Prosim o kontrolu

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
sasa.eu
Návštěvník
Návštěvník
Příspěvky: 42
Registrován: 08 Lis 2008 20:15

Prosim o kontrolu

#1 Příspěvek od sasa.eu »

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-02-2020
Ran by sasac (administrator) on DESKTOP-SD882H2 (Dell Inc. Precision T3600) (20-02-2020 23:28:12)
Running from C:\Users\sasac\Downloads
Loaded Profiles: sasac (Available Profiles: sasac)
Platform: Windows 10 Pro Version 1909 18363.657 (X64) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.exe
(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.exe
(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.exe
(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.exe
(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.6926\Agent.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(GOG Sp. z o.o. -> GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe
(GOG Sp. z o.o. -> GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe
(GOG Sp. z o.o. -> GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe
(GOG Sp. z o.o. -> GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe
(GOG Sp. z o.o. -> GOG.com) C:\Program Files (x86)\GOG Galaxy\GOG Galaxy Notifications Renderer.exe
(GOG Sp. z o.o. -> GOG.com) C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.442\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.442\GoogleCrashHandler64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\sasac\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_3.37.29002.0_x64__8wekyb3d8bbwe\GameBar.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_3.37.29002.0_x64__8wekyb3d8bbwe\GameBarFT.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_3.37.29002.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.20011.10711.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2001.7-0\MsMpEng.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [183088 2019-11-29] (ESET, spol. s r.o. -> ESET)
HKU\S-1-5-21-1527743807-1357318293-839389191-1001\...\Run: [Battle.net] => C:\Program Files (x86)\Battle.net\Battle.net.exe [1109152 2020-01-29] (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
HKU\S-1-5-21-1527743807-1357318293-839389191-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3365840 2020-02-11] (Valve -> Valve Corporation)
HKU\S-1-5-21-1527743807-1357318293-839389191-1001\...\Run: [GalaxyClient] => [X]
HKU\S-1-5-21-1527743807-1357318293-839389191-1001\...\Run: [launchOnStartup] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [7955016 2020-01-23] (GOG Sp. z o.o. -> GOG.com)
HKU\S-1-5-21-1527743807-1357318293-839389191-1001\...\Run: [Discord] => C:\Users\sasac\AppData\Local\Discord\app-0.0.305\Discord.exe [81780056 2019-03-07] (Discord Inc. -> Discord Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.130\Installer\chrmstp.exe [2020-01-16] (Google LLC -> Google LLC)
GroupPolicy: Restriction ? <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {094A614A-1724-4B53-9232-DA059F8A2589} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [653848 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3E6AFB76-650E-4565-988E-82ADFD1C542E} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [914456 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {56C4D7AC-67FD-454E-B9B1-55DF00125938} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5979769E-21F3-4038-8ECE-2BF797FDCBE7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.7-0\MpCmdRun.exe [473544 2020-02-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5C086176-B707-4D85-92D2-3DEF9DB0B509} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2019-11-26] (Google Inc -> Google LLC)
Task: {5E5BF38B-E1FB-4B33-8763-4466961F2497} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3302880 2019-12-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {692AB762-7BF8-416D-8AD0-4A1794D353B3} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6DA53360-2B29-4E24-94DA-004301A8326F} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [914456 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {83243ABD-41F2-4F12-8568-5FF095FEB61C} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2019-12-05] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {8FFA0082-DEC3-44FD-82DA-DDBE877D9CA5} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {936D4D41-BB08-4E41-BE53-DBAC120A7778} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.7-0\MpCmdRun.exe [473544 2020-02-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9BC349B3-E7F8-440D-A914-399330FF211D} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2019-12-05] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A357F028-20C9-4489-ABA8-C4243774801B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.7-0\MpCmdRun.exe [473544 2020-02-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A694238B-A0B7-4EBC-9223-7150B63EFA72} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2019-11-26] (Google Inc -> Google LLC)
Task: {F5A3FD3E-5FB9-4F95-AC6D-7975764433E4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.7-0\MpCmdRun.exe [473544 2020-02-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F9D11EDE-64C8-4B73-B7AE-3067DFCA1FD3} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37
Tcpip\..\Interfaces\{8b85dd98-1342-4cd5-acf4-116253451089}: [DhcpNameServer] 213.46.172.36 213.46.172.37

Internet Explorer:
==================
HKU\S-1-5-21-1527743807-1357318293-839389191-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP
SearchScopes: HKU\S-1-5-21-1527743807-1357318293-839389191-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

Edge:
======
DownloadDir: C:\Users\sasac\Downloads
Edge Notifications: HKU\S-1-5-21-1527743807-1357318293-839389191-1001 -> hxxps://web.skype.com

