v Centru akcí mi naskakují divná spamová oznámení (i několik desítek najednou).
Přikládám logy z FRST a prosím o pomoc.
Děkuji, hezký den.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 31-08-2019
Ran by Jiří Macháček (administrator) on DESKTOP-57I8TQT (HP HP 250 G6 Notebook PC) (01-09-2019 13:33:00)
Running from C:\Users\Jiří Macháček\Downloads
Loaded Profiles: Jiří Macháček (Available Profiles: Jiří Macháček)
Platform: Windows 10 Home Version 1809 17763.678 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9279328 2018-09-27] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] (Samsung Electronics CO., LTD. -> )
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [269192 2019-07-22] (AVAST Software s.r.o. -> AVAST Software)
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\76.0.3809.132\Installer\chrmstp.exe [2019-08-30] (Google LLC -> Google LLC)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {2C478D8A-E14C-43B8-8BC3-F38EF4FA27BB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [16835256 2019-07-11] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {433573A5-FBEE-4027-9E79-CBD84934A15A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1236048 2019-07-24] (Adobe Inc. -> Adobe Systems)
Task: {8153C33A-57D9-4A04-A7E1-D22873851D82} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2019-03-01] (Google Inc -> Google Inc.)
Task: {900EA742-7782-480E-AC73-9DA8E44CEF68} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3940232 2019-07-22] (AVAST Software s.r.o. -> AVAST Software)
Task: {915BD6D5-0728-4C2E-BC4E-8EAC8C4672CA} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-07-11] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {A034D527-4A97-41C5-9224-D28E50BD3703} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [2045832 2019-08-19] (AVAST Software s.r.o. -> AVAST Software)
Task: {B81D83F5-B422-480C-94A1-59A9C5658DDE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2019-03-01] (Google Inc -> Google Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{86f3d46a-ee51-480c-8b1c-793cc3a1a3a6}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{fb304c42-4b0f-45f2-a238-df6b886c292b}: [DhcpNameServer] 10.0.0.138
Internet Explorer:
==================
HKU\S-1-5-21-2481005043-3210856148-3389040519-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/
SearchScopes: HKU\S-1-5-21-2481005043-3210856148-3389040519-1001 -> DefaultScope {8FB859A0-6283-4237-900A-EFB8BFD792E6} URL = hxxps://www.google.com/search?q={searchTerms}&s ... utEncoding?}
SearchScopes: HKU\S-1-5-21-2481005043-3210856148-3389040519-1001 -> {8FB859A0-6283-4237-900A-EFB8BFD792E6} URL = hxxps://www.google.com/search?q={searchTerms}&s ... utEncoding?}
BHO: PDF Architect 6 Helper -> {9FD094B1-A4BF-415A-82AE-8C2845D0B769} -> C:\Program Files\PDF Architect 6\creator\plugins\IEAddin\creator-ie-helper.dll [2019-03-07] (pdfforge GmbH -> pdfforge GmbH)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: PDF Architect 6 Helper -> {9FD094B1-A4BF-415A-82AE-8C2845D0B769} -> C:\Program Files (x86)\PDF Architect 6\creator\plugins\IEAddin\creator-ie-helper.dll [2019-03-07] (pdfforge GmbH -> pdfforge GmbH)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
Toolbar: HKLM - PDF Architect 6 Toolbar - {E8536605-CA24-4DFF-B1BC-316EE27F6DF7} - C:\Program Files\PDF Architect 6\creator\plugins\IEAddin\creator-ie-plugin.dll [2019-03-07] (pdfforge GmbH -> pdfforge GmbH)
Toolbar: HKLM-x32 - PDF Architect 6 Toolbar - {E8536605-CA24-4DFF-B1BC-316EE27F6DF7} - C:\Program Files (x86)\PDF Architect 6\creator\plugins\IEAddin\creator-ie-plugin.dll [2019-03-07] (pdfforge GmbH -> pdfforge GmbH)
FireFox:
========
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-06-11] (VideoLAN -> VideoLAN)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-09] (Google Inc -> Google, Inc.)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-07-31] (Adobe Inc. -> Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.seznam.cz/"
CHR Profile: C:\Users\Jiří Macháček\AppData\Local\Google\Chrome\User Data\Default [2019-09-01]
CHR Extension: (Avast SafePrice | Srovnání, výhodné nabídky, kupóny) - C:\Users\Jiří Macháček\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2019-06-05]
CHR Extension: (Avast Online Security) - C:\Users\Jiří Macháček\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2019-07-16]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Jiří Macháček\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-03-02]
CHR Extension: (Chrome Media Router) - C:\Users\Jiří Macháček\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-08-09]
CHR Profile: C:\Users\Jiří Macháček\AppData\Local\Google\Chrome\User Data\Guest Profile [2019-08-30]
CHR Profile: C:\Users\Jiří Macháček\AppData\Local\Google\Chrome\User Data\System Profile [2019-08-30]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6797008 2019-07-22] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [414976 2019-07-22] (AVAST Software s.r.o. -> AVAST Software)
S3 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [57504 2019-07-22] (AVAST Software s.r.o. -> AVAST Software)
R2 esifsvc; C:\Windows\System32\Intel\DPTF\esif_uf.exe [1865224 2018-05-01] (Intel Corporation -> Intel Corporation)
R2 ibtsiva; C:\Windows\System32\ibtsiva.exe [529912 2018-12-21] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [370856 2019-03-18] (Intel Corporation -> Intel Corporation)
R3 PDF Architect 6; C:\Program Files\PDF Architect 6\ws.exe [2572024 2019-03-07] (pdfforge GmbH -> pdfforge GmbH)
R2 PDF Architect 6 Creator; C:\Program Files\PDF Architect 6\creator\common\creator-ws.exe [832248 2019-03-07] (pdfforge GmbH -> pdfforge GmbH)
R2 PDF Architect 6 Update Service; C:\Program Files\PDF Architect 6\updater-ws.exe [1665272 2019-03-07] (pdfforge GmbH -> pdfforge GmbH)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [268128 2018-09-27] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [278616 2017-08-18] (Synaptics Incorporated -> Synaptics Incorporated)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\NisSrv.exe [4098064 2019-03-02] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MsMpEng.exe [113992 2019-03-02] (Microsoft Corporation -> Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [37320 2019-07-22] (AVAST Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [209256 2019-07-22] (AVAST Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [263224 2019-07-22] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [206056 2019-07-22] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [61688 2019-07-22] (AVAST Software s.r.o. -> AVAST Software)
R0 aswElam; C:\Windows\System32\drivers\aswElam.sys [15488 2019-03-20] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [279336 2019-07-22] (AVAST Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42504 2019-07-22] (AVAST Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [168896 2019-07-31] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [112520 2019-07-22] (AVAST Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [88160 2019-07-22] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1030784 2019-07-31] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [477288 2019-07-22] (AVAST Software s.r.o. -> AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [225816 2019-07-22] (AVAST Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [387688 2019-08-05] (AVAST Software s.r.o. -> AVAST Software)
R3 dptf_acpi; C:\Windows\System32\drivers\dptf_acpi.sys [78680 2018-05-01] (Intel Corporation -> Intel Corporation)
R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [71000 2018-05-01] (Intel Corporation -> Intel Corporation)
R3 esif_lf; C:\Windows\System32\drivers\esif_lf.sys [402264 2018-05-01] (Intel Corporation -> Intel Corporation)
R3 ibtusb; C:\Windows\System32\drivers\ibtusb.sys [199192 2018-05-11] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)
R3 igfxLP; C:\Windows\system32\DRIVERS\igdkmd64lp.sys [7409320 2019-03-18] (Intel Corporation -> Intel Corporation)
