA
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\wo-SN
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\WinMetadata
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\vi-VN
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\uz-Latn-UZ
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\ur-PK
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\ug-CN
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\tt-RU
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\tn-ZA
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\tk-TM
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\ti-ET
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\tg-Cyrl-TJ
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\te-IN
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\ta-IN
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\sw-KE
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-RS
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-BA
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\sq-AL
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\si-LK
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\sd-Arab-PK
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\rw-RW
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\quz-PE
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\quc-Latn-GT
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\prs-AF
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\pa-IN
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\pa-Arab-PK
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\or-IN
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\nso-ZA
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\nn-NO
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\ne-NP
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\mt-MT
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\ms-MY
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\mr-IN
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\mn-MN
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\ml-IN
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\mk-MK
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\mi-NZ
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\migration
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\lo-LA
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\lb-LU
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\ky-KG
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\ku-Arab-IQ
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\kok-IN
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\kn-IN
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\km-KH
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\kk-KZ
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\ka-GE
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\is-IS
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\ig-NG
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\id-ID
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\chr-CHER-US
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\hy-AM
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\ha-Latn-NG
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\gu-IN
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\gd-GB
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\ga-IE
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\fil-PH
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\fa-IR
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\Dism
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\cy-GB
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\ca-ES-valencia
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\bs-Latn-BA
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\bn-IN
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\bn-BD
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\be-BY
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\az-Latn-AZ
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\as-IN
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\am-ET
2018-01-27 21:15:07 ----D---- C:\WINDOWS\SYSWOW64\af-ZA
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\zu-ZA
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\yo-NG
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\xh-ZA
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\wo-SN
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\WinMetadata
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\vi-VN
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\uz-Latn-UZ
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\ur-PK
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\ug-CN
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\tt-RU
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\tn-ZA
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\tk-TM
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\ti-ET
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\tg-Cyrl-TJ
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\te-IN
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\ta-IN
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\sw-KE
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\sr-Cyrl-RS
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\sr-Cyrl-BA
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\sq-AL
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\sk-SK
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\si-LK
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\sd-Arab-PK
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\rw-RW
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\quz-PE
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\quc-Latn-GT
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\prs-AF
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\pa-IN
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\pa-Arab-PK
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\or-IN
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\oobe
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\nso-ZA
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\nn-NO
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\ne-NP
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\mt-MT
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\ms-MY
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\mr-IN
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\mn-MN
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\ml-IN
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\mk-MK
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\mi-NZ
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\migration
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\lo-LA
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\lb-LU
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\ky-KG
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\ku-Arab-IQ
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\kok-IN
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\kn-IN
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\km-KH
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\kk-KZ
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\ka-GE
2018-01-27 21:15:05 ----D---- C:\WINDOWS\system32\is-IS
2018-01-27 21:15:04 ----SD---- C:\WINDOWS\system32\F12
2018-01-27 21:15:04 ----D---- C:\WINDOWS\system32\ig-NG
2018-01-27 21:15:04 ----D---- C:\WINDOWS\system32\id-ID
2018-01-27 21:15:04 ----D---- C:\WINDOWS\system32\chr-CHER-US
2018-01-27 21:15:04 ----D---- C:\WINDOWS\system32\hy-AM
2018-01-27 21:15:04 ----D---- C:\WINDOWS\system32\ha-Latn-NG
2018-01-27 21:15:04 ----D---- C:\WINDOWS\system32\gu-IN
2018-01-27 21:15:04 ----D---- C:\WINDOWS\system32\gd-GB
2018-01-27 21:15:04 ----D---- C:\WINDOWS\system32\ga-IE
2018-01-27 21:15:04 ----D---- C:\WINDOWS\system32\fil-PH
2018-01-27 21:15:04 ----D---- C:\WINDOWS\system32\fa-IR
2018-01-27 21:15:04 ----D---- C:\WINDOWS\system32\Dism
2018-01-27 21:15:04 ----D---- C:\WINDOWS\system32\cy-GB
2018-01-27 21:15:04 ----D---- C:\WINDOWS\system32\ca-ES-valencia
2018-01-27 21:15:04 ----D---- C:\WINDOWS\system32\bs-Latn-BA
2018-01-27 21:15:04 ----D---- C:\WINDOWS\system32\Boot
2018-01-27 21:15:04 ----D---- C:\WINDOWS\system32\bn-IN
2018-01-27 21:15:04 ----D---- C:\WINDOWS\system32\bn-BD
2018-01-27 21:15:04 ----D---- C:\WINDOWS\system32\be-BY
2018-01-27 21:15:04 ----D---- C:\WINDOWS\system32\az-Latn-AZ
2018-01-27 21:15:04 ----D---- C:\WINDOWS\system32\as-IN
2018-01-27 21:15:04 ----D---- C:\WINDOWS\system32\appraiser
2018-01-27 21:15:04 ----D---- C:\WINDOWS\system32\am-ET
2018-01-27 21:15:04 ----D---- C:\WINDOWS\system32\af-ZA
2018-01-27 21:15:02 ----D---- C:\WINDOWS\ShellExperiences
2018-01-27 21:15:02 ----D---- C:\WINDOWS\Provisioning
2018-01-27 21:15:02 ----D---- C:\WINDOWS\apppatch
2018-01-27 21:15:02 ----D---- C:\Program Files\Windows Defender Advanced Threat Protection
2018-01-27 21:15:02 ----D---- C:\Program Files\Windows Defender
2018-01-27 21:15:02 ----D---- C:\Program Files\internet explorer
2018-01-27 21:15:02 ----D---- C:\Program Files (x86)\Internet Explorer
2018-01-27 21:15:01 ----D---- C:\PerfLogs
2018-01-27 21:05:06 ----D---- C:\WINDOWS\system32\drivers\en-US
2018-01-27 21:04:40 ----D---- C:\WINDOWS\SYSWOW64\en-US
2018-01-27 20:22:41 ----RASH---- C:\BOOTSECT.BAK
2018-01-27 20:22:32 ----SHD---- C:\Boot
2018-01-27 16:18:20 ----SHD---- C:\Config.Msi
2018-01-22 17:16:59 ----AD---- C:\Program Files (x86)\Microsoft Office
2018-01-21 09:22:52 ----D---- C:\WINDOWS\system32\MRT
2018-01-21 09:18:07 ----AC---- C:\WINDOWS\system32\MRT-KB890830.exe
2018-01-21 09:17:47 ----AC---- C:\WINDOWS\system32\MRT.exe
2018-01-20 14:42:59 ----SD---- C:\WINDOWS\UpdateAssistantV2