Chrome:
=======
CHR Profile: C:\Users\sasac\AppData\Local\Google\Chrome\User Data\Default [2020-02-20]
CHR Notifications: Default -> hxxps://www.facebook.com
CHR Extension: (Prezentace) - C:\Users\sasac\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-11-26]
CHR Extension: (Dokumenty) - C:\Users\sasac\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-11-26]
CHR Extension: (Disk Google) - C:\Users\sasac\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-11-26]
CHR Extension: (YouTube) - C:\Users\sasac\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-11-26]
CHR Extension: (Tabulky) - C:\Users\sasac\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-11-26]
CHR Extension: (Dokumenty Google offline) - C:\Users\sasac\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-01-15]
CHR Extension: (Auto Refresh) - C:\Users\sasac\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifooldnmmcmlbdennkpdnlnbgbmfalko [2020-01-22]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\sasac\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-11-26]
CHR Extension: (Gmail) - C:\Users\sasac\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-11-26]
CHR Extension: (Chrome Media Router) - C:\Users\sasac\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-12-12]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [777856 2020-01-28] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2245488 2019-11-29] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [2245488 2019-11-29] (ESET, spol. s r.o. -> ESET)
S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [1218632 2020-01-23] (GOG Sp. z o.o. -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6617160 2020-01-23] (GOG Sp. z o.o. -> GOG.com)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2019-12-05] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2019-12-05] (NVIDIA Corporation -> NVIDIA Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5796168 2019-09-09] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 uncheater_bgl; C:\Program Files\Common Files\Uncheater\uncheater_bgl.exe [2097008 2020-01-28] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.7-0\NisSrv.exe [3284840 2020-02-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.7-0\MsMpEng.exe [103168 2020-02-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 e1cexpress; C:\Windows\system32\DRIVERS\e1c65x64.sys [488736 2015-08-03] (Intel(R) Intel Network Drivers -> Intel Corporation)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [149944 2019-11-29] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [103264 2019-11-29] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [15800 2019-10-16] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [189512 2019-11-29] (ESET, spol. s r.o. -> ESET)
S2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [50712 2019-11-29] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [79744 2019-11-29] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [116696 2019-11-29] (ESET, spol. s r.o. -> ESET)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_9e532b5f619dc909\nvlddmkm.sys [23276960 2020-01-31] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30336 2019-12-07] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [69840 2019-04-17] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [75600 2019-08-23] (NVIDIA Corporation -> NVIDIA Corporation)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [45960 2020-02-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [376032 2020-02-04] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [53984 2020-02-04] (Microsoft Windows -> Microsoft Corporation)
S3 xhunter1; C:\Windows\xhunter1.sys [74552 2020-01-28] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-02-20 23:28 - 2020-02-20 23:28 - 000019952 _____ C:\Users\sasac\Downloads\FRST.txt
2020-02-20 23:15 - 2020-02-20 23:15 - 001222144 _____ C:\Users\sasac\Downloads\RSITx64.exe
2020-02-20 23:11 - 2020-02-20 23:28 - 000000000 ____D C:\FRST
2020-02-20 23:11 - 2020-02-20 23:11 - 002279424 _____ (Farbar) C:\Users\sasac\Downloads\FRST64.exe
2020-02-20 22:58 - 2020-02-20 22:59 - 112859648 _____ (Logitech Inc.) C:\Users\sasac\Downloads\LGS_9.00.42_x86_Logitech.exe
2020-02-20 22:43 - 2020-02-20 22:43 - 000002016 _____ C:\Users\Public\Desktop\ESET Ochrana bankovnictví a online plateb.lnk
2020-02-20 22:34 - 2020-02-20 22:34 - 000000000 ____D C:\Users\sasac\AppData\Local\ESET
2020-02-20 22:33 - 2020-02-20 22:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2020-02-20 22:33 - 2020-02-20 22:33 - 000000000 ____D C:\ProgramData\ESET
2020-02-20 22:33 - 2020-02-20 22:33 - 000000000 ____D C:\Program Files\ESET
2020-02-20 22:29 - 2020-02-20 22:29 - 005504824 _____ (ESET) C:\Users\sasac\Downloads\eset_internet_security_live_installer.exe
2020-02-20 22:26 - 2020-02-20 22:26 - 000000000 ___HD C:\OneDriveTemp
2020-02-18 16:47 - 2020-02-18 16:47 - 000000422 __RSH C:\ProgramData\ntuser.pol
2020-02-18 16:01 - 2020-02-18 16:01 - 000000000 ____D C:\Windows\LastGood.Tmp
2020-02-18 15:59 - 2020-01-31 00:04 - 001729232 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe
2020-02-18 15:59 - 2020-01-31 00:04 - 001729232 _____ C:\Windows\system32\vulkaninfo.exe
2020-02-18 15:59 - 2020-01-31 00:04 - 001329360 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2020-02-18 15:59 - 2020-01-31 00:04 - 001329360 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2020-02-18 15:59 - 2020-01-31 00:04 - 001078992 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll
2020-02-18 15:59 - 2020-01-31 00:04 - 001078992 _____ C:\Windows\system32\vulkan-1.dll
2020-02-18 15:59 - 2020-01-31 00:04 - 000937680 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll
2020-02-18 15:59 - 2020-01-31 00:04 - 000937680 _____ C:\Windows\SysWOW64\vulkan-1.dll
2020-02-18 15:59 - 2020-01-31 00:04 - 000450576 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2020-02-18 15:59 - 2020-01-31 00:04 - 000353160 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2020-02-18 15:59 - 2020-01-31 00:03 - 011843504 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2020-02-18 15:59 - 2020-01-31 00:03 - 010167544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 017462616 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 005384584 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 004718792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 002075904 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 001727320 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6444219.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 001569160 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 001490688 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6444219.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 001485688 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 001370360 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 001145776 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 001064384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 000825720 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 000815120 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 000685912 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 000677584 _____ C:\Windows\system32\nvofapi64.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 000557304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 000545112 _____ C:\Windows\SysWOW64\nvofapi.dll
2020-02-18 15:58 - 2020-01-31 00:01 - 040511408 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2020-02-18 15:58 - 2020-01-31 00:01 - 035380120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2020-02-18 15:58 - 2020-01-31 00:01 - 015031808 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2020-02-18 15:58 - 2020-01-30 23:58 - 004230752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2020-02-17 12:04 - 2020-02-17 12:04 - 000649766 _____ C:\Users\sasac\Downloads\2201180055.pdf
2020-02-12 01:23 - 2020-02-12 01:23 - 000000000 ____D C:\ProgramData\ssh
2020-02-12 00:18 - 2020-02-12 00:18 - 005502464 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2020-02-12 00:18 - 2020-02-12 00:18 - 004308480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
2020-02-12 00:18 - 2020-02-12 00:18 - 002314952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2020-02-12 00:18 - 2020-02-12 00:18 - 001541632 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
2020-02-12 00:18 - 2020-02-12 00:18 - 000952416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DolbyDecMFT.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 025900032 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 025444352 _____ (Microsoft Corporation) C:\Windows\system32\Hydrogen.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 022635008 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 019850240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 019813376 _____ (Microsoft Corporation) C:\Windows\system32\HologramWorld.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 018026496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 009929016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 008013824 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 007754752 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 007600448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 007259648 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 007017472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 006519752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 006435840 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 006284800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 006083832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 005912064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 005764664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 005112320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 005041664 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 004856832 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 004575232 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 004562896 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 004538880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 004348616 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Mirage.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 004129416 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 003967888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 003820032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 003792384 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 003525592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 003484672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 003372440 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 003243080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Mirage.