R3 Netwtw04; C:\Windows\System32\drivers\Netwtw04.sys [8723648 2018-10-12] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [605696 2018-09-15] (Microsoft Windows -> Realtek )
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [55384 2017-08-18] (Synaptics Incorporated -> Synaptics Incorporated)
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [146200 2015-10-14] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [46472 2019-03-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [333792 2019-03-02] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [62432 2019-03-02] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [35392 2019-08-06] (HP Inc. -> HP)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-09-01 13:33 - 2019-09-01 13:36 - 000014528 _____ C:\Users\Jiří Macháček\Downloads\FRST.txt
2019-09-01 13:33 - 2019-09-01 13:33 - 000000000 ____D C:\Users\Jiří Macháček\AppData\Local\OneDrive
2019-09-01 13:31 - 2019-09-01 13:33 - 000000000 ____D C:\FRST
2019-09-01 13:31 - 2019-09-01 13:31 - 001615360 _____ (Farbar) C:\Users\Jiří Macháček\Downloads\FRST64.exe
2019-08-30 15:18 - 2019-08-30 15:21 - 000000000 ____D C:\AdwCleaner
2019-08-30 15:17 - 2019-08-30 15:17 - 007623880 _____ (Malwarebytes) C:\Users\Jiří Macháček\Downloads\adwcleaner_7.4.exe
2019-08-28 18:44 - 2019-08-28 19:24 - 734021424 _____ C:\Users\Jiří Macháček\Downloads\nezvratny-osud-1-cz.avi
2019-08-28 16:56 - 2019-08-28 17:44 - 873784458 _____ C:\Users\Jiří Macháček\Downloads\Zkažená-uča-cz.avi
2019-08-28 14:40 - 2019-08-28 15:20 - 732637184 _____ C:\Users\Jiří Macháček\Downloads\Ošetřovatel-romantická komedie USA 2011 cz.avi
2019-08-28 12:56 - 2019-08-28 14:03 - 739610644 _____ C:\Users\Jiří Macháček\Downloads\Jedna za všechny-romantická komedie USA 2014 cz.avi
2019-08-28 11:46 - 2019-08-28 12:26 - 748555112 _____ C:\Users\Jiří Macháček\Downloads\Decibely lásky-romantická komedie-muzikál ČR 2016.avi
2019-08-28 10:38 - 2019-08-28 11:45 - 741741354 _____ C:\Users\Jiří Macháček\Downloads\Mamma Mia! Here We Go Again-romantický muzikál USA 2018 cz.mp4
2019-08-27 17:45 - 2019-08-27 17:45 - 024135902 _____ C:\Users\Jiří Macháček\Downloads\hypermarket-35-2019.pdf
2019-08-25 19:31 - 2019-08-25 19:32 - 026553138 _____ C:\Users\Jiří Macháček\Downloads\hypermarket-34-2019.pdf
2019-08-25 19:29 - 2019-08-25 19:30 - 024700233 _____ C:\Users\Jiří Macháček\Downloads\supermarket-34-2019.pdf
2019-08-21 20:04 - 2019-08-21 20:04 - 000000000 ____D C:\Users\Jiří Macháček\AppData\Local\CrashDumps
2019-08-13 21:59 - 2019-08-13 21:59 - 011724288 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2019-08-13 21:59 - 2019-08-13 21:59 - 009941504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2019-08-13 21:59 - 2019-08-13 21:59 - 002469440 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2019-08-13 21:59 - 2019-08-13 21:59 - 002323688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2019-08-13 21:59 - 2019-08-13 21:59 - 000632320 _____ (Microsoft Corporation) C:\Windows\system32\SyncController.dll
2019-08-13 21:59 - 2019-08-13 21:59 - 000501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncController.dll
2019-08-13 21:59 - 2019-08-13 21:59 - 000092832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpfve.sys
2019-08-13 21:58 - 2019-08-13 21:58 - 020816896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2019-08-13 21:58 - 2019-08-13 21:58 - 019011584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2019-08-13 21:58 - 2019-08-13 21:58 - 012244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2019-08-13 21:58 - 2019-08-13 21:58 - 007921664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2019-08-13 21:58 - 2019-08-13 21:58 - 006065152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2019-08-13 21:58 - 2019-08-13 21:58 - 002177336 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2019-08-13 21:58 - 2019-08-13 21:58 - 002017792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2019-08-13 21:58 - 2019-08-13 21:58 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2019-08-13 21:58 - 2019-08-13 21:58 - 000684032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2019-08-13 21:58 - 2019-08-13 21:58 - 000669184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2019-08-13 21:58 - 2019-08-13 21:58 - 000428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
2019-08-13 21:58 - 2019-08-13 21:58 - 000360960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\P2PGraph.dll
2019-08-13 21:58 - 2019-08-13 21:58 - 000353280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2019-08-13 21:58 - 2019-08-13 21:58 - 000345600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2019-08-13 21:58 - 2019-08-13 21:58 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2019-08-13 21:58 - 2019-08-13 21:58 - 000313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd2x40.dll
2019-08-13 21:58 - 2019-08-13 21:58 - 000180736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE
2019-08-13 21:58 - 2019-08-13 21:58 - 000177664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\p2pnetsh.dll
2019-08-13 21:58 - 2019-08-13 21:58 - 000173568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\P2P.dll
2019-08-13 21:58 - 2019-08-13 21:58 - 000117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2019-08-13 21:58 - 2019-08-13 21:58 - 000058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offreg.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 026808320 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 023453696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 012939776 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 008900608 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 007871488 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 006544552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 006441472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 006308016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 005764608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 005587968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 005086208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 004628992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 004344832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 003818632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2019-08-13 21:57 - 2019-08-13 21:57 - 003656704 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 002942976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 002778760 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 002765312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 002346496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 002298880 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 002278792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 002096128 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2019-08-13 21:57 - 2019-08-13 21:57 - 001711104 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 001701888 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 001668752 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 001506304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 001485312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 001477432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 001465984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 001290752 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 001280000 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 001278808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Taskmgr.exe
2019-08-13 21:57 - 2019-08-13 21:57 - 001257472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 001224704 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 001222160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpbase.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 001221528 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe