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswbidsh;aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [2018-01-20 199448]
R0 aswblog;aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [2018-01-20 343768]
R0 aswbuniv;aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [2018-01-20 57696]
R0 aswRvrt;aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [2018-01-20 84384]
R0 aswVmm;aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [2018-01-20 358672]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2017-09-29 56728]
R0 MsSecFlt;@%SystemRoot%\System32\Drivers\mssecflt.sys,-1001; C:\WINDOWS\system32\drivers\mssecflt.sys [2017-09-30 293272]
R1 aswArPot;aswArPot; C:\WINDOWS\system32\drivers\aswArPot.sys [2018-01-20 185096]
R1 aswbidsdriver;aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [2018-01-20 321512]
R1 aswHdsKe;aswHdsKe; C:\WINDOWS\system32\drivers\aswHdsKe.sys [2018-01-20 149344]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2017-09-09 41832]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2018-01-20 110336]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2018-01-20 1025176]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2018-01-20 457896]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2018-01-27 59800]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2017-09-29 55808]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2017-09-29 8192]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2018-01-20 146648]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2018-01-20 204456]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2017-09-29 384000]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2017-09-29 43520]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2017-09-29 79872]
R3 AgereSoftModem;@mdmags64.inf,%FullProductName%;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\agrsm64.sys [2017-09-29 1146880]
R3 ATSwpWDF;@oem4.inf,%ATSwpWDF.SvcDesc%;AuthenTec TruePrint WBF Driver; C:\WINDOWS\system32\DRIVERS\ATSwpWDF.sys [2012-10-18 1111856]
R3 b57nd60a;@netb57va.inf,%SvcDispName%;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\WINDOWS\System32\drivers\b57nd60a.sys [2017-09-29 452608]
R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2017-09-29 60312]
R3 mfesapsn;McAfee Process Start Notification Service; \??\C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [2017-02-14 111608]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\WINDOWS\System32\drivers\NETwNs64.sys [2017-09-29 8604672]
R3 NVHDA;@oem10.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2016-11-14 197408]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2016-11-14 12905016]
R3 nvvad_WaveExtensible;@oem9.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2016-11-14 56384]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys [2017-09-29 37784]
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2017-09-29 357272]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2017-09-29 123800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2017-09-29 103320]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2017-09-29 63520]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2017-09-29 58776]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2017-09-29 61848]
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2017-09-29 39832]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2017-09-29 118168]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2018-01-27 45464]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2017-09-29 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2017-09-29 18432]
S3 AppvStrm;@%systemroot%\system32\drivers\AppvStrm.sys,-101; C:\WINDOWS\system32\drivers\AppvStrm.sys [2017-09-30 126872]
S3 AppvVemgr;@%systemroot%\system32\drivers\AppvVemgr.sys,-101; C:\WINDOWS\system32\drivers\AppvVemgr.sys [2017-09-30 158616]
S3 AppvVfs;@%systemroot%\system32\drivers\AppvVfs.sys,-101; C:\WINDOWS\system32\drivers\AppvVfs.sys [2017-09-30 143768]
S3 aswHwid;aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [2018-01-20 46976]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2017-09-29 39424]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2017-09-29 122368]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2017-09-29 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2017-09-29 50584]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2017-09-29 73112]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2017-09-29 27136]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2017-09-29 1723288]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2017-09-29 36864]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2017-09-29 91648]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2017-09-29 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2017-09-29 88576]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2017-09-29 171520]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2017-09-29 174592]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2017-09-29 526232]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2017-09-29 39424]
S3 invdimm;@invdimm.inf,%invdimm.SvcDesc%;Microsoft iNVDIMM device driver; C:\WINDOWS\System32\drivers\invdimm.sys [2017-09-29 38912]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2017-09-29 26112]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2017-09-29 119808]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2017-09-29 505240]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2017-09-29 55840]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2017-09-29 842648]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2017-09-29 108952]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2017-09-29 132608]
S3 nvdimmn;@nvdimmn.inf,%nvdimmn.SvcDesc%;Microsoft NVDIMM-N device driver; C:\WINDOWS\System32\drivers\nvdimmn.sys [2017-09-29 88576]
S3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-11-14 27584]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2017-09-29 100352]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2017-09-29 16896]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2017-09-29 936856]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2017-09-29 103936]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2017-09-29 33176]
S3 SpatialGraphFilter;Holographic Spatial Graph Filter; C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys [2017-09-30 56216]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-09-27 83984]
R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2017-11-27 83768]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2018-01-20 301168]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2015-08-12 462096]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
R2 CDPUserSvc_46835;Connected Devices Platform User Service_46835; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
R2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2017-04-10 640928]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-11-14 1163712]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [2018-01-19 604312]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-11-14 1879488]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2016-11-14 932728]
R2 OneSyncSvc_46835;Sync Host_46835; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2017-04-10 157600]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2018-01-27 519152]
R3 aswbIDSAgent;aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [2018-01-20 7538536]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
R3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S2 ClickToRunSvc;Služba Microsoft Office Klikni a spusti; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2018-01-15 7780528]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-07-23 153168]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-11-14 2521024]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 AssignedAccessManagerSvc;@%SystemRoot%\system32\assignedaccessmanagersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 DevicesFlowUserSvc_46835;DevicesFlow_46835; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2017-09-29 85504]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2018-01-27 43648]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-07-23 153168]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2017-12-05 672568]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 MessagingService_46835;MessagingService_46835; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2018-01-29 194512]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2017-04-10 268704]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2018-01-15 208552]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 PimIndexMaintenanceSvc_46835;Kontaktné údaje_46835; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 PrintWorkflowUserSvc_46835;PrintWorkflow_46835; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]
S3 Sense;@%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2018-01-27 4329952]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2017-09-29 1288704]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 SharedRealitySvc;@%SystemRoot%\system32\SharedRealitySvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2017-09-29 48688]
S3 spectrum;@%systemroot%\system32\spectrum.exe,-101; C:\WINDOWS\system32\spectrum.exe [2018-01-27 956416]
S4 AppVClient;@%systemroot%\system32\AppVClient.exe,-102; C:\WINDOWS\system32\AppVClient.exe [2018-01-27 819096]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-09-29 48688]

-----------------EOF-----------------

Conder
VIP
VIP
Příspěvky: 4399
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: Preventívka

#2 Příspěvek od Conder »

Ahoj :)

:arrow: Stiahni AdwCleaner: https://toolslib.net/downloads/finish/1/
  • Uloz na plochu a ukonci vsetky programy
  • Spusti AdwCleaner ako spravca
  • Odsuhlas licencne podmienky
  • Klikni na Scan (Skenovanie) a pockaj na dokoncenie
  • Klikni na Clean (Cistenie) a potvrd kliknutim na OK
  • AdwCleaner si vyziada restart PC, potvrd kliknutim na Restart Now (Restartovat teraz)
  • Po dokonceni a restartovani PC vyskoci log, jeho obsah sem skopiruj
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

ferenc77
Návštěvník
Návštěvník
Příspěvky: 235
Registrován: 28 lis 2012 13:21

Re: Preventívka

#3 Příspěvek od ferenc77 »

# AdwCleaner 7.0.7.0 - Logfile created on Wed Feb 07 13:54:53 2018
# Updated on 2018/18/01 by Malwarebytes
# Running on Windows 10 Pro (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

No malicious folders deleted.

***** [ Files ] *****

No malicious files deleted.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks deleted.

***** [ Registry ] *****

Deleted: [Key] - HKU\S-1-5-21-2458961067-288945821-3880192440-1001\Software\csastats
Deleted: [Key] - HKCU\Software\csastats
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WarThunder
Deleted: [Key] - HKU\S-1-5-21-2458961067-288945821-3880192440-1001\Software\PRODUCTSETUP
Deleted: [Key] - HKCU\Software\PRODUCTSETUP


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

Plugin deleted: ConvertPDFsNow -
Plugin deleted: Search Extension by Ask -


*************************

::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0



*************************

C:/AdwCleaner/AdwCleaner[S0].txt - [1572 B] - [2018/2/7 13:54:14]


########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########

# AdwCleaner 7.0.7.0 - Logfile created on Wed Feb 07 13:54:14 2018
# Updated on 2018/18/01 by Malwarebytes
# Database: 02-06-2018.1
# Running on Windows 10 Pro (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Optional.InstallCore, [Key] - HKU\S-1-5-21-2458961067-288945821-3880192440-1001\Software\csastats
PUP.Optional.InstallCore, [Key] - HKCU\Software\csastats
PUP.Optional.EoRezo, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WarThunder
PUP.Optional.ProductSetup.A, [Key] - HKU\S-1-5-21-2458961067-288945821-3880192440-1001\Software\PRODUCTSETUP
PUP.Optional.ProductSetup.A, [Key] - HKCU\Software\PRODUCTSETUP


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

PUP.Optional.MindSpark, Plugin found: ConvertPDFsNow -
PUP.Optional.MindSpark, Plugin found: Search Extension by Ask -

/!\ Please Reset the Chrome Synchronization before cleaning the Chrome Preferences: https://support.google.com/chrome/answer/3097271


*************************



########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########

Conder
VIP
VIP
Příspěvky: 4399
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: Preventívka

#4 Příspěvek od Conder »

:arrow: Poprosim o logy z FRST podla tohto navodu (vloz sem obidva logy): https://forum.viry.cz/viewtopic.php?f=13&t=152707

:arrow: V pripade, ze sa FRSTLauncher nebude dat stiahnut alebo spustit, pouzi iba samotny FRST.
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

ferenc77
Návštěvník
Návštěvník
Příspěvky: 235
Registrován: 28 lis 2012 13:21

Re: Preventívka

#5 Příspěvek od ferenc77 »

Nejde mi stiahnuť ten program, ako keby stránka nefungovala.