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002988552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 002861568 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002800128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 002773776 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002766088 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2020-02-12 00:17 - 2020-02-12 00:17 - 002755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2020-02-12 00:17 - 2020-02-12 00:17 - 002703872 _____ (Microsoft Corporation) C:\Windows\system32\WebRuntimeManager.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002584008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002561536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002493720 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002305536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002260176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002230232 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002225160 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002084576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002032128 _____ C:\Windows\system32\rdpnano.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001999960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001916744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001858560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001835128 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001743680 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001693184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001687040 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001664696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001664680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001657856 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001610240 _____ (Microsoft Corporation) C:\Windows\system32\HologramCompositor.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001562424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpserverbase.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001540096 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001489064 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001482040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 001417760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001412096 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001398584 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 001394168 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001319936 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001300280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 001284096 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001283592 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2020-02-12 00:17 - 2020-02-12 00:17 - 001273856 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001272360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001260544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpsharercom.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001218120 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 001216000 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 001214976 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001213752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpbase.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001195008 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001170960 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001154448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001151816 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001105776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001098720 _____ (Microsoft Corporation) C:\Windows\system32\DolbyDecMFT.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001097216 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001083392 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001077264 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 001060352 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001051448 _____ (Microsoft Corporation) C:\Windows\system32\pidgenx.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001000960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Mirage.Internal.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000996352 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000928120 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthService.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000923136 _____ (Microsoft Corporation) C:\Windows\system32\EdgeManager.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000913408 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000904504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000895488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000892488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000891736 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000890368 _____ (Microsoft Corporation) C:\Windows\system32\HolographicExtensions.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000882688 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000875448 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000864256 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000857088 _____ C:\Windows\system32\MBR2GPT.EXE
2020-02-12 00:17 - 2020-02-12 00:17 - 000852480 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000843776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000839680 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000828216 _____ (Microsoft Corporation) C:\Windows\system32\AppVClient.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000824848 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000805888 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000788992 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000784384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000783480 _____ (Microsoft Corporation) C:\Windows\system32\tcblaunch.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000774664 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000768488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000749568 _____ (Microsoft Corporation) C:\Windows\system32\FrameServer.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000705536 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000704512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.FileExplorer.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Mirage.Internal.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000685056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000679368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000673080 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000670720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000667136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000667136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EdgeManager.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000661816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 000637440 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000629760 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000623104 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000617784 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000610816 _____ (Microsoft Corporation) C:\Windows\system32\netprofmsvc.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000599552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000598528 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000597816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000587064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupEngine.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000578560 _____ (Microsoft Corporation) C:\Windows\system32\SppExtComObj.Exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000568120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000562176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000542288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000537608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000530432 _____ (Microsoft Corporation) C:\Windows\system32\sppcext.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000521728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.Launcher.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000518456 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000516544 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000512000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000510768 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000500736 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2020-02-12 00:17 - 2020-02-12 00:17 - 000497152 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000494080 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000490496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.FileExplorer.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000490496 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000486912 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000486400 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000477496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2020-02-12 00:17 - 2020-02-12 00:17 - 000476672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000475648 _____ (Microsoft Corporation) C:\Windows\system32\DscCore.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000469504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000467952 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000453432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000450560 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000443904 _____ (Microsoft Corporation) C:\Windows\system32\edgeIso.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000441072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.MediaControl.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000435200 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000430080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000422912 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000422008 _____ (Microsoft Corporation) C:\Windows\system32\SgrmEnclave_secure.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000421376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2020-02-12 00:17 - 2020-02-12 00:17 - 000416056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 000407040 _____ (Microsoft Corporation) C:\Windows\system32\DispBroker.Desktop.