2019-08-13 21:57 - 2019-08-13 21:57 - 000993792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000956416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Unistore.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000882688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2019-08-13 21:57 - 2019-08-13 21:57 - 000840192 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000806024 _____ (Microsoft Corporation) C:\Windows\system32\BioIso.exe
2019-08-13 21:57 - 2019-08-13 21:57 - 000791040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000791040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000783184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000763392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprddm.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000730112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FlightSettings.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000658944 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000532992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000525824 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
2019-08-13 21:57 - 2019-08-13 21:57 - 000522104 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
2019-08-13 21:57 - 2019-08-13 21:57 - 000495104 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000487424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\newdev.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000440320 _____ (Microsoft Corporation) C:\Windows\system32\P2PGraph.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000431616 _____ (Microsoft Corporation) C:\Windows\system32\p2psvc.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000425984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\daxexec.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000398848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000356352 _____ (Microsoft Corporation) C:\Windows\system32\pnrpsvc.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000349184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2019-08-13 21:57 - 2019-08-13 21:57 - 000334848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicensingDiagSpp.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000297984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.Diagnostics.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000264704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Lights.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShellCommonCommonProxyStub.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000242176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastapi.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000232448 _____ (Microsoft Corporation) C:\Windows\system32\ssdpsrv.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000228352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.SystemManagement.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000228352 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2019-08-13 21:57 - 2019-08-13 21:57 - 000219136 _____ (Microsoft Corporation) C:\Windows\system32\P2P.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000217088 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE
2019-08-13 21:57 - 2019-08-13 21:57 - 000205824 _____ (Microsoft Corporation) C:\Windows\system32\p2pnetsh.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000183808 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2019-08-13 21:57 - 2019-08-13 21:57 - 000179200 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000173216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000167424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpdr.sys
2019-08-13 21:57 - 2019-08-13 21:57 - 000165888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MicrosoftAccountTokenProvider.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000155136 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ComposableShellProxyStub.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000152576 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSoftwareInstallationClient.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000148480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2019-08-13 21:57 - 2019-08-13 21:57 - 000144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000122368 _____ (Microsoft Corporation) C:\Windows\system32\wercplsupport.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000114128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rmclient.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000089600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvsetup.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000078848 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000075264 _____ (Microsoft Corporation) C:\Windows\system32\Groupinghc.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usoapi.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000058882 _____ C:\Windows\system32\srms.dat
2019-08-13 21:57 - 2019-08-13 21:57 - 000053760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hmkd.dll
2019-08-13 21:57 - 2019-08-13 21:57 - 000021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shunimpl.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 022114960 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 009682744 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2019-08-13 21:56 - 2019-08-13 21:56 - 006925312 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 004737536 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 004588544 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2019-08-13 21:56 - 2019-08-13 21:56 - 004056576 _____ (Microsoft Corporation) C:\Windows\system32\EdgeContent.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 003978240 _____ (Microsoft Corporation) C:\Windows\system32\bootux.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 003635200 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2019-08-13 21:56 - 2019-08-13 21:56 - 003333632 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 002926096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2019-08-13 21:56 - 2019-08-13 21:56 - 002700792 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 002438576 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 002073232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 001966904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2019-08-13 21:56 - 2019-08-13 21:56 - 001733120 _____ (Microsoft Corporation) C:\Windows\system32\CoreShell.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 001715712 _____ (Microsoft Corporation) C:\Windows\system32\ISM.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 001701880 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2019-08-13 21:56 - 2019-08-13 21:56 - 001641400 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 001483872 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 001479184 _____ (Microsoft Corporation) C:\Windows\system32\rdpbase.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 001472568 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2019-08-13 21:56 - 2019-08-13 21:56 - 001391096 _____ (Microsoft Corporation) C:\Windows\system32\Taskmgr.exe