Conder
VIP
VIP
Příspěvky: 4399
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: Preventívka

#6 Příspěvek od Conder »

Odkaz na bleepingcomputer.com funguje: https://www.bleepingcomputer.com/downlo ... scan-tool/
Ak ti nejde iba FRSTLauncher, tak ho vynechaj a pouzi iba samotny FRST.
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

ferenc77
Návštěvník
Návštěvník
Příspěvky: 235
Registrován: 28 lis 2012 13:21

Re: Preventívka

#7 Příspěvek od ferenc77 »

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12.02.2018
Ran by PC (administrator) on DESKTOP-1U0EKNK (15-02-2018 18:02:51)
Running from C:\Users\PC\Desktop
Loaded Profiles: PC (Available Profiles: defaultuser0 & PC)
Platform: Windows 10 Pro Version 1709 16299.125 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1803.279.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Microsoft Corporation) C:\Windows\System32\LicensingUI.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\LicensingUI.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [246120 2018-01-20] (AVAST Software)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [297272 2017-12-05] (Apple Inc.)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-2458961067-288945821-3880192440-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [10257872 2018-01-09] (Piriform Ltd)
HKU\S-1-5-21-2458961067-288945821-3880192440-1001\...\Run: [iFunBox] => C:\Program Files (x86)\i-Funbox DevTeam\iFunBox_x64.exe [4873728 2017-03-18] (i-Funbox.com)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.16.1
Tcpip\..\Interfaces\{05b5a3f4-0f0f-47e1-b0cb-29750f3233e0}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{e8216710-f4d4-4110-9e69-4715cb3eba9a}: [DhcpNameServer] 192.168.16.1

Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-2458961067-288945821-3880192440-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2018-02-13] (Microsoft Corporation)
BHO: McAfee WebAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2018-01-19] (McAfee, Inc.)
BHO-x32: McAfee WebAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2018-01-19] (McAfee, Inc.)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-02-03] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-02-03] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-02-03] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2018-02-03] (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2018-01-19] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2018-01-19] (McAfee, Inc.)