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000405632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000400696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 000399360 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000384000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000375504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000370688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000366416 _____ (Microsoft Corporation) C:\Windows\system32\mfsensorgroup.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000353280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000345088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000336384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000335448 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000327680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgeIso.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000324608 _____ (Microsoft Corporation) C:\Windows\system32\FSClient.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 000324096 _____ (Microsoft Corporation) C:\Windows\system32\rdpviewerax.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000311096 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthAgent.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000309248 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000308736 _____ (Microsoft Corporation) C:\Windows\system32\msIso.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000307712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000300392 _____ (Microsoft Corporation) C:\Windows\system32\skci.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000299520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000283136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000281088 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000274464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BCP47Langs.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpviewerax.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000268800 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000266752 _____ (Microsoft Corporation) C:\Windows\system32\DAFMCP.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000259984 _____ (Microsoft Corporation) C:\Windows\system32\logoncli.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tapisrv.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000251904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msIso.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000249344 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000247856 _____ (Microsoft Corporation) C:\Windows\system32\weretw.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000228864 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000227840 _____ (Microsoft Corporation) C:\Windows\system32\IndexedDbLegacy.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000226816 _____ (Microsoft Corporation) C:\Windows\system32\netprofm.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000225792 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000224768 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE
2020-02-12 00:17 - 2020-02-12 00:17 - 000220984 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000217600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msutb.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000214528 _____ (Microsoft Corporation) C:\Windows\system32\rdsdwmdr.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000211968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000210744 _____ (Microsoft Corporation) C:\Windows\system32\tcbloader.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000203776 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000201728 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000199480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000194560 _____ (Microsoft Corporation) C:\Windows\system32\recdisc.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000193800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\weretw.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000190464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\regapi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000190256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logoncli.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE
2020-02-12 00:17 - 2020-02-12 00:17 - 000186880 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000183808 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngOnline.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000179720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 000175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IndexedDbLegacy.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000174392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\AppvVemgr.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000165832 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000160768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Winlangdb.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000155136 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000153912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\AppvVfs.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\fdWSD.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000150536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000149504 _____ (Microsoft Corporation) C:\Windows\system32\sdrsvc.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SpatialAudioLicenseSrv.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000143160 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000139776 _____ (Microsoft Corporation) C:\Windows\system32\Chakrathunk.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000138040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\AppVStrm.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 000133464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BCP47mrm.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000132624 _____ (Microsoft Corporation) C:\Windows\system32\offlinelsa.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdWSD.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000125440 _____ (Microsoft Corporation) C:\Windows\system32\sdshext.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000123392 _____ (Microsoft Corporation) C:\Windows\system32\wercplsupport.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000119808 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000119296 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000113152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000112128 _____ (Microsoft Corporation) C:\Windows\system32\NetDriverInstall.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000108544 _____ (Microsoft Corporation) C:\Windows\system32\fdSSDP.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000107832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupApi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000106808 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthProxyStub.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000105984 _____ (Microsoft Corporation) C:\Windows\system32\utcutil.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000105472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakrathunk.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000105472 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000099712 _____ (Microsoft Corporation) C:\Windows\system32\FsIso.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000097280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\compstui.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000097080 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\globinputhost.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000095232 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000093496 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000090624 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000090624 _____ (Microsoft Corporation) C:\Windows\system32\keyiso.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000089600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfrgui.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000089328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32u.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdSSDP.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000084496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hvservice.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 000080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetDriverInstall.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usoapi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000072816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remoteaudioendpoint.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\keyiso.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\findnetprinters.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\iemigplugin.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\printui.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iemigplugin.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000063288 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthHost.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000059221 _____ C:\Windows\system32\srms.dat
2020-02-12 00:17 - 2020-02-12 00:17 - 000058880 _____ C:\Windows\system32\runexehelper.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000057856 _____ (Microsoft Corporation) C:\Windows\system32\SrTasks.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\findnetprinters.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rtutils.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000046592 _____ (Microsoft Corporation) C:\Windows\system32\Websocket.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000045056 _____ (Microsoft Corporation) C:\Windows\system32\npmproxy.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000044544 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserLanguageProfileCallback.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000042512 _____ (Microsoft Corporation) C:\Windows\system32\SysResetErr.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mcicda.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Websocket.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000032056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\nlmproxy.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000027648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mciwave.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000024064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mciseq.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000021520 _____ (Microsoft Corporation) C:\Windows\system32\kdhvcom.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000020944 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000019768 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\icsunattend.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\nlmsprep.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000015360 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000013824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth9.bin