2019-08-13 21:56 - 2019-08-13 21:56 - 001344960 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2019-08-13 21:56 - 2019-08-13 21:56 - 001267712 _____ (Microsoft Corporation) C:\Windows\system32\APMon.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 001182240 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2019-08-13 21:56 - 2019-08-13 21:56 - 001180464 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 001171968 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 001160704 _____ (Microsoft Corporation) C:\Windows\system32\Unistore.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 001057792 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2019-08-13 21:56 - 2019-08-13 21:56 - 000927232 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000888832 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000833024 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000684544 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000678680 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2019-08-13 21:56 - 2019-08-13 21:56 - 000663552 _____ (Microsoft Corporation) C:\Windows\system32\PsmServiceExtHost.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000622080 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnrSvc.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000616960 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000594944 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000586256 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000553784 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000535056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2019-08-13 21:56 - 2019-08-13 21:56 - 000523776 _____ (Microsoft Corporation) C:\Windows\system32\newdev.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000519168 _____ (Microsoft Corporation) C:\Windows\system32\sppcext.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000515440 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000447488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2019-08-13 21:56 - 2019-08-13 21:56 - 000398928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000394240 _____ (Microsoft Corporation) C:\Windows\system32\Search.ProtocolHandler.MAPI2.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000385536 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000383504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys
2019-08-13 21:56 - 2019-08-13 21:56 - 000378880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Lights.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000371200 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Diagnostics.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000363520 _____ (Microsoft Corporation) C:\Windows\system32\LicensingDiagSpp.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000317952 _____ (Microsoft Corporation) C:\Windows\system32\ComposableShellProxyStub.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000262336 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000254976 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000241664 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000240640 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2019-08-13 21:56 - 2019-08-13 21:56 - 000201528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2019-08-13 21:56 - 2019-08-13 21:56 - 000193536 _____ (Microsoft Corporation) C:\Windows\system32\Win32CompatibilityAppraiserCSP.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000182784 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000169472 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2019-08-13 21:56 - 2019-08-13 21:56 - 000152080 _____ (Microsoft Corporation) C:\Windows\system32\rmclient.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000138752 _____ (Microsoft Corporation) C:\Windows\system32\InputLocaleManager.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000138240 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000125440 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000121656 _____ (Microsoft Corporation) C:\Windows\system32\kdnet.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000107008 _____ (Microsoft Corporation) C:\Windows\system32\CoreShellExtFramework.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000070144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2019-08-13 21:56 - 2019-08-13 21:56 - 000056320 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2019-08-13 21:56 - 2019-08-13 21:56 - 000023552 _____ (Microsoft Corporation) C:\Windows\system32\shunimpl.dll
2019-08-13 21:55 - 2019-08-13 21:56 - 002842112 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 007884288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 007645392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 005570968 _____ (Microsoft Corporation) C:\Windows\system32\StartTileData.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 004351656 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2019-08-13 21:55 - 2019-08-13 21:55 - 003567104 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 003385856 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 003363856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2019-08-13 21:55 - 2019-08-13 21:55 - 003335224 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 002999808 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 002767160 _____ (Microsoft Corporation) C:\Windows\system32\UpdateAgent.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 002593544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 002421760 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2019-08-13 21:55 - 2019-08-13 21:55 - 002189312 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 001892864 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 001674752 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 001605632 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 001466880 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 001321784 _____ (Microsoft Corporation) C:\Windows\system32\wpx.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 001260560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2019-08-13 21:55 - 2019-08-13 21:55 - 001205248 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 001098272 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2019-08-13 21:55 - 2019-08-13 21:55 - 001054712 _____ (Microsoft Corporation) C:\Windows\system32\ApplyTrustOffline.exe
2019-08-13 21:55 - 2019-08-13 21:55 - 001038336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 001020416 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 001008640 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 001004544 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000980992 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000900096 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000895792 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000889344 _____ (Microsoft Corporation) C:\Windows\system32\FlightSettings.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000869888 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000864568 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthService.exe
2019-08-13 21:55 - 2019-08-13 21:55 - 000850976 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000816640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2019-08-13 21:55 - 2019-08-13 21:55 - 000799784 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000794040 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000771072 _____ (Microsoft Corporation) C:\Windows\system32\WpcRefreshTask.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000764416 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000758688 _____ (Microsoft Corporation) C:\Windows\system32\tcblaunch.exe
2019-08-13 21:55 - 2019-08-13 21:55 - 000732168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2019-08-13 21:55 - 2019-08-13 21:55 - 000680184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000664576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000603280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000580024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000574464 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2019-08-13 21:55 - 2019-08-13 21:55 - 000529408 _____ (Microsoft Corporation) C:\Windows\system32\ShellCommonCommonProxyStub.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000508968 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2019-08-13 21:55 - 2019-08-13 21:55 - 000482104 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2019-08-13 21:55 - 2019-08-13 21:55 - 000476160 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000449576 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000444728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2019-08-13 21:55 - 2019-08-13 21:55 - 000415744 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2019-08-13 21:55 - 2019-08-13 21:55 - 000407040 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2019-08-13 21:55 - 2019-08-13 21:55 - 000387832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000375752 _____ (Microsoft Corporation) C:\Windows\system32\MusNotifyIcon.exe