FireFox:
========
FF DefaultProfile: 8d5aix54.default
FF ProfilePath: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\8d5aix54.default [2018-02-15]
FF Homepage: Mozilla\Firefox\Profiles\8d5aix54.default -> www.google.sk
FF Extension: (Avast SafePrice) - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\8d5aix54.default\Extensions\sp@avast.com.xpi [2018-02-03]
FF Extension: (Avast Online Security) - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\8d5aix54.default\Extensions\wrc@avast.com.xpi [2017-11-17]
FF Extension: (Adblock Plus) - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\8d5aix54.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2018-01-30]
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\e10ssaffplg.xpi
FF Extension: (No Name) - C:\Program Files (x86)\McAfee\SiteAdvisor\e10ssaffplg.xpi [2017-12-07]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\e10ssaffplg.xpi
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-01-22] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-13] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-13] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-02-11] (Adobe Systems Inc.)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.sk/
CHR Profile: C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default [2018-02-14]
CHR Extension: (Prezentácie) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-14]
CHR Extension: (Dokumenty) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-14]
CHR Extension: (Disk Google) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-07-23]
CHR Extension: (YouTube) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-23]
CHR Extension: (Avast SafePrice) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2018-01-20]
CHR Extension: (Tabuľky) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-14]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2017-11-25]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-07-23]
CHR Extension: (AdBlock) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-02-04]
CHR Extension: (Avast Online Security) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-10-14]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-09-01]
CHR Extension: (Gmail) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-07-23]
CHR Extension: (Chrome Media Router) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-02-08]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-11-27] (Apple Inc.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7538536 2018-01-20] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [301168 2018-01-20] (AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [7968432 2018-01-31] (Microsoft Corporation)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [604312 2018-01-19] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268704 2017-04-10] ()
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4329952 2018-01-27] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [355304 2017-09-29] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105944 2017-09-29] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3750304 2017-04-10] (Intel® Corporation)
R2 NvContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000
S3 NvContainerNetworkService; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [185096 2018-01-20] (AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdrivera.sys [321512 2018-01-20] (AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsha.sys [199448 2018-01-20] (AVAST Software)
R0 aswblog; C:\WINDOWS\System32\drivers\aswbloga.sys [343768 2018-01-20] (AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniva.sys [57696 2018-01-20] (AVAST Software)
R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [149344 2018-01-20] (AVAST Software)
S3 aswHwid; C:\WINDOWS\System32\drivers\aswHwid.sys [46976 2018-01-20] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [41832 2017-09-09] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [146648 2018-01-20] (AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [110336 2018-01-20] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [84384 2018-01-20] (AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1025176 2018-01-20] (AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [457896 2018-01-20] (AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [204456 2018-01-20] (AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [358672 2018-01-20] (AVAST Software)
R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [111608 2017-02-14] (McAfee, Inc.)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-08-18] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48064 2017-08-18] (NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-08-18] (NVIDIA Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44608 2017-09-29] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [309144 2017-09-29] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [119192 2017-09-29] (Microsoft Corporation)
S3 winbondcir; C:\WINDOWS\system32\DRIVERS\winbondcir.sys [46592 2007-03-28] (Winbond Electronics Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-02-15 18:02 - 2018-02-15 18:04 - 000015583 _____ C:\Users\PC\Desktop\FRST.txt
2018-02-15 18:02 - 2018-02-15 18:02 - 000000000 ____D C:\FRST
2018-02-15 18:01 - 2018-02-15 18:01 - 002405376 _____ (Farbar) C:\Users\PC\Desktop\FRST64.exe
2018-02-12 20:38 - 2018-02-12 20:45 - 000000000 ____D C:\Users\PC\Desktop\Plexis Kašpar v nesnázích
2018-02-11 12:21 - 2018-02-11 12:55 - 978104572 _____ C:\Users\PC\Desktop\WATAHA S01 E 06_CZ.1080i.HDTV.mkv
2018-02-11 12:21 - 2018-02-11 12:55 - 1000713998 _____ C:\Users\PC\Desktop\WATAHA S01 E 05_CZ.1080i.HDTV.mkv
2018-02-07 15:13 - 2018-02-07 15:13 - 000004000 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-02-07 15:13 - 2018-02-07 15:13 - 000003994 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-02-07 15:13 - 2018-02-07 15:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2018-02-07 15:13 - 2017-08-18 05:37 - 001923008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2018-02-07 15:13 - 2017-08-18 05:37 - 001755072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2018-02-07 15:13 - 2017-08-18 05:37 - 001505728 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2018-02-07 15:13 - 2017-08-18 05:37 - 001317312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2018-02-07 15:13 - 2017-08-18 05:37 - 000121280 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
2018-02-07 15:12 - 2018-02-07 15:12 - 000004308 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-02-07 15:12 - 2018-02-07 15:12 - 000003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-02-07 15:12 - 2018-02-07 15:12 - 000003866 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-02-07 15:12 - 2018-02-07 15:12 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-02-07 15:12 - 2018-02-07 15:12 - 000003696 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-02-07 15:12 - 2018-02-07 15:12 - 000003654 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-02-07 15:12 - 2017-08-17 19:11 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2018-02-07 15:12 - 2017-08-17 17:26 - 000001951 _____ C:\WINDOWS\NvTelemetryContainerRecovery.bat
2018-02-07 15:11 - 2018-02-07 15:11 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2018-02-07 15:11 - 2017-08-18 05:37 - 000057792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys
2018-02-07 15:11 - 2017-08-18 05:37 - 000048064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2018-02-07 14:58 - 2018-02-07 14:58 - 000000000 ____D C:\ProgramData\SWCUTemp
2018-02-07 14:51 - 2018-02-07 14:54 - 000000000 ____D C:\AdwCleaner
2018-01-30 10:00 - 2018-01-30 10:00 - 000000000 ____D C:\rsit
2018-01-30 10:00 - 2018-01-30 10:00 - 000000000 ____D C:\Program Files\trend micro
2018-01-30 09:57 - 2018-01-30 09:57 - 000003938 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
2018-01-30 09:52 - 2018-01-30 09:52 - 000001332 _____ C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\McAfee WebAdvisor.lnk
2018-01-30 09:41 - 2018-02-15 17:54 - 000000000 ____D C:\Users\PC\AppData\LocalLow\Mozilla
2018-01-30 09:41 - 2018-02-11 09:35 - 000001009 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-01-30 09:41 - 2018-02-11 09:34 - 000000000 ____D C:\Program Files\Mozilla Firefox
2018-01-30 09:41 - 2018-02-11 09:34 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-01-30 09:41 - 2018-01-30 09:42 - 000000000 ____D C:\Users\PC\AppData\Local\Mozilla
2018-01-30 09:41 - 2018-01-30 09:41 - 000000997 _____ C:\Users\Public\Desktop\Firefox.lnk
2018-01-30 09:41 - 2018-01-30 09:41 - 000000000 ____D C:\Users\PC\AppData\Roaming\Mozilla
2018-01-27 22:04 - 2018-01-27 22:04 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2018-01-27 22:03 - 2018-01-27 22:03 - 000000000 ___HD C:\Users\PC\MicrosoftEdgeBackups
2018-01-27 22:01 - 2018-01-27 22:01 - 000000020 ___SH C:\Users\PC\ntuser.ini
2018-01-27 22:01 - 2018-01-27 22:01 - 000000000 ___RD C:\Users\PC\3D Objects
2018-01-27 21:58 - 2018-02-15 18:01 - 000004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2018-01-27 21:58 - 2018-02-10 21:40 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-01-27 21:58 - 2018-02-03 09:05 - 000003370 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2458961067-288945821-3880192440-1001
2018-01-27 21:58 - 2018-01-27 22:00 - 000002542 _____ C:\WINDOWS\System32\Tasks\AutoPico Daily Restart
2018-01-27 21:58 - 2018-01-27 21:59 - 000003382 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2018-01-27 21:58 - 2018-01-27 21:59 - 000002218 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2018-01-27 21:58 - 2018-01-27 21:58 - 000003404 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1500626816
2018-01-27 21:58 - 2018-01-27 21:58 - 000003158 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2018-01-27 21:58 - 2018-01-27 21:58 - 000003148 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2018-01-27 21:58 - 2018-01-27 21:58 - 000000000 ____D C:\WINDOWS\System32\Tasks\Avast Software
2018-01-27 21:58 - 2018-01-27 21:58 - 000000000 ____D C:\WINDOWS\System32\Tasks\Apple
2018-01-27 21:57 - 2018-02-11 13:06 - 001480624 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-01-27 21:57 - 2018-01-27 21:58 - 000011433 _____ C:\WINDOWS\diagwrn.xml
2018-01-27 21:57 - 2018-01-27 21:58 - 000011433 _____ C:\WINDOWS\diagerr.xml
2018-01-27 21:42 - 2018-01-27 21:42 - 000000000 ____D C:\ProgramData\USOShared
2018-01-27 21:40 - 2018-01-27 21:40 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2018-01-27 21:39 - 2018-01-27 21:39 - 000000000 ____D C:\Users\defaultuser0\AppData\Local\Packages
2018-01-27 21:37 - 2018-02-04 11:18 - 000000000 ____D C:\Users\PC\AppData\Local\Packages
2018-01-27 21:36 - 2018-02-04 23:16 - 000000000 ____D C:\Users\PC
2018-01-27 21:36 - 2018-01-27 21:55 - 000000000 ____D C:\Users\defaultuser0
2018-01-27 21:34 - 2017-09-29 14:41 - 002241024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2018-01-27 21:30 - 2018-02-15 17:52 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-01-27 21:30 - 2018-01-30 10:06 - 000389304 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-01-27 21:25 - 2018-02-08 10:56 - 000000000 ____D C:\Windows.old
2018-01-27 21:19 - 2018-01-27 21:26 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2018-01-27 21:17 - 2018-01-27 21:19 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2018-01-27 21:17 - 2018-01-27 21:17 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2018-01-27 21:15 - 2018-01-27 21:15 - 000000000 ____D C:\WINDOWS\containers
2018-01-27 21:13 - 2018-01-27 21:13 - 025245696 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 023652864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 021754368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 020286120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 018916352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 017084416 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 013655552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 012829696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 012687360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 011923456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 008097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 006791472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 006478528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 006466048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 006037504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 006015200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 004814848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 004740608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 004648528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 004487968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 004385280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 004249600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 003678208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 003484840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2018-01-27 21:13 - 2018-01-27 21:13 - 002869760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 002717392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 002491112 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 002467840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 002465848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 002393600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 002269080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 002192112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 001970520 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 001776272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 001663488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\batmeter.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 001615720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 001559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 001558856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 001522176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 001509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 001507736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 001474680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 001470976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 001454568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 001432816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 001377080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 001280000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 001259344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 001230848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 001148216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 001057824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 001054280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 001015008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000841728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000815616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000812032 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000769096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcrt.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000754688 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000676352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000666112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000661664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000649304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2018-01-27 21:13 - 2018-01-27 21:13 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000614912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtrmgr.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000481792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2018-01-27 21:13 - 2018-01-27 21:13 - 000369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicRuntimes.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2018-01-27 21:13 - 2018-01-27 21:13 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrobj.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscript.exe
2018-01-27 21:13 - 2018-01-27 21:13 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscript.exe
2018-01-27 21:13 - 2018-01-27 21:13 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000123512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000101376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscript.ocx