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth12.bin
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth11.bin
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth10.bin
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
2020-02-12 00:16 - 2020-02-12 00:17 - 007263992 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 017787904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 007905208 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 006231200 _____ (Microsoft Corporation) C:\Windows\system32\StartTileData.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 006167552 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 004615376 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 004470784 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 004005888 _____ (Microsoft Corporation) C:\Windows\system32\EdgeContent.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 003969536 _____ (Microsoft Corporation) C:\Windows\system32\tellib.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 003728896 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 003703296 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 003590968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 003550208 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 003263488 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 003110400 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 002870272 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 002714624 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 002284544 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 002125904 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 002071552 _____ (Microsoft Corporation) C:\Windows\system32\ISM.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001942016 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001841152 _____ C:\Windows\system32\TextInputMethodFormatter.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001830200 _____ (Microsoft Corporation) C:\Windows\system32\rdpserverbase.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001757096 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2020-02-12 00:16 - 2020-02-12 00:16 - 001748480 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001726480 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001655880 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001602560 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001512320 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 001505592 _____ (Microsoft Corporation) C:\Windows\system32\rdpbase.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001481216 _____ (Microsoft Corporation) C:\Windows\system32\rdpsharercom.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001480192 _____ (Microsoft Corporation) C:\Windows\system32\usocoreworker.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 001413912 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001372160 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001366128 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2020-02-12 00:16 - 2020-02-12 00:16 - 001182232 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 001149928 _____ (Microsoft Corporation) C:\Windows\system32\ApplyTrustOffline.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 001084216 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001083904 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001026792 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001009664 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000974336 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000949248 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthSSO.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000916480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000874296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000851968 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000804872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000803840 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000782848 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000758800 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000750080 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000747320 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000737280 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Launcher.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000735744 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000732200 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_StorageSense.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000727040 _____ (Microsoft Corporation) C:\Windows\system32\agentactivationruntime.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000716288 _____ (Microsoft Corporation) C:\Windows\system32\agentactivationruntimewindows.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000678928 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000646656 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000642008 _____ (Microsoft Corporation) C:\Windows\system32\TextInputFramework.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000637968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000605184 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000589592 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000558592 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Notifications.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000550400 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000545432 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.MediaControl.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000535552 _____ (Microsoft Corporation) C:\Windows\system32\usosvc.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000516648 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000516096 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000465208 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000464384 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000459896 _____ (Microsoft Corporation) C:\Windows\system32\MusNotifyIcon.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000456192 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000441144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000437776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000415808 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000401408 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000392192 _____ (Microsoft Corporation) C:\Windows\system32\Search.ProtocolHandler.MAPI2.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000369504 _____ (Microsoft Corporation) C:\Windows\system32\BCP47Langs.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000368128 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000355840 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicSvc.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000350720 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_SpeechPrivacy.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000324616 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000296760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\DeviceDirectoryClient.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000285184 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicCapsule.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000282112 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.AppDefaults.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000277504 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_CapabilityAccess.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000265216 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000256000 _____ (Microsoft Corporation) C:\Windows\system32\UpdateDeploymentProvider.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000250880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winnat.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000240640 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000222208 _____ (Microsoft Corporation) C:\Windows\system32\Winlangdb.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000209920 _____ (Microsoft Corporation) C:\Windows\system32\wuuhosdeployment.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000204800 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000201728 _____ (Microsoft Corporation) C:\Windows\system32\AppXApplicabilityBlob.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000197632 _____ (Microsoft Corporation) C:\Windows\system32\Win32CompatibilityAppraiserCSP.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000194064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000187392 _____ (Microsoft Corporation) C:\Windows\system32\tssrvlic.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000186672 _____ (Microsoft Corporation) C:\Windows\system32\BCP47mrm.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000184832 _____ (Microsoft Corporation) C:\Windows\system32\AarSvc.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000169472 _____ (Microsoft Corporation) C:\Windows\system32\SpatialAudioLicenseSrv.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000157696 _____ (Microsoft Corporation) C:\Windows\system32\dssvc.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000155648 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_AppExecutionAlias.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_BackgroundApps.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000147456 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000138752 _____ (Microsoft Corporation) C:\Windows\system32\InputLocaleManager.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000135168 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000130560 _____ (Microsoft Corporation) C:\Windows\system32\globinputhost.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000128528 _____ (Microsoft Corporation) C:\Windows\system32\wifitask.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\usoapi.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000127280 _____ (Microsoft Corporation) C:\Windows\system32\win32u.