2019-08-13 21:55 - 2019-08-13 21:55 - 000349696 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000346624 _____ (Microsoft Corporation) C:\Windows\system32\ncryptprov.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000329216 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.SystemManagement.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000305664 _____ (Microsoft Corporation) C:\Windows\system32\wc_storage.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000294512 _____ (Microsoft Corporation) C:\Windows\system32\skci.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000281600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptprov.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000278624 _____ (Microsoft Corporation) C:\Windows\system32\LsaIso.exe
2019-08-13 21:55 - 2019-08-13 21:55 - 000270848 _____ (Microsoft Corporation) C:\Windows\system32\WpcTok.exe
2019-08-13 21:55 - 2019-08-13 21:55 - 000257024 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicCapsule.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000253256 _____ (Microsoft Corporation) C:\Windows\system32\logoncli.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000241664 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupManager.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000230848 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000227840 _____ (Microsoft Corporation) C:\Windows\system32\MicrosoftAccountTokenProvider.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000212792 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2019-08-13 21:55 - 2019-08-13 21:55 - 000203064 _____ (Microsoft Corporation) C:\Windows\system32\tcbloader.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000200504 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_SIUF.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000197632 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000193040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2019-08-13 21:55 - 2019-08-13 21:55 - 000189712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logoncli.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000180224 _____ (Microsoft Corporation) C:\Windows\system32\wuuhosdeployment.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000178176 _____ (Microsoft Corporation) C:\Windows\system32\appsruprov.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000152408 _____ (Microsoft Corporation) C:\Windows\system32\KerbClientShared.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000145408 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000141736 _____ (Microsoft Corporation) C:\Windows\system32\wldp.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000120832 _____ (Microsoft Corporation) C:\Windows\system32\updatecsp.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000118480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wldp.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2019-08-13 21:55 - 2019-08-13 21:55 - 000108544 _____ (Microsoft Corporation) C:\Windows\system32\usoapi.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000108544 _____ (Microsoft Corporation) C:\Windows\system32\drvsetup.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000104248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bindflt.sys
2019-08-13 21:55 - 2019-08-13 21:55 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\DiskSnapshot.exe
2019-08-13 21:55 - 2019-08-13 21:55 - 000080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dtdump.exe
2019-08-13 21:55 - 2019-08-13 21:55 - 000071168 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\hmkd.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000048128 _____ (Microsoft Corporation) C:\Windows\system32\UsoClient.exe
2019-08-13 21:55 - 2019-08-13 21:55 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\WindowsUpdateElevatedInstaller.exe
2019-08-13 21:55 - 2019-08-13 21:55 - 000027136 _____ (Microsoft Corporation) C:\Windows\system32\kdcpw.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2019-08-13 21:55 - 2019-08-13 21:55 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2019-08-13 21:55 - 2019-08-13 21:55 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2019-08-13 21:55 - 2019-08-13 21:55 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2019-08-13 21:55 - 2019-08-13 21:55 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2019-08-13 21:55 - 2019-08-13 21:55 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2019-08-13 21:55 - 2019-08-13 21:55 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2019-08-13 21:55 - 2019-08-13 21:55 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2019-08-13 21:55 - 2019-08-13 21:55 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
2019-08-13 21:54 - 2019-08-13 21:55 - 007687784 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2019-08-13 21:54 - 2019-08-13 21:54 - 002706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2019-08-13 21:54 - 2019-08-13 21:54 - 002031104 _____ C:\Windows\system32\rdpnano.dll
2019-08-13 21:54 - 2019-08-13 21:54 - 002022096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2019-08-13 21:54 - 2019-08-13 21:54 - 001662264 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2019-08-13 21:54 - 2019-08-13 21:54 - 001294488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2019-08-13 21:54 - 2019-08-13 21:54 - 001253688 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2019-08-13 21:54 - 2019-08-13 21:54 - 001232384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2019-08-13 21:54 - 2019-08-13 21:54 - 001048376 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2019-08-13 21:54 - 2019-08-13 21:54 - 000853504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2019-08-13 21:54 - 2019-08-13 21:54 - 000788480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2019-08-13 21:54 - 2019-08-13 21:54 - 000652088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2019-08-13 21:54 - 2019-08-13 21:54 - 000310072 _____ (Microsoft Corporation) C:\Windows\system32\computestorage.dll
2019-08-13 21:54 - 2019-08-13 21:54 - 000248120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2019-08-13 21:54 - 2019-08-13 21:54 - 000161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll
2019-08-13 21:54 - 2019-08-13 21:54 - 000134968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scmbus.sys
2019-08-13 21:54 - 2019-08-13 21:54 - 000125016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KerbClientShared.dll
2019-08-13 21:54 - 2019-08-13 21:54 - 000117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pmem.sys
2019-08-13 21:54 - 2019-08-13 21:54 - 000092672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2019-08-13 21:54 - 2019-08-13 21:54 - 000087056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winhvr.sys
2019-08-13 21:54 - 2019-08-13 21:54 - 000032784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winhv.sys
2019-08-13 21:54 - 2019-08-13 21:54 - 000032568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\uefi.sys
2019-08-09 18:01 - 2019-08-09 19:37 - 1059823826 _____ C:\Users\Jiří Macháček\Downloads\Beze stop (drama - 2018) CZ.avi
2019-08-09 11:21 - 2019-08-09 12:19 - 1068845270 _____ C:\Users\Jiří Macháček\Downloads\Vdovy-Widows-2018-CZ-dabing.mkv
2019-08-07 20:33 - 2019-08-07 20:33 - 028067064 _____ C:\Users\Jiří Macháček\Downloads\hypermarket-32-2019.pdf
2019-08-07 17:39 - 2019-08-07 19:10 - 1004050180 _____ C:\Users\Jiří Macháček\Downloads\Černobyl 05-2019,CZ dabing,(Angel).avi
2019-08-07 15:13 - 2019-08-07 15:12 - 000158829 _____ C:\Users\Jiří Macháček\Downloads\sporici_ucet_smlouva (2).pdf