2018-01-27 21:13 - 2018-01-27 21:13 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\acppage.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000047000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KeyboardFilterShim.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcVSp1res.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 021352136 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 017159680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 013703168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 008590744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 007831248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 007676296 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 007545344 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 007385088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 006092664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 005905752 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 005615968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 004772352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 004592640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 004504456 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 003903784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 003669504 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 003578368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 003478016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 003331520 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 003211776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 003186688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 003163648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 003121664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 003010720 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 002972672 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 002905600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 002890240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 002864640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 002862080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 002783744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 002709200 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 002666496 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 002633216 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 002596352 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 002573208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 002510336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 002446744 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 002412168 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 002395032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 002339296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 002220952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 002208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 002117632 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 002105856 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 001990160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001980928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001954048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001925296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001822208 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001806336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001778584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001739264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001694224 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001670656 _____ (Microsoft Corporation) C:\WINDOWS\system32\batmeter.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001666048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001664000 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001642520 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001636376 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001634288 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001628056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001585376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001570816 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 001554216 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001528904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001498112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001495040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001490840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001490328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001488792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001487872 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001463856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001426152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001425408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001420696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001413760 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2018-01-27 21:12 - 2018-01-27 21:12 - 001353728 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001323840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001321472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001313792 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001289216 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001277848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 001261864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001246432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001208184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 001200536 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 001170000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001167360 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001160704 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001145104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001124760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001090440 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2018-01-27 21:12 - 2018-01-27 21:12 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001054720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001053592 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 001015296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 001012120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 001003104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000979352 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000975872 _____ C:\WINDOWS\system32\FaceProcessor.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000925184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000924136 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000902416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000899584 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000891800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000880640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000840440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Perception.Stub.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000831384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9on12.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000823808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000819096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000813976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000791960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000779440 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000768512 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000749976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000747416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000746904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Services.TargetedContent.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000744856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000739696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000726016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000721592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000713624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000710912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000705944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000703568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000703536 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000677272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000669592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000660480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000654848 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000654048 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000645528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000630752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcrt.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000615768 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000612760 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000610712 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000603920 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000597160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000594944 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000592280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000591872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000590944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000588288 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000571288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000559616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtrmgr.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000559512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000557056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9on12.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000556544 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000555416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2018-01-27 21:12 - 2018-01-27 21:12 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000536064 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000534528 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000525208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000519152 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000506256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000496640 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000495000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000479912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000478208 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000474112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DictationManager.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000471960 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000464408 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000442880 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000437144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2018-01-27 21:12 - 2018-01-27 21:12 - 000436120 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000428952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000424960 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000418712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000404888 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000401304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000398744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000394752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000374032 _____ (Microsoft Corporation) C:\WINDOWS\system32\vac.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000373656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000372224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000363008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000362904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000362176 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioIso.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatializerApo.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000354304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwaApi.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000354200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000353848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000353688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000351232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DictationManager.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000334848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000319352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000293888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000285080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatializerApo.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000269696 _____ C:\WINDOWS\system32\FaceProcessorCore.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000264040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\PushToInstall.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000246272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000246168 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000242176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExecModelClient.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000238080 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000230296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000202240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000198888 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000187288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000184984 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcui.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_ContentDeliveryManager.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SIUF.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000166296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscript.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000160256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000149400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000147864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000137544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000136704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gamingtcui.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000129432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptcatsvc.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000097792 _____ C:\WINDOWS\system32\runexehelper.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000097144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\hascsp.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceUpdateAgent.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000082840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\acppage.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CapabilityAccessManagerClient.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000060824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\urscx01000.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000059800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bam.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadjcsp.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcSpecfc.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000048112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdrleakdiag.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000045464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdrleakdiag.exe
2018-01-27 21:12 - 2018-01-27 21:12 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2018-01-27 21:12 - 2018-01-27 21:12 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcVSp1res.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2018-01-27 21:12 - 2018-01-27 21:12 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2018-01-27 21:04 - 2018-01-27 21:04 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2018-01-27 21:04 - 2018-01-27 21:04 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2018-01-27 21:04 - 2018-01-27 21:04 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2018-01-27 21:04 - 2018-01-27 21:04 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-01-27 21:04 - 2018-01-27 21:04 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2018-01-27 21:04 - 2018-01-27 21:04 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2018-01-27 21:04 - 2018-01-27 21:04 - 000000000 ____D C:\Program Files\Reference Assemblies
2018-01-27 21:04 - 2018-01-27 21:04 - 000000000 ____D C:\Program Files\MSBuild
2018-01-27 21:04 - 2018-01-27 21:04 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2018-01-27 21:04 - 2018-01-27 21:04 - 000000000 ____D C:\Program Files (x86)\MSBuild
2018-01-21 16:50 - 2018-01-21 16:50 - 000000000 ____D C:\Users\PC\AppData\Local\AVAST Software
2018-01-21 12:26 - 2018-01-30 09:58 - 000000000 ___DC C:\WINDOWS\Panther
2018-01-21 09:36 - 2018-01-27 21:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2018-01-21 09:36 - 2018-01-21 09:36 - 000001820 _____ C:\Users\Public\Desktop\iTunes.lnk
2018-01-21 09:36 - 2018-01-21 09:36 - 000000000 ____D C:\Program Files\iPod
2018-01-21 09:35 - 2018-01-21 09:36 - 000000000 ____D C:\Program Files\iTunes
2018-01-21 09:30 - 2018-01-21 09:30 - 000000000 ____D C:\Program Files (x86)\Apple Software Update
2018-01-21 09:28 - 2018-01-21 09:28 - 000000000 ____D C:\Users\PC\AppData\Local\DBG
2018-01-20 13:54 - 2018-01-27 16:18 - 000000000 ____D C:\Program Files\rempl
2018-01-20 13:45 - 2018-01-20 13:45 - 000061304 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys
2018-01-20 13:44 - 2018-01-20 13:43 - 000365680 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2018-01-20 13:44 - 2018-01-20 13:42 - 000149344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHdsKe.sys