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\ApplicationControlCSP.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000117264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bindflt.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000107008 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingExperienceMEM.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000089912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000089088 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicAgent.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000088352 _____ (Microsoft Corporation) C:\Windows\system32\remoteaudioendpoint.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000087040 _____ (Microsoft Corporation) C:\Windows\system32\EditBufferTestHook.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000084992 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthSystray.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\CustomInstallExec.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000071480 _____ (Microsoft Corporation) C:\Windows\system32\win32appinventorycsp.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000069120 _____ (Microsoft Corporation) C:\Windows\system32\UsoClient.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000062976 _____ (Microsoft Corporation) C:\Windows\system32\LSCSHostPolicy.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000059392 _____ (Microsoft Corporation) C:\Windows\system32\UserLanguageProfileCallback.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000057856 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000057344 _____ (Microsoft Corporation) C:\Windows\system32\audioresourceregistrar.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\mcicda.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000047208 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\WordBreakers.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000037392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wimmount.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\mciwave.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000030208 _____ (Microsoft Corporation) C:\Windows\system32\mciseq.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicPS.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000027648 _____ (Microsoft Corporation) C:\Windows\system32\lstelemetry.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\bindflt.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\dstokenclean.exe
2020-02-12 00:03 - 2020-01-16 06:07 - 000492544 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2020-02-12 00:03 - 2020-01-16 05:23 - 000390656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2020-02-08 16:36 - 2020-02-20 22:57 - 000000000 ____D C:\Users\sasac\AppData\Roaming\Discord
2020-02-08 16:36 - 2020-02-08 16:36 - 061370712 _____ (Discord Inc.) C:\Users\sasac\Downloads\DiscordSetup.exe
2020-02-08 16:36 - 2020-02-08 16:36 - 000002233 _____ C:\Users\sasac\Desktop\Discord.lnk
2020-02-08 16:36 - 2020-02-08 16:36 - 000000000 ____D C:\Users\sasac\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2020-02-08 16:36 - 2020-02-08 16:36 - 000000000 ____D C:\Users\sasac\AppData\Local\SquirrelTemp
2020-02-08 16:36 - 2020-02-08 16:36 - 000000000 ____D C:\Users\sasac\AppData\Local\Discord
2020-02-04 16:18 - 2020-02-04 16:28 - 000000000 ____D C:\Users\sasac\Documents\Warcraft III
2020-02-04 16:15 - 2020-02-04 16:15 - 000000930 _____ C:\Users\Public\Desktop\Warcraft III.lnk
2020-02-04 16:15 - 2020-02-04 16:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Warcraft III
2020-02-04 16:02 - 2020-02-20 23:26 - 000000000 ____D C:\Program Files (x86)\Warcraft III
2020-02-03 13:47 - 2020-02-03 13:47 - 000456901 _____ (Stargate-Game.cz ) C:\Users\sasac\Downloads\sgalert_1_0.exe
2020-02-03 02:23 - 2020-02-03 02:25 - 1162152768 _____ C:\Users\sasac\Downloads\Kyborgové ( Kiborhy , Cyborgs Heroes Never Die 2017) CZ titulky ,BRDrip,XviD,.avi
2020-01-28 23:19 - 2020-01-28 23:19 - 000000000 ____D C:\Users\sasac\AppData\Local\TslGame
2020-01-28 23:18 - 2020-01-28 23:18 - 000000000 ____D C:\Program Files (x86)\EasyAntiCheat
2020-01-28 23:02 - 2020-01-28 23:02 - 000000222 _____ C:\Users\sasac\Desktop\PLAYERUNKNOWN'S BATTLEGROUNDS.url
2020-01-28 21:09 - 2020-01-28 23:19 - 000000000 ____D C:\Users\sasac\AppData\Local\UnrealEngine
2020-01-28 21:09 - 2020-01-28 21:09 - 000074552 _____ (Wellbia.com Co., Ltd.) C:\Windows\xhunter1.sys
2020-01-28 21:09 - 2020-01-28 21:09 - 000000000 ____D C:\Users\sasac\AppData\Local\ShadowTrackerExtra
2020-01-28 21:09 - 2020-01-28 21:09 - 000000000 ____D C:\Program Files\Common Files\Uncheater
2020-01-28 20:48 - 2020-01-28 20:48 - 000000000 ____D C:\ProgramData\PUBG
2020-01-28 20:47 - 2020-01-28 20:47 - 067269568 _____ ( ) C:\Users\sasac\Downloads\PUBG-Lite-Setup.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-02-20 23:26 - 2019-11-06 11:57 - 000000000 ____D C:\Users\sasac\AppData\Local\Battle.net
2020-02-20 23:26 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-02-20 23:00 - 2019-11-07 20:55 - 000000000 ____D C:\Program Files (x86)\Steam
2020-02-20 22:45 - 2019-03-19 05:37 - 000032768 _____ C:\Windows\system32\config\ELAM
2020-02-20 22:34 - 2019-03-19 05:50 - 000000000 ____D C:\Windows\INF
2020-02-20 22:33 - 2019-03-19 05:52 - 000000000 ___HD C:\Windows\ELAMBKUP
2020-02-20 22:29 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\AppReadiness
2020-02-20 22:28 - 2019-11-06 11:53 - 000000000 ____D C:\ProgramData\NVIDIA
2020-02-20 22:26 - 2019-11-06 11:08 - 000000000 ___RD C:\Users\sasac\OneDrive
2020-02-20 00:07 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-02-18 20:38 - 2019-11-06 12:11 - 000000000 ____D C:\Program Files (x86)\Call of Duty Modern Warfare
2020-02-18 18:32 - 2019-11-08 08:43 - 000000000 ____D C:\Users\sasac\AppData\Local\CrashDumps
2020-02-18 18:28 - 2019-11-06 11:07 - 001694640 _____ C:\Windows\system32\PerfStringBackup.INI
2020-02-18 18:28 - 2019-03-19 12:57 - 000717182 _____ C:\Windows\system32\perfh005.dat
2020-02-18 18:28 - 2019-03-19 12:57 - 000145262 _____ C:\Windows\system32\perfc005.dat
2020-02-18 18:24 - 2019-11-08 08:07 - 000000000 ____D C:\Users\sasac\AppData\Roaming\TS3Client
2020-02-18 18:22 - 2019-11-06 10:59 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-02-18 18:21 - 2019-03-19 05:37 - 000524288 _____ C:\Windows\system32\config\BBI
2020-02-18 16:42 - 2019-03-19 05:52 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2020-02-18 13:33 - 2019-11-06 10:59 - 000000000 ____D C:\Windows\system32\SleepStudy
2020-02-15 00:16 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\SecureBootUpdates
2020-02-15 00:16 - 2019-03-19 05:37 - 000000000 ____D C:\Windows\CbsTemp
2020-02-14 23:02 - 2019-11-06 11:08 - 000003378 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1527743807-1357318293-839389191-1001
2020-02-14 23:02 - 2019-11-06 11:03 - 000002361 _____ C:\Users\sasac\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-02-12 08:50 - 2019-11-06 11:06 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-02-12 08:50 - 2019-11-06 11:06 - 000000000 ___RD C:\Users\sasac\3D Objects
2020-02-12 08:50 - 2019-11-06 10:59 - 000267672 _____ C:\Windows\system32\FNTCACHE.DAT
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ___RD C:\Windows\PrintDialog
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\SysWOW64\oobe
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\SysWOW64\Dism
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\SystemResources
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\PerceptionSimulation
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\oobe
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\Dism
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\ShellExperiences
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\bcastdvr
2020-02-12 01:23 - 2019-03-19 05:37 - 000000000 ____D C:\Windows\servicing
2020-02-12 00:28 - 2019-11-06 11:47 - 000000000 ____D C:\Windows\system32\MRT
2020-02-12 00:25 - 2019-11-06 11:47 - 120407888 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2020-02-08 16:51 - 2019-11-06 13:15 - 000000000 ____D C:\Users\sasac\AppData\Local\D3DSCache
2020-02-05 21:39 - 2019-11-26 23:31 - 000003474 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2020-02-05 21:39 - 2019-11-26 23:31 - 000003350 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2020-02-04 10:38 - 2019-11-06 10:59 - 000000000 ____D C:\Windows\system32\Drivers\wd
2020-02-03 21:56 - 2019-03-19 05:56 - 000835688 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2020-02-03 21:56 - 2019-03-19 05:56 - 000179608 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2020-02-03 16:33 - 2020-01-05 23:08 - 000000000 ____D C:\Users\sasac\Documents\The Witcher 3
2020-02-03 13:55 - 2019-11-06 11:06 - 000000000 ____D C:\Users\sasac\AppData\Local\Packages
2020-02-03 13:51 - 2019-11-22 20:58 - 000000000 ____D C:\Users\sasac\AppData\Local\BattlEye
2020-02-03 13:51 - 2019-11-07 21:14 - 000000000 ____D C:\Users\sasac\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2020-02-03 13:47 - 2019-11-06 11:06 - 000000000 ____D C:\Users\sasac\AppData\Local\VirtualStore
2020-01-31 00:02 - 2020-01-14 11:58 - 000660176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2020-01-30 23:58 - 2019-11-06 11:52 - 004963008 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2020-01-30 10:53 - 2019-11-06 11:54 - 000000000 ____D C:\Program Files (x86)\Battle.net
2020-01-30 02:40 - 2019-11-06 11:52 - 000055783 _____ C:\Windows\system32\nvinfo.pb
2020-01-30 00:56 - 2019-11-06 11:53 - 005577224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2020-01-30 00:56 - 2019-11-06 11:53 - 002655864 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2020-01-30 00:56 - 2019-11-06 11:53 - 001767920 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2020-01-30 00:56 - 2019-11-06 11:53 - 000670840 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2020-01-30 00:56 - 2019-11-06 11:53 - 000454512 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2020-01-30 00:56 - 2019-11-06 11:53 - 000131176 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2020-01-30 00:56 - 2019-11-06 11:53 - 000083976 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2020-01-29 11:21 - 2019-11-08 08:11 - 000000000 ____D C:\Users\sasac\AppData\Local\ElevatedDiagnostics
2020-01-27 08:11 - 2019-11-06 11:53 - 008887562 _____ C:\Windows\system32\nvcoproc.bin
2020-01-24 09:13 - 2020-01-04 21:29 - 000000000 ____D C:\Program Files (x86)\GOG Galaxy
2020-01-23 14:28 - 2019-11-06 11:53 - 000001951 _____ C:\Windows\NvContainerRecovery.bat