2019-08-07 15:05 - 2019-08-07 15:05 - 000158829 _____ C:\Users\Jiří Macháček\Downloads\sporici_ucet_smlouva (1).pdf
2019-08-07 15:00 - 2019-08-07 16:35 - 1049364966 _____ C:\Users\Jiří Macháček\Downloads\Černobyl 04-2019,CZ dabing,(Angel).avi
2019-08-06 17:51 - 2019-08-06 18:59 - 754006074 _____ C:\Users\Jiří Macháček\Downloads\Černobyl 03-2019,CZ dabing,(Angel).avi
2019-08-05 20:24 - 2019-08-05 21:40 - 841505392 _____ C:\Users\Jiří Macháček\Downloads\Psi-poslani-2017-CZ-Dabing-Rodinny.avi
2019-08-05 14:53 - 2019-08-05 18:58 - 2712265737 _____ C:\Users\Jiří Macháček\Downloads\Mamma Mia 2 cz dab. novinka novinky Dj.mkv
2019-08-04 17:03 - 2019-08-04 17:03 - 000158829 _____ C:\Users\Jiří Macháček\Downloads\sporici_ucet_smlouva.pdf
2019-08-04 16:54 - 2019-08-04 16:54 - 000272674 _____ C:\Users\Jiří Macháček\Downloads\Oznámení o úrokových sazbách.pdf
2019-08-04 16:51 - 2019-08-04 16:51 - 000271400 _____ C:\Users\Jiří Macháček\Downloads\Sazebník poplatků k depozitům a souvisejícím službám (1).pdf
2019-08-04 16:47 - 2019-08-04 16:47 - 000164033 _____ C:\Users\Jiří Macháček\Downloads\Obchodní podmínky pro Spořicí účet +.pdf
==================== One month (modified) ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-09-01 13:24 - 2019-03-01 17:55 - 000000000 ____D C:\Windows\system32\SleepStudy
2019-09-01 13:24 - 2018-09-15 09:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-09-01 10:13 - 2019-03-20 15:43 - 000000000 ____D C:\Users\Jiří Macháček\AppData\Local\AVAST Software
2019-09-01 10:11 - 2019-03-01 18:33 - 000000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2019-09-01 10:11 - 2019-03-01 18:33 - 000000000 __SHD C:\Users\Jiří Macháček\IntelGraphicsProfiles
2019-08-31 15:45 - 2018-09-15 09:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-08-31 15:45 - 2018-09-15 09:33 - 000000000 ____D C:\Windows\AppReadiness
2019-08-31 15:38 - 2019-03-20 15:40 - 000004264 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2019-08-30 22:55 - 2019-03-01 19:33 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-08-30 18:20 - 2018-09-15 09:31 - 000000000 ____D C:\Windows\INF
2019-08-30 15:22 - 2019-03-01 17:55 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-08-30 15:21 - 2018-09-15 08:09 - 000524288 _____ C:\Windows\system32\config\BBI
2019-08-30 15:20 - 2019-03-03 15:23 - 000000000 ____D C:\Program Files\CCleaner
2019-08-29 20:19 - 2019-03-01 18:26 - 000003396 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2481005043-3210856148-3389040519-1001
2019-08-29 20:19 - 2019-03-01 18:26 - 000000000 ___RD C:\Users\Jiří Macháček\OneDrive
2019-08-29 20:19 - 2019-03-01 18:20 - 000002389 _____ C:\Users\Jiří Macháček\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-08-29 20:17 - 2019-03-01 20:00 - 000000000 ____D C:\Users\Jiří Macháček\Documents\Cestování
2019-08-28 12:11 - 2019-04-28 13:20 - 000003482 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2019-08-28 12:11 - 2019-03-20 15:41 - 000000000 ____D C:\Windows\System32\Tasks\Avast Software
2019-08-28 12:11 - 2019-03-03 15:23 - 000003194 _____ C:\Windows\System32\Tasks\CCleaner Update
2019-08-28 12:11 - 2019-03-03 15:23 - 000002238 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2019-08-28 12:11 - 2019-03-01 19:33 - 000003400 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2019-08-28 12:11 - 2019-03-01 19:33 - 000003176 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2019-08-27 18:21 - 2019-03-01 20:04 - 000000000 ____D C:\Users\Jiří Macháček\Documents\Různé
2019-08-24 17:59 - 2019-04-28 13:19 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2019-08-14 17:52 - 2019-03-01 18:09 - 001606102 _____ C:\Windows\system32\PerfStringBackup.INI
2019-08-14 17:52 - 2018-09-15 19:32 - 000685036 _____ C:\Windows\system32\perfh005.dat
2019-08-14 17:52 - 2018-09-15 19:32 - 000137702 _____ C:\Windows\system32\perfc005.dat
2019-08-14 17:48 - 2019-03-01 18:21 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-08-14 17:48 - 2019-03-01 18:21 - 000000000 ___RD C:\Users\Jiří Macháček\3D Objects
2019-08-14 17:45 - 2019-03-01 17:55 - 000369392 _____ C:\Windows\system32\FNTCACHE.DAT
2019-08-13 23:36 - 2018-09-15 09:33 - 000000000 ____D C:\Windows\SysWOW64\oobe
2019-08-13 23:35 - 2018-09-15 09:33 - 000000000 ___SD C:\Windows\system32\UNP
2019-08-13 23:35 - 2018-09-15 09:33 - 000000000 ____D C:\Windows\system32\oobe
2019-08-13 23:35 - 2018-09-15 09:33 - 000000000 ____D C:\Windows\Provisioning
2019-08-13 23:35 - 2018-09-15 09:33 - 000000000 ____D C:\Windows\bcastdvr
2019-08-13 22:17 - 2019-03-01 21:53 - 000000000 ____D C:\Windows\system32\MRT
2019-08-13 22:08 - 2019-03-01 21:53 - 134272480 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-08-13 22:06 - 2018-09-15 09:23 - 000000000 ____D C:\Windows\CbsTemp
2019-08-12 18:34 - 2019-03-01 18:33 - 000000200 _____ C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2019-08-06 08:24 - 2018-08-31 12:42 - 000035392 _____ (HP) C:\Windows\system32\Drivers\WirelessButtonDriver64.sys
2019-08-05 15:29 - 2019-03-20 15:39 - 000387688 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
==================== SigCheck ===============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-08-2019
Ran by Jiří Macháček (01-09-2019 13:38:46)
Running from C:\Users\Jiří Macháček\Downloads
Windows 10 Home Version 1809 17763.678 (X64) (2019-03-01 16:07:15)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2481005043-3210856148-3389040519-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2481005043-3210856148-3389040519-503 - Limited - Disabled)
Guest (S-1-5-21-2481005043-3210856148-3389040519-501 - Limited - Disabled)
Jiří Macháček (S-1-5-21-2481005043-3210856148-3389040519-1001 - Administrator - Enabled) => C:\Users\Jiří Macháček
WDAGUtilityAccount (S-1-5-21-2481005043-3210856148-3389040519-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 19.012.20040 - Adobe Systems Incorporated)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 19.6.2383 - AVAST Software)
CCleaner (HKLM\...\CCleaner) (Version: 5.60 - Piriform)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.8.7041 - CDBurnerXP)
Common Desktop Agent (HKLM\...\{031A0E14-0413-4C97-9772-2639B782F46F}) (Version: 1.62.0 - OEM) Hidden
Google Chrome (HKLM\...\{FB57C140-533A-3441-B7D2-9EC87EC1B6D2}) (Version: 76.0.3809.132 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.11 - Google LLC) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.5070 - Intel Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2481005043-3210856148-3389040519-1001\...\OneDriveSetup.exe) (Version: 19.152.0801.0007 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 60.5.2 - Mozilla)
Mozilla Thunderbird 60.8.0 (x86 cs) (HKLM-x32\...\Mozilla Thunderbird 60.8.0 (x86 cs)) (Version: 60.8.0 - Mozilla)
PDF Architect 6 (HKLM-x32\...\PDF Architect 6) (Version: 6.1.19.842 - pdfforge GmbH)
PDF Architect 6 Create Module (HKLM\...\{8B12EDA8-95B0-4085-B5CB-5A725B84CC7D}) (Version: 6.1.25.1863 - pdfforge GmbH) Hidden
PDF Architect 6 Edit Module (HKLM\...\{AF908FBA-0B18-4B70-B541-43F8289A4E4D}) (Version: 6.1.25.1863 - pdfforge GmbH) Hidden
PDF Architect 6 View Module (HKLM\...\{5A2AC1A0-C736-4689-9031-2E1915526F48}) (Version: 6.1.25.1863 - pdfforge GmbH) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 3.4.0 - pdfforge GmbH)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.255 - Google, Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8544 - Realtek Semiconductor Corp.)
Samsung C410 Series (HKLM-x32\...\Samsung C410 Series) (Version: 1.11 (19.08.2014) - Samsung Electronics Co., Ltd.)
Samsung Easy Printer Manager (HKLM-x32\...\Samsung Easy Printer Manager) (Version: 1.05.47.00(30.05.2014) - Samsung Electronics Co., Ltd.)
Samsung Easy Wireless Setup (HKLM-x32\...\Easy Wireless Setup) (Version: 3.60.52.0 - Samsung Electronics Co., Ltd.)
Samsung Printer Diagnostics (HKLM-x32\...\Samsung Printer Diagnostics) (Version: 1.0.0.17 - Samsung Electronics Co., Ltd.)
Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Stellarium 0.19.0.1 (HKLM\...\Stellarium_is1) (Version: 0.19.0.1 - Stellarium team)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.31 - Synaptics Incorporated)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.21a - Ghisler Software GmbH)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.7.1 - VideoLAN)
Zobrazit uživatelskou příručku (HKLM-x32\...\View User Guide) (Version: 3.60.43.0 - )
Packages:
=========
Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.19.5.0_x86__kgqvnymyfvs32 [2019-08-20] (king.com)
Candy Crush Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.1581.2.0_x86__kgqvnymyfvs32 [2019-08-24] (king.com)
Cooking Fever -> C:\Program Files\WindowsApps\NORDCURRENT.COOKINGFEVER_5.0.0.3_x86__m9bz608c1b9ra [2019-06-11] (Nordcurrent)
Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_2.4.521.0_x64__rz1tebttyb220 [2019-03-12] (Dolby Laboratories)
Fitbit Coach -> C:\Program Files\WindowsApps\Fitbit.FitbitCoach_4.4.133.0_x64__6mqt6hf9g46tw [2019-03-01] (Fitbit)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-03-01] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-03-01] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe [2019-08-31] (Microsoft Studios) [MS Ad]
Microsoft Zprávy -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.31.12124.0_x64__8wekyb3d8bbwe [2019-08-07] (Microsoft Corporation) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.31.11905.0_x64__8wekyb3d8bbwe [2019-07-21] (Microsoft Corporation) [MS Ad]
Phototastic Collage -> C:\Program Files\WindowsApps\ThumbmunkeysLtd.PhototasticCollage_2.2.9.0_x64__nfy108tqq3p12 [2019-03-01] (Thumbmunkeys Ltd) [MS Ad]
Pošta a Kalendář -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11901.20184.0_x64__8wekyb3d8bbwe [2019-08-02] (Microsoft Corporation) [MS Ad]
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2481005043-3210856148-3389040519-1001_Classes\CLSID\{C591CFEA-E432-495d-A0BE-58E4CCD87B17}\Shell\Open\Command -> C:\Program Files\Synaptics\SynTP\SynTPCpl.dll (Synaptics Incorporated -> Synaptics Incorporated)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-07-22] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-07-22] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [PDFArchitect6_ManagerExt] -> {6508EEA0-C540-4420-AF21-64937A1536D0} => C:\Program Files\PDF Architect 6\context-menu.dll [2019-03-07] (pdfforge GmbH -> pdfforge GmbH)
ContextMenuHandlers1: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => C:/Program Files/PDFCreator/PDFCreatorShell.DLL [2018-11-13] (pdfforge GmbH -> pdfforge GmbH)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-07-22] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\system32\igfxDTCM.dll [2019-03-18] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-07-22] (AVAST Software s.r.o. -> AVAST Software)
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2019-03-01 19:34 - 2019-02-21 18:00 - 000078336 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll
2019-03-20 15:34 - 2019-03-20 15:34 - 000116736 _____ (pdfforge GmbH) [File not signed] C:\Windows\System32\pdfcmon.dll
2013-11-26 11:07 - 2013-11-26 11:07 - 000112128 _____ (Samsung Electronics Co., Ltd.) [File not signed] C:\Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\CDAKEYMonitor.dll
2018-03-30 19:48 - 2018-03-30 19:48 - 000428032 _____ (The curl library, hxxps://curl.haxx.se/) [File not signed] C:\Program Files\PDF Architect 6\libcurl.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2018-09-15 09:31 - 2018-09-15 09:31 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2481005043-3210856148-3389040519-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Jiří Macháček\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\_MG_6216.jpg
DNS Servers: 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
If an entry is included in the fixlist, it will be removed.
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{32C5F584-92C6-49D3-8C6F-292A059B77C8}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{5F608F65-B5DF-4EF0-9E41-AA09E5E3AD93}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{8983E055-AA42-4B47-BD0A-CB7C388B24C5}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\IDS.Application.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
FirewallRules: [{42F5401D-49D3-4104-8E6E-A6458EAEAA7D}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\IDS.Application.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
FirewallRules: [{A9CA0F06-B671-4683-B522-C318E30DCE31}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\OrderSupplies.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
FirewallRules: [{8950BDD5-85DE-420F-8914-CAEBA5BA8AFD}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\OrderSupplies.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
FirewallRules: [{28900589-4C94-4514-9E58-46FA51034A55}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\IDSAlert.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
FirewallRules: [{F3E1930D-CBC6-4F6A-8A28-1C24E698FCAD}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\IDSAlert.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
FirewallRules: [{D1B62EB2-507B-4C94-A8A5-6205E74D7F27}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\uninstall.exe (Samsung Electronics Co., Ltd.) [File not signed]
FirewallRules: [{3CB41172-F760-4012-853C-AA244611C057}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\uninstall.exe (Samsung Electronics Co., Ltd.) [File not signed]
FirewallRules: [{D5924E53-EF7C-4BFF-AE4E-6758F9EEDD3E}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\CDAS2PC.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
FirewallRules: [{E3FCC859-B021-4976-95D6-F3C3AE22B209}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\CDAS2PC.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
FirewallRules: [{D2C6273B-826A-4F07-8995-B487AB915847}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\ScanProcess.exe (Samsung Electronics CO., LTD. -> ScanProcess)
FirewallRules: [{5E629ADF-2B65-48F8-A16B-A4FA06B5E23B}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\ScanProcess.exe (Samsung Electronics CO., LTD. -> ScanProcess)
FirewallRules: [{E8691B25-8A55-4335-8194-F6B348D320A7}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\Scan2PCNotify.exe (Samsung Electronics CO., LTD. -> Scan2PCNotify)
FirewallRules: [{CAD3930D-F46F-4708-BC9F-BD5CE0221CB6}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\Scan2PCNotify.exe (Samsung Electronics CO., LTD. -> Scan2PCNotify)
FirewallRules: [{01D35B34-E727-4921-8C13-9914D5D25995}] => (Allow) C:\Program Files (x86)\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{800FCDA1-124F-4143-B0BB-9A8D82EEDA1E}] => (Allow) C:\Program Files (x86)\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{3FB41857-2413-4EEB-AC12-AECCCA584DC2}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
==================== Restore Points =========================
13-08-2019 22:06:19 Windows Update
25-08-2019 21:26:09 Naplánovaný kontrolní bod
30-08-2019 18:19:24 Windows Update
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (08/30/2019 03:20:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: CCleaner64.exe, verze: 5.60.0.7307, časové razítko: 0x5d271d04
Název chybujícího modulu: CCleaner64.exe, verze: 5.60.0.7307, časové razítko: 0x5d271d04
Kód výjimky: 0xc0000005
Posun chyby: 0x000000000084e3f2
ID chybujícího procesu: 0x1460
Čas spuštění chybující aplikace: 0x01d55f3555d184ff
Cesta k chybující aplikaci: C:\Program Files\CCleaner\CCleaner64.exe
Cesta k chybujícímu modulu: C:\Program Files\CCleaner\CCleaner64.exe
ID zprávy: 47900118-0770-4a65-a232-ee9ae7ee46b0
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (08/21/2019 08:04:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: chrome.exe, verze: 76.0.3809.100, časové razítko: 0x5d47b7d0
Název chybujícího modulu: ntdll.dll, verze: 10.0.17763.592, časové razítko: 0x0f1b8afd
Kód výjimky: 0xc0000374
Posun chyby: 0x00000000000fb049
ID chybujícího procesu: 0x1db4
Čas spuštění chybující aplikace: 0x01d5584ad8ece0b9
Cesta k chybující aplikaci: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: f9da3254-5858-4f85-8f6e-e666666a0459
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (08/14/2019 05:47:07 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT AUTHORITY)
Description: Uživatelský podregistr načetl jiný proces (zámek registru). Název procesu: C:\Program Files\AVAST Software\Avast\AvastSvc.exe, identifikátor PID: 2752, identifikátor PID ProfSvc: 1796.