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-02-15 18:00 - 2017-07-21 09:57 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-02-15 17:57 - 2017-09-22 14:23 - 000000000 ____D C:\ProgramData\NVIDIA
2018-02-15 17:56 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-02-14 15:08 - 2017-07-23 17:12 - 000002317 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-02-14 15:08 - 2017-07-23 17:12 - 000002276 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-02-13 20:35 - 2017-07-23 18:00 - 000000000 ____D C:\WINDOWS\system32\MRT
2018-02-13 20:31 - 2017-10-14 11:41 - 130067560 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2018-02-13 20:31 - 2017-07-23 18:00 - 130067560 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2018-02-13 20:30 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
2018-02-13 16:41 - 2017-09-29 14:46 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-02-13 16:39 - 2017-07-21 09:35 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2018-02-12 20:09 - 2017-07-21 09:54 - 000000000 ____D C:\Users\PC\AppData\Roaming\vlc
2018-02-11 13:06 - 2017-07-26 17:30 - 000411110 _____ C:\WINDOWS\system32\perfh01B.dat
2018-02-11 13:06 - 2017-07-26 17:30 - 000120532 _____ C:\WINDOWS\system32\perfc01B.dat
2018-02-11 13:03 - 2017-09-29 14:44 - 000000000 ____D C:\WINDOWS\INF
2018-02-11 13:03 - 2017-07-26 07:30 - 000000000 ____D C:\Users\PC\AppData\Local\CrashDumps
2018-02-10 15:47 - 2017-09-29 14:46 - 000000000 ___HD C:\Program Files\WindowsApps
2018-02-08 10:36 - 2017-07-21 08:35 - 000000000 ____D C:\Users\PC\AppData\Local\NVIDIA Corporation
2018-02-08 10:33 - 2017-07-21 08:32 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2018-02-07 15:28 - 2017-07-21 08:34 - 000000000 ____D C:\Users\PC\AppData\Local\NVIDIA
2018-02-07 15:14 - 2017-09-22 14:22 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2018-02-07 15:13 - 2017-09-22 14:22 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2018-02-07 15:12 - 2017-07-21 08:30 - 000000000 ____D C:\ProgramData\Package Cache
2018-02-07 14:55 - 2017-09-29 09:45 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2018-02-03 18:10 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\rescache
2018-02-03 09:05 - 2017-07-20 23:04 - 000002362 _____ C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-02-03 09:04 - 2017-07-20 23:04 - 000000000 ___RD C:\Users\PC\OneDrive
2018-01-30 09:58 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-01-30 09:57 - 2017-07-21 10:19 - 000000867 _____ C:\Users\Public\Desktop\CCleaner.lnk
2018-01-30 09:57 - 2017-07-21 10:19 - 000000000 ____D C:\Program Files\CCleaner
2018-01-30 09:50 - 2017-07-26 07:42 - 000000000 ____D C:\Program Files (x86)\McAfee
2018-01-30 09:30 - 2017-07-26 17:15 - 000002455 _____ C:\Users\PC\Desktop\WarThunder.lnk
2018-01-30 09:16 - 2017-07-21 09:55 - 000000000 ____D C:\Users\PC\AppData\Local\Adobe
2018-01-30 07:03 - 2017-09-29 14:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-01-28 11:17 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\appcompat
2018-01-27 22:02 - 2017-07-20 23:00 - 000000000 ____D C:\Users\PC\AppData\Local\TileDataLayer
2018-01-27 22:01 - 2017-07-20 23:01 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-01-27 22:00 - 2017-09-29 09:45 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2018-01-27 21:57 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Registration
2018-01-27 21:56 - 2017-09-22 14:44 - 000022840 _____ C:\WINDOWS\system32\emptyregdb.dat
2018-01-27 21:46 - 2017-07-26 17:15 - 000000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder
2018-01-27 21:46 - 2017-07-21 08:03 - 000000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-01-27 21:42 - 2017-09-29 14:46 - 000000000 ____D C:\ProgramData\USOPrivate
2018-01-27 21:41 - 2017-09-29 14:46 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2018-01-27 21:35 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2018-01-27 21:35 - 2017-09-29 09:45 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2018-01-27 21:29 - 2017-09-29 14:46 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2018-01-27 21:26 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2018-01-27 21:26 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\spool
2018-01-27 21:26 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\NDF
2018-01-27 21:26 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Help
2018-01-27 21:26 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2018-01-27 21:26 - 2017-07-26 18:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\i-Funbox DevTeam
2018-01-27 21:26 - 2017-07-21 10:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
2018-01-27 21:26 - 2017-07-21 10:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2018-01-27 21:26 - 2017-07-21 09:58 - 000000000 ____D C:\Program Files\UNP
2018-01-27 21:26 - 2017-07-21 09:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2018-01-27 21:26 - 2017-07-21 09:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje balíka Microsoft Office 2016
2018-01-27 21:26 - 2017-07-21 09:05 - 000000000 ___HD C:\WINDOWS\system32\WLANProfiles
2018-01-27 21:26 - 2017-07-21 09:03 - 000000000 ____D C:\Program Files\Intel
2018-01-27 21:26 - 2017-07-21 08:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-01-27 21:26 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2018-01-27 21:25 - 2017-09-29 14:49 - 000000000 ____D C:\WINDOWS\Setup
2018-01-27 21:25 - 2017-09-29 14:46 - 000000000 __RHD C:\Users\Public\Libraries
2018-01-27 21:19 - 2017-09-22 14:23 - 000000000 ____D C:\Program Files\AuthenTec
2018-01-27 21:15 - 2017-09-30 15:28 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\yo-NG
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\wo-SN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\tk-TM
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\ti-ET
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\te-IN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\sw-KE
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\si-LK
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\rw-RW
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\prs-AF
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\or-IN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\mn-MN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\ky-KG
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\km-KH
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\is-IS
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\ig-NG
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\id-ID
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\bn-BD
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\be-BY
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\as-IN
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\am-ET
2018-01-27 21:15 - 2017-09-30 15:27 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2018-01-27 21:15 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2018-01-27 21:15 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\system32\F12
2018-01-27 21:15 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\TextInput
2018-01-27 21:15 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2018-01-27 21:15 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2018-01-27 21:15 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2018-01-27 21:15 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\oobe
2018-01-27 21:15 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\appraiser
2018-01-27 21:15 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\ShellExperiences
2018-01-27 21:15 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Provisioning
2018-01-27 21:15 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Windows Defender
2018-01-27 21:15 - 2017-09-29 14:46 - 000000000 ____D C:\PerfLogs
2018-01-27 21:15 - 2017-09-29 09:45 - 000000000 ____D C:\WINDOWS\system32\Dism
2018-01-27 20:22 - 2008-04-21 03:31 - 000008192 __RSH C:\BOOTSECT.BAK
2018-01-21 09:30 - 2017-07-26 18:39 - 000002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2018-01-21 09:19 - 2017-07-21 09:54 - 000001143 _____ C:\Users\Public\Desktop\VLC media player.lnk
2018-01-20 14:42 - 2017-07-26 17:41 - 000000000 ___SD C:\WINDOWS\UpdateAssistantV2
2018-01-20 13:46 - 2017-07-21 09:39 - 000457896 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2018-01-20 13:46 - 2017-07-21 09:39 - 000146648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2018-01-20 13:43 - 2017-11-17 14:59 - 000185096 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2018-01-20 13:43 - 2017-07-21 09:39 - 000457400 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys.151645236945409
2018-01-20 13:43 - 2017-07-21 09:39 - 000358672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2018-01-20 13:43 - 2017-07-21 09:39 - 000204456 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2018-01-20 13:43 - 2017-07-21 09:39 - 000146664 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys.151645236945409
2018-01-20 13:43 - 2017-07-21 09:39 - 000110336 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2018-01-20 13:43 - 2017-07-21 09:39 - 000084384 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2018-01-20 13:43 - 2017-07-21 09:39 - 000046976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2018-01-20 13:42 - 2017-07-21 09:39 - 001025176 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2018-01-20 13:42 - 2017-07-21 09:39 - 000343768 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbloga.sys
2018-01-20 13:42 - 2017-07-21 09:39 - 000321512 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys
2018-01-20 13:42 - 2017-07-21 09:39 - 000199448 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsha.sys
2018-01-20 13:42 - 2017-07-21 09:39 - 000057696 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniva.sys