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Avatar uživatele
Diallix
VIP
VIP
Příspěvky: 2759
Registrován: 27 Dub 2008 10:34
Kontaktovat uživatele:

Re: Prosim o kontrolu

#2 Příspěvek od Diallix »

Dobry den.

:arrow: Stiahnite si na plochu nastroj AdwCleaner, link. na stiahnutie tu: https://toolslib.net/downloads/finish/1/
Pred spustenim nastroja povypinajte vsetke beziace okna programov, to su vsetke beziace programy pod desktopom.
Kliknite pravym tlacidlom mysi na program -> spustit ako Administrator.
Pokracujte kliknutim na tlacidlo Prehladaj teraz (Scan now) a pockajte, kym sa system doskenuje.
Po skene nechajte oznacene vsetky chlieviky, pripadne najdene hrozieby a pokracujte v dolnom pravom rohu tlacidlom Vycistit Teraz (Clean and Repair).
Po restartovani PC sa spusti nastroj AdwCleaner, kliknite na Zobrazit soubor protokolu.
Spusti sa log, jeho obsah skopirujte sem.
► Vyšla moja nová kniha BOTNETY! :173: Informácie o nej nájdete tu: >> BOTNETY <<

¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­
---
Obrázek Hľadáme nové posily do nášej CyberSecurity UNIT jednotky. Viac informácií o tom, čo to obnáša a ako sa pripojiť nájdete tu: >> CyberSecurity UNIT << Obrázek
----
► Nízkoúrovňový, Vysokoúrovňový programátor - profilová karta tu: card <<
----
► Háveťárna - UPLOAD Malwaru: >> upload <<
---
► Ak sa Vám ľúbi moja práca a ste sňou spokojný, môžete ma kontaktovať na: diallix@centrum.sk, info@diallix.net alebo diallix@forum.viry.cz .
---
Momentálne aktívny ako:
- konzultant, vývojár a tutor výskumu inteligentného malwaru.
- tutor v oblasti dotazovacích jazykoch SQL (TSQL, PLSQL), objektového programovania (c++,c#,php) pre študentov.

Na fóre pôsobím ako:
- Bezpečnostná autorita viry.cz
- Zástupca tutora pre vzdelávanie nováčikov
- Zakladateľ Cyber Security jednotky

sasa.eu
Návštěvník
Návštěvník
Příspěvky: 42
Registrován: 08 Lis 2008 20:15

Dobry den

#3 Příspěvek od sasa.eu »

# -------------------------------
# Malwarebytes AdwCleaner 8.0.2.0
# -------------------------------
# Build: 01-27-2020
# Database: 2020-02-17.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 02-23-2020
# Duration: 00:00:03
# OS: Windows 10 Pro
# Cleaned: 4
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Users\sasac\AppData\Roaming\DRPSu

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\drp.su
Deleted HKCU\Software\drpsu
Deleted HKLM\Software\Wow6432Node\drpsu

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1647 octets] - [23/02/2020 20:12:50]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Avatar uživatele
Diallix
VIP
VIP
Příspěvky: 2759
Registrován: 27 Dub 2008 10:34
Kontaktovat uživatele:

Re: Prosim o kontrolu

#4 Příspěvek od Diallix »

Poprosim vas o nove logy FRST a ADDTIONAL
► Vyšla moja nová kniha BOTNETY! :173: Informácie o nej nájdete tu: >> BOTNETY <<

¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­
---
Obrázek Hľadáme nové posily do nášej CyberSecurity UNIT jednotky. Viac informácií o tom, čo to obnáša a ako sa pripojiť nájdete tu: >> CyberSecurity UNIT << Obrázek
----
► Nízkoúrovňový, Vysokoúrovňový programátor - profilová karta tu: card <<
----
► Háveťárna - UPLOAD Malwaru: >> upload <<
---
► Ak sa Vám ľúbi moja práca a ste sňou spokojný, môžete ma kontaktovať na: diallix@centrum.sk, info@diallix.net alebo diallix@forum.viry.cz .
---
Momentálne aktívny ako:
- konzultant, vývojár a tutor výskumu inteligentného malwaru.
- tutor v oblasti dotazovacích jazykoch SQL (TSQL, PLSQL), objektového programovania (c++,c#,php) pre študentov.

Na fóre pôsobím ako:
- Bezpečnostná autorita viry.cz
- Zástupca tutora pre vzdelávanie nováčikov
- Zakladateľ Cyber Security jednotky

sasa.eu
Návštěvník
Návštěvník
Příspěvky: 42
Registrován: 08 Lis 2008 20:15

addition

#5 Příspěvek od sasa.eu »