Error: (08/12/2019 06:35:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: dwm.exe, verze: 10.0.17763.1, časové razítko: 0xe52aabf3
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xe0464645
Posun chyby: 0x0000000000000000
ID chybujícího procesu: 0x100c
Čas spuštění chybující aplikace: 0x01d5508a5953c3ee
Cesta k chybující aplikaci: C:\Windows\System32\dwm.exe
Cesta k chybujícímu modulu: unknown
ID zprávy: 6b536a5e-aece-4c44-bd75-83cae94aec04
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (07/14/2019 11:44:20 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program MicrosoftEdgeCP.exe verze 11.0.17763.1 přestal spolupracovat s Windows a byl ukončen. Pokud chcete zjistit, jestli je k dispozici více informací o tomto problému, vyhledejte historii problému na ovládacím panelu Zabezpečení a údržba.
ID procesu: 1d88
Čas spuštění: 01d53a6405bfb43a
Čas ukončení: 62
Cesta k aplikaci: C:\Windows\System32\MicrosoftEdgeCP.exe
ID hlášení: 56e42a23-6e57-43a3-9f35-d31ac218876d
Úplný název balíčku s chybou: Microsoft.MicrosoftEdge_44.17763.1.0_neutral__8wekyb3d8bbwe
ID aplikace relativní podle balíčku s chybou: MicrosoftEdge
Typ zablokování: Unknown
Error: (07/13/2019 07:18:48 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT AUTHORITY)
Description: Uživatelský podregistr načetl jiný proces (zámek registru). Název procesu: C:\Windows\System32\svchost.exe, identifikátor PID: 5428, identifikátor PID ProfSvc: 1628.
Error: (07/13/2019 07:18:48 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT AUTHORITY)
Description: Uživatelský podregistr načetl jiný proces (zámek registru). Název procesu: C:\Program Files\AVAST Software\Avast\AvastSvc.exe, identifikátor PID: 2764, identifikátor PID ProfSvc: 1628.
Error: (06/28/2019 07:14:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: CCleaner64.exe, verze: 5.56.0.7144, časové razítko: 0x5ca5e44d
Název chybujícího modulu: CCleaner64.exe, verze: 5.56.0.7144, časové razítko: 0x5ca5e44d
Kód výjimky: 0xc0000005
Posun chyby: 0x00000000008087f6
ID chybujícího procesu: 0x1a58
Čas spuštění chybující aplikace: 0x01d52dd39b4c4e4a
Cesta k chybující aplikaci: C:\Program Files\CCleaner\CCleaner64.exe
Cesta k chybujícímu modulu: C:\Program Files\CCleaner\CCleaner64.exe
ID zprávy: e805bdb8-012f-4d49-bbe4-9cdadcf91d55
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
System errors:
=============
Error: (09/01/2019 01:24:45 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-57I8TQT)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
a APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
uživateli DESKTOP-57I8TQT\Jiří Macháček (SID: S-1-5-21-2481005043-3210856148-3389040519-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.
Error: (09/01/2019 10:11:25 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
a APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
uživateli NT AUTHORITY\LOCAL SERVICE (SID: S-1-5-19) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.
Error: (09/01/2019 10:11:25 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
a APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
uživateli NT AUTHORITY\LOCAL SERVICE (SID: S-1-5-19) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.
Error: (08/31/2019 06:16:14 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-57I8TQT)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
a APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
uživateli DESKTOP-57I8TQT\Jiří Macháček (SID: S-1-5-21-2481005043-3210856148-3389040519-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.
Error: (08/31/2019 03:59:43 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-57I8TQT)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
a APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
uživateli DESKTOP-57I8TQT\Jiří Macháček (SID: S-1-5-21-2481005043-3210856148-3389040519-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.
Error: (08/31/2019 03:37:22 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
a APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
uživateli NT AUTHORITY\LOCAL SERVICE (SID: S-1-5-19) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.
Error: (08/31/2019 03:37:22 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
a APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
uživateli NT AUTHORITY\LOCAL SERVICE (SID: S-1-5-19) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.
Error: (08/30/2019 05:11:38 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-57I8TQT)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
a APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
uživateli DESKTOP-57I8TQT\Jiří Macháček (SID: S-1-5-21-2481005043-3210856148-3389040519-1001) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.
Windows Defender:
===================================
Date: 2019-03-15 16:24:19.780
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {8383948E-4AA8-4507-BF17-795694D60700}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2019-03-15 16:09:55.358
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {D5212B2F-5940-4FF5-BED9-4B73C7D2A8F1}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2019-03-15 00:08:41.056
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {FECA6ECC-A7B4-4460-8A9D-FA3FC48A8698}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2019-03-03 15:51:24.669
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {002D386C-2108-40A5-B364-1A33B7B7FF3B}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2019-03-03 15:25:34.522
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {6A52D2BD-32E8-4CC4-B4AB-24065A5F59B7}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM
Date: 2019-03-12 19:47:45.047
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo chybu při pokusu o aktualizaci podpisů.
Nová verze podpisu:
Předchozí verze podpisu: 1.289.885.0
Zdroj aktualizace: Server Microsoft Update
Typ podpisu: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\SYSTEM
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15700.9
Kód chyby: 0x80240016
Popis chyby
ři zjišťování aktualizací došlo k neočekávaným potížím. Informace o instalaci nebo řešení potíží s aktualizacemi naleznete v nápovědě a podpoře. CodeIntegrity:
===================================
Date: 2019-08-30 15:23:40.968
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-08-30 15:23:40.962
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-08-30 15:23:40.939
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-08-30 15:23:40.932
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-08-14 17:45:39.917
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-08-14 17:45:39.872
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-08-14 17:45:39.848
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-08-14 17:45:39.842
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
BIOS: Insyde F.24 09/25/2017
Motherboard: HP 832C
Processor: Intel(R) Celeron(R) CPU N3060 @ 1.60GHz
Percentage of memory in use: 66%
Total physical RAM: 4001.67 MB
Available physical RAM: 1351.73 MB
Total Virtual: 5229.42 MB
Available Virtual: 1891.95 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:465.22 GB) (Free:296.39 GB) NTFS
\\?\Volume{7ebf80cd-0000-0000-0000-100000000000}\ (Rezervováno systémem) (Fixed) (Total:0.54 GB) (Free:0.5 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 7EBF80CD)
Partition 1: (Active) - (Size=549 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.2 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================
Přispějete na provoz fóra?