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-02-07 12:31

==================== End of FRST.txt ============================

ferenc77
Návštěvník
Návštěvník
Příspěvky: 235
Registrován: 28 lis 2012 13:21

Re: Preventívka

#8 Příspěvek od ferenc77 »

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12.02.2018
Ran by PC (15-02-2018 18:05:37)
Running from C:\Users\PC\Desktop
Windows 10 Pro Version 1709 16299.125 (X64) (2018-01-27 21:01:24)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2458961067-288945821-3880192440-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2458961067-288945821-3880192440-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-2458961067-288945821-3880192440-1000 - Limited - Disabled) => C:\Users\defaultuser0
Guest (S-1-5-21-2458961067-288945821-3880192440-501 - Limited - Disabled)
PC (S-1-5-21-2458961067-288945821-3880192440-1001 - Administrator - Enabled) => C:\Users\PC
WDAGUtilityAccount (S-1-5-21-2458961067-288945821-3880192440-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Slovak (HKLM-x32\...\{AC76BA86-7AD7-1051-7B44-AC0F074E4100}) (Version: 18.011.20036 - Adobe Systems Incorporated)
Aktualizácie NVIDIA 28.0.0.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 28.0.0.0 - NVIDIA Corporation) Hidden
Apple Mobile Device Support (HKLM\...\{BD6778C5-6FA5-492A-ADD6-E706339C2A7B}) (Version: 11.0.2.4 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{C1BBFD2A-BCDD-45B3-8C0B-66BD434970A8}) (Version: 2.4.8.1 - Apple Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 17.9.2322 - AVAST Software)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.39 - Piriform)
DriverGenius (HKLM-x32\...\{D551274E-6CB8-4313-9290-9AD7EB15FD91}) (Version: 1.0.0 - Driver-Soft)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 64.0.3282.167 - Spoločnosť Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
iFunbox (v4.0.4106.1352) (HKLM-x32\...\iFunbox_is1) (Version: v4.0.4106.1352 - iFunbox DevTeam)
Intel® PROSet/Wireless Software (HKLM-x32\...\{227fd89d-2205-499a-8b73-9ec775789c4d}) (Version: 19.70.0 - Intel Corporation)
iTunes (HKLM\...\{0B82D2D9-0C46-47D7-8A5B-BEB38206116C}) (Version: 12.7.2.58 - Apple Inc.)
KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version: - )
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.0.163 - McAfee, Inc.)
Microsoft Office 2016 Professional - sk-sk (HKLM\...\ProfessionalRetail - sk-sk) (Version: 16.0.9001.2144 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2458961067-288945821-3880192440-1001\...\OneDriveSetup.exe) (Version: 17.3.7294.0108 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 58.0.2 (x64 sk) (HKLM\...\Mozilla Firefox 58.0.2 (x64 sk)) (Version: 58.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 58.0.1 - Mozilla)
NVIDIA GeForce Experience 3.9.0.61 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.9.0.61 - NVIDIA Corporation)
NVIDIA Grafický ovládač 342.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 342.01 - NVIDIA Corporation)
NVIDIA Ovládač zvuku HD 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Softvér systému s podporou technológie PhysX 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.9001.2144 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.9001.2144 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.9001.2144 - Microsoft Corporation) Hidden
Ovládací panel NVIDIA 342.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 342.01 - NVIDIA Corporation) Hidden
Podpora Apple aplikácií (32-bit) (HKLM-x32\...\{F1D83CEA-2855-4224-9935-D981785AA75D}) (Version: 6.2 - Apple Inc.)
Podpora Apple aplikácií(64-bit) (HKLM\...\{E2A6344A-45BF-47A0-9AE1-848325E7FD88}) (Version: 6.2 - Apple Inc.)
SafeZone Stable 4.58.2552.909 (HKLM-x32\...\SafeZone 4.58.2552.909) (Version: 4.58.2552.909 - Avast Software) Hidden
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{AC0D130B-8809-4125-811F-667893B90644}) (Version: 2.11.0.0 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.8 - VideoLAN)
WinRAR 5.40 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-01-20] (AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-01-20] (AVAST Software)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2016-08-14] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2016-08-14] (Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-01-20] (AVAST Software)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-11-14] (NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-01-20] (AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2016-08-14] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2016-08-14] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0C047D5B-9F68-4F9C-AE5B-5AD5D7EA9729} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2018-01-20] (AVAST Software)
Task: {16D2428D-7A74-4632-8F6F-AD8424F0E01A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-01-09] (Piriform Ltd)
Task: {33B56D8C-3961-495E-955C-FB4B4FF6F710} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2018-01-20] (AVAST Software)
Task: {375033D7-9E2D-44BB-AB54-D7D712073404} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-08-18] (NVIDIA Corporation)
Task: {462BC423-892F-4FF5-99CA-13BA9A354D54} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-08-18] (NVIDIA Corporation)
Task: {5097AF77-9F51-4472-87CB-13D448DABB98} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-08-18] (NVIDIA Corporation)
Task: {5E4F7BC2-AEA1-4CB2-9672-D863E26E86B6} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-08-18] (NVIDIA Corporation)
Task: {64490B6B-6C4C-48F3-A055-AB31DBC5B59F} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-08-18] (NVIDIA Corporation)
Task: {64F38AE8-A05D-4425-8B6E-6AC7C1AD3A22} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {73903ADF-C531-4E5C-80B5-32243A65865C} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-08-18] (NVIDIA Corporation)
Task: {7CB6C967-F4C6-42D7-A864-DBA6C4C40A84} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-01-31] (Microsoft Corporation)
Task: {83AD7320-10BA-4990-8831-E919B1E2A207} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-08-18] (NVIDIA Corporation)
Task: {86DB362E-71E2-432C-A402-F1B77F27FD57} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-07-23] (Google Inc.)
Task: {97546BC3-53C6-42C9-985E-FD0715EC12E3} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-01-17] (Adobe Systems Incorporated)
Task: {AA394B28-D0A2-48C2-A8F6-363A3075EE95} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-02-13] (Microsoft Corporation)
Task: {B8CDF222-91E5-4133-B146-F4E2301F94A6} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-07-24] (Apple Inc.)
Task: {CC000626-7E19-4840-B9F7-55DD72B7CAA0} - System32\Tasks\SafeZone scheduled Autoupdate 1500626816 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-08-04] (Avast Software)
Task: {CEBC7EC5-1D0B-43D1-97A4-5356495CC747} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-02-13] (Microsoft Corporation)
Task: {D027FE1D-B1B6-458D-BF5F-FA9244BBC6CF} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-08-18] (NVIDIA Corporation)
Task: {EC402C44-49C2-4271-BA84-7C46263A5CF9} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-01-09] (Piriform Ltd)
Task: {F5476D0F-651D-4ACD-8E10-218835EC8214} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-01-31] (Microsoft Corporation)
Task: {F8EB75F8-A2FF-4690-B90E-29DC3680A983} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-07-23] (Google Inc.)
Task: {FAC7C15C-ABB3-4CC8-B845-7127FB674D78} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


ShortcutWithArgument: C:\Users\PC\Desktop\WarThunder.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --app=hxxp://go.playmmogames.com/aff_c?offer_id=698&aff_id=1034&source=3&click_id=975a97e6114328136abdcd9f1923d663982873a3
ShortcutWithArgument: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder\WarThunder.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --app=hxxp://go.playmmogames.com/aff_c?offer_id=698&aff_id=1034&source=3&click_id=975a97e6114328136abdcd9f1923d663982873a3 --app-window-size=1440,900
ShortcutWithArgument: C:\Users\PC\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\WarThunder.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --app=hxxp://go.playmmogames.com/aff_c?offer_id=698&aff_id=1034&source=3&click_id=975a97e6114328136abdcd9f1923d663982873a3

==================== Loaded Modules (Whitelisted) ==============

2017-11-30 18:54 - 2017-11-30 18:54 - 000088888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2017-11-30 18:54 - 2017-11-30 18:54 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2018-02-07 15:12 - 2017-08-18 05:36 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-09-29 14:41 - 2017-09-29 14:41 - 000184432 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-09-22 14:22 - 2016-11-14 12:15 - 000135224 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 011044864 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2018-01-27 21:13 - 2018-01-27 21:13 - 001804288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2018-01-30 07:02 - 2018-01-30 07:04 - 000086528 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1803.279.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2018-01-30 07:02 - 2018-01-30 07:04 - 000195072 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1803.279.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2018-01-30 07:02 - 2018-01-30 07:04 - 025135104 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1803.279.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2018-01-30 07:02 - 2018-01-30 07:04 - 002542592 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1803.279.0_x64__kzf8qxf38zg5c\skypert.dll
2018-01-20 13:43 - 2018-01-20 13:43 - 000067984 _____ () C:\Program Files\AVAST Software\Avast\x64\dll_loader.dll
2018-01-20 13:43 - 2018-01-20 13:43 - 000067920 _____ () C:\Program Files\AVAST Software\Avast\x64\module_lifetime.dll
2018-01-20 13:42 - 2018-01-20 13:42 - 000206152 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2018-01-20 13:42 - 2018-01-20 13:42 - 000058016 _____ () C:\Program Files\AVAST Software\Avast\module_lifetime.dll
2018-01-20 13:42 - 2018-01-20 13:42 - 000057504 _____ () C:\Program Files\AVAST Software\Avast\dll_loader.dll
2017-07-21 09:37 - 2017-07-21 09:37 - 067109376 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2018-01-20 13:43 - 2018-01-20 13:43 - 000289272 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2018-01-20 13:42 - 2018-01-20 13:42 - 000282560 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2018-02-07 15:12 - 2017-08-18 05:36 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2016-07-16 12:47 - 2016-07-16 12:45 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2458961067-288945821-3880192440-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.16.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "ShadowPlay"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKU\S-1-5-21-2458961067-288945821-3880192440-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-2458961067-288945821-3880192440-1001\...\StartupApproved\Run: => "iFunBox"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{68FBC127-F311-4918-9C06-643264EF48DF}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{39FBF016-1D9F-4E18-91C3-182635DF4C04}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
FirewallRules: [{4520A037-F46B-4C8E-87D3-94FEEA28ADDA}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{2AF77CBB-E5EA-49D8-BE78-F0C822D02CE4}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{446BAD88-CB0D-4B51-ABB0-A3654D77634A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{35AE6A49-707C-4888-8B11-733DCE46D8C5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{58ADA0A2-A7BE-427C-90BC-76F35617C01D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{AEA13C9A-6C99-48FE-BAC0-CAC9E5DBE0D1}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{58290B8F-1B51-4846-A5F1-051A50FE476D}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{9A50B5E2-9C84-4307-AA79-44B00DB42890}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{CCA337AF-7471-4496-ACD8-4525D7E4854F}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{10084A6C-C5A2-4C08-A315-EE650C7C7F6D}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{D8FF25ED-E826-48E0-AFF3-CB1621DBFD23}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\4.58.2552.909_0\SZBrowser.exe
FirewallRules: [{2307B660-4068-47C0-9E63-6B7651678E7E}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\4.58.2552.909\SZBrowser.exe
FirewallRules: [{150956CE-FB84-4910-ADF5-21F771BE9448}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{3788E895-E20D-442F-A830-25A33F2A95F4}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{C124922A-4728-49F2-9AFE-779A769F292C}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [TCP Query User{55550580-9324-4E12-8FD1-5D652AEA5935}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{AC114D53-6D43-49AF-A179-E2226FBB46A3}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [{DC96400D-54C8-43C8-883B-12D8FADDB7C1}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Restore Points =========================

06-02-2018 20:28:09 Scheduled Checkpoint
13-02-2018 20:29:31 Windows Update

==================== Faulty Device Manager Devices =============

Name: Base System Device
Description: Base System Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Winbond CIR Transceiver
Description: Winbond CIR Transceiver
Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
Manufacturer: Winbond Electronics Corporation
Service: winbondcir
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Base System Device
Description: Base System Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Base System Device
Description: Base System Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/15/2018 05:56:58 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (02/15/2018 05:56:52 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=2

Error: (02/15/2018 05:56:26 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=TimerEvent

Error: (02/14/2018 06:58:58 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=TimerEvent

Error: (02/14/2018 04:59:01 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (02/14/2018 04:56:31 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (02/14/2018 03:02:02 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: DESKTOP-1U0EKNK)
Description: Balík windows.immersivecontrolpanel_10.0.1.1000_neutral_neutral_cw5n1h2txyewy+microsoft.windows.immersivecontrolpanel sa ukončil, pretože jeho odstavenie trvalo príliš dlho.

Error: (02/14/2018 03:01:46 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=TimerEvent


System errors:
=============
Error: (02/15/2018 05:53:12 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (02/15/2018 05:53:12 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (02/15/2018 05:53:11 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (02/15/2018 05:53:11 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (02/15/2018 05:53:11 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (02/15/2018 05:53:11 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (02/14/2018 08:54:01 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4

Error: (02/14/2018 08:53:36 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-1U0EKNK)
Description: The server Microsoft.Windows.Cortana_1.9.6.16299_neutral_neutral_cw5n1h2txyewy!CortanaUI.AppX6jbm6fjqte5wzzrf5807m7eq0z44q5gf.mca did not register with DCOM within the required timeout.


CodeIntegrity:
===================================

Date: 2018-02-15 17:59:47.367
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-02-15 17:59:47.365
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-02-15 17:59:23.978
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-02-15 17:59:23.976
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-02-15 17:59:20.537
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-02-15 17:59:20.519
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-02-15 17:56:52.131
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-02-15 17:56:52.129
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 Duo CPU P7350 @ 2.00GHz
Percentage of memory in use: 57%
Total physical RAM: 4090.87 MB
Available physical RAM: 1727.4 MB
Total Virtual: 5498.87 MB
Available Virtual: 2824.98 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:144.04 GB) (Free:86.26 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive e: (DATA) (Fixed) (Total:144.04 GB) (Free:39.35 GB) NTFS

\\?\Volume{6acd8b20-0000-0000-0000-100000000000}\ (PQSERVICE) (Fixed) (Total:10 GB) (Free:1.37 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 6ACD8B20)
Partition 1: (Not Active) - (Size=10 GB) - (Type=27)
Partition 2: (Active) - (Size=144 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=144 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

Conder
VIP
VIP
Příspěvky: 4399
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: Preventívka

#9 Příspěvek od Conder »

:arrow: Odporucam nepouzivat a odinstalovat DriverGenius a do buducna sa vyhnut podobnym programom, a hlavne programom od IObit, ktore mozu poskodit system.

:arrow: Odporuam odinstalovat "McAfee WebAdvisor" (aj doplnky/addony v prehliadacoch) - zbytocnost, kedze uz tam je Avast.

:arrow: Otvor poznamkovy blok (Win+R -> notepad -> enter)
  • Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

    Kód: Vybrat vše

    Start
    CloseProcesses:
    CreateRestorePoint:
    HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
    SearchScopes: HKU\S-1-5-21-2458961067-288945821-3880192440-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
    Task: {64F38AE8-A05D-4425-8B6E-6AC7C1AD3A22} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
    Task: {FAC7C15C-ABB3-4CC8-B845-7127FB674D78} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe
    C:\Program Files\KMSpico
    Hosts:
    EmptyTemp:
    End
  • Uloz na plochu s nazvom fixlist.txt
  • Spusti znovu FRST a klikni na Fix
  • Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
  • Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj
:arrow: Skontroluj, velkost plochy (C:\Users\PC\Desktop). Ak je vacsia ako 300 MB, presun vsetky subory a zlozky z plochy do dokumentov a na ploche nechaj iba odkazy/zastupcov. Prilis velka velkost plochy moze sposobit spomalenie systemu.
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

ferenc77
Návštěvník
Návštěvník
Příspěvky: 235
Registrován: 28 lis 2012 13:21

Re: Preventívka

#10 Příspěvek od ferenc77 »

Fix result of Farbar Recovery Scan Tool (x64) Version: 17.02.2018
Ran by PC (17-02-2018 16:53:31) Run:1
Running from C:\Users\PC\Desktop
Loaded Profiles: defaultuser0 & PC (Available Profiles: defaultuser0 & PC)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
SearchScopes: HKU\S-1-5-21-2458961067-288945821-3880192440-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Task: {64F38AE8-A05D-4425-8B6E-6AC7C1AD3A22} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {FAC7C15C-ABB3-4CC8-B845-7127FB674D78} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe
C:\Program Files\KMSpico
Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION => restored successfully
"HKU\S-1-5-21-2458961067-288945821-3880192440-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{64F38AE8-A05D-4425-8B6E-6AC7C1AD3A22} => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{64F38AE8-A05D-4425-8B6E-6AC7C1AD3A22} => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager => could not remove key. ErrorCode1: 0x00000001
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FAC7C15C-ABB3-4CC8-B845-7127FB674D78} => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FAC7C15C-ABB3-4CC8-B845-7127FB674D78} => could not remove key. ErrorCode1: 0x00000002
C:\WINDOWS\System32\Tasks\AutoPico Daily Restart => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AutoPico Daily Restart => could not remove key. ErrorCode1: 0x00000002
C:\Program Files\KMSpico => moved successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 7888896 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 19250781 B
Java, Flash, Steam htmlcache => 492 B
Windows/system/drivers => 51908293 B
Edge => 1497987 B
Chrome => 757446290 B
Firefox => 13343534 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 5714 B
NetworkService => 0 B
defaultuser0 => 0 B
PC => 31352997 B

RecycleBin => 7147624 B
EmptyTemp: => 848.6 MB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 17-02-2018 17:05:32)


Result of scheduled keys to remove after reboot:

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{64F38AE8-A05D-4425-8B6E-6AC7C1AD3A22}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{64F38AE8-A05D-4425-8B6E-6AC7C1AD3A22}" => removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FAC7C15C-ABB3-4CC8-B845-7127FB674D78}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FAC7C15C-ABB3-4CC8-B845-7127FB674D78}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AutoPico Daily Restart" => removed successfully

==== End of Fixlog 17:05:32 ====

Conder
VIP
VIP
Příspěvky: 4399
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: Preventívka

#11 Příspěvek od Conder »

:arrow: Logy uz vyzeraju OK. Nastala nejaka zmena, pripadne su nejake problemy s PC?
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

ferenc77
Návštěvník
Návštěvník
Příspěvky: 235
Registrován: 28 lis 2012 13:21

Re: Preventívka

#12 Příspěvek od ferenc77 »

Je to OK. Ďakujem

Conder
VIP
VIP
Příspěvky: 4399
Registrován: 30 pro 2013 22:29
Bydliště: Bratislava

Re: Preventívka

#13 Příspěvek od Conder »

:arrow: Nie je zaco, rad som pomohol :)

:arrow: Este upraceme po pouzitych nastrojoch:
Absolvent skoly pre novacikov :)
E-mail: conder (zavinac) forum.viry.cz

Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).

Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.

V pripade spokojnosti je mozne podporit forum. Dakujeme!

Zamčeno