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 23-02-2020
Ran by sasac (24-02-2020 21:53:40)
Running from C:\Users\sasac\Desktop
Windows 10 Pro Version 1909 18363.657 (X64) (2019-11-06 10:01:32)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1527743807-1357318293-839389191-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1527743807-1357318293-839389191-503 - Limited - Disabled)
Guest (S-1-5-21-1527743807-1357318293-839389191-501 - Limited - Disabled)
sasac (S-1-5-21-1527743807-1357318293-839389191-1001 - Administrator - Enabled) => C:\Users\sasac
WDAGUtilityAccount (S-1-5-21-1527743807-1357318293-839389191-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Security (Enabled - Up to date) {885D845F-AF19-0124-FECE-FFF49D00F440}
FW: ESET Firewall (Enabled) {B066057A-E576-007C-D591-56C163D3B33B}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Aktualizace NVIDIA 38.0.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 38.0.4.0 - NVIDIA Corporation) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Call of Duty Modern Warfare (HKLM-x32\...\Call of Duty Modern Warfare) (Version: - Blizzard Entertainment)
Discord (HKU\S-1-5-21-1527743807-1357318293-839389191-1001\...\Discord) (Version: 0.0.305 - Discord Inc.)
ESET Security (HKLM\...\{D8E84711-EDFC-4D4E-B579-95AEB40DAA4D}) (Version: 13.0.24.0 - ESET, spol. s r.o.)
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: - GOG.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 79.0.3945.130 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.441 - Google LLC) Hidden
Heaven Benchmark version 4.0 (HKLM-x32\...\Unigine Heaven Benchmark (Basic Edition)_is1) (Version: 4.0 - Unigine Corp.)
HWiNFO64 Version 6.22 (HKLM\...\HWiNFO64_is1) (Version: 6.22 - Martin Malik - REALiX)
League of Legends (HKLM-x32\...\League of Legends 1.0) (Version: 1.0 - Riot Games, Inc)
Microsoft OneDrive (HKU\S-1-5-21-1527743807-1357318293-839389191-1001\...\OneDriveSetup.exe) (Version: 19.232.1124.0008 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.13.26020 (HKLM-x32\...\{7474cd6e-76cc-4257-837e-5b9261e526af}) (Version: 14.13.26020.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32\...\{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.19 - NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 3.20.2.34 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.2.34 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.38.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.21 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 442.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 442.19 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
Ovládací panel NVIDIA 442.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 442.19 - NVIDIA Corporation) Hidden
StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.3.2 - TeamSpeak Systems GmbH)
The Witcher 3: Wild Hunt - Game of the Year Edition (HKLM-x32\...\1495134320_is1) (Version: 1.32 - GOG.com)
TurboFloorplan Dům&Interier&Zahrada v17 (HKLM-x32\...\{D11B97EA-0DB6-4866-9E88-4564C44F3C2D}) (Version: 17.0 - Název společnosti:)
Uplay (HKLM-x32\...\Uplay) (Version: 73.0 - Ubisoft)
Warcraft III (HKLM-x32\...\Warcraft III) (Version: - Blizzard Entertainment)
WinRAR 5.71 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.71.0 - win.rar GmbH)

Packages:
=========
Bubble Witch 3 Saga -> C:\Program Files\WindowsApps\king.com.BubbleWitch3Saga_6.5.9.0_x86__kgqvnymyfvs32 [2020-02-21] (king.com)
Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.31.6.0_x86__kgqvnymyfvs32 [2020-02-21] (king.com)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-11-11] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-11-11] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.5.12061.0_x64__8wekyb3d8bbwe [2019-12-14] (Microsoft Studios) [MS Ad]
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.34.13393.0_x64__8wekyb3d8bbwe [2019-12-19] (Microsoft Corporation) [MS Ad]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2019-11-29] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2019-11-29] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2020-01-30] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2019-11-29] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\sasac\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\d249d9ddd424b688\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default

==================== Loaded Modules (Whitelisted) =============

2020-01-29 09:36 - 2020-01-29 09:36 - 096131072 _____ () [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\libcef.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000117760 _____ () [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\libEGL.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 004342784 _____ () [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\libGLESv2.dll
2019-11-07 17:41 - 2019-11-21 11:06 - 001230336 _____ () [File not signed] C:\Riot Games\League of Legends\ffmpeg.dll
2019-11-07 17:49 - 2019-11-07 17:49 - 000153088 _____ () [File not signed] C:\Riot Games\Riot Client\libuv.dll
2019-11-07 17:49 - 2019-11-07 17:49 - 000092160 _____ () [File not signed] C:\Riot Games\Riot Client\yaml.dll
2019-11-07 17:49 - 2019-11-07 17:49 - 000106496 _____ () [File not signed] C:\Riot Games\Riot Client\zlib.dll
2019-11-07 17:49 - 2019-11-07 17:49 - 000122880 _____ (hxxps://nghttp2.org/) [File not signed] C:\Riot Games\Riot Client\libnghttp2.dll
2019-11-07 17:49 - 2019-11-07 17:49 - 000334336 _____ (The curl library, hxxps://curl.haxx.se/) [File not signed] C:\Riot Games\Riot Client\libcurl.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000762368 _____ (The Chromium Authors) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\chrome_elf.dll
2019-11-07 17:49 - 2019-11-07 17:49 - 002551296 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [File not signed] C:\Riot Games\Riot Client\libcrypto-1_1.dll
2019-11-07 17:49 - 2019-11-07 17:49 - 000530432 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [File not signed] C:\Riot Games\Riot Client\libssl-1_1.dll
2020-01-29 09:35 - 2020-01-29 09:35 - 000047104 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\audio\qtaudio_windows.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000026112 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\imageformats\qgif.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000027136 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\imageformats\qico.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000243712 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\imageformats\qjpeg.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000223744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\imageformats\qmng.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000020992 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\imageformats\qsvg.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000332288 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\imageformats\qtiff.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 001140224 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\platforms\qwindows.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000041984 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\qml\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000014848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\qml\QtGraphicalEffects\qtgraphicaleffectsplugin.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000014848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\qml\QtQml\Models.2\modelsplugin.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000014848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\qml\QtQuick.2\qtquick2plugin.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000084480 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\qml\QtQuick\Controls.2\qtquickcontrols2plugin.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000267776 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\qml\QtQuick\Controls\qtquickcontrolsplugin.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000071680 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\qml\QtQuick\Layouts\qquicklayoutsplugin.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000211456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\qml\QtQuick\Templates.2\qtquicktemplates2plugin.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000014848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\qml\QtQuick\Window.2\windowplugin.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 004943360 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\Qt5Core.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 005022208 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\Qt5Gui.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000626176 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\Qt5Multimedia.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000877056 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\Qt5Network.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 002908672 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\Qt5Qml.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 003078656 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\Qt5Quick.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000096256 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\Qt5QuickControls2.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000681472 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\Qt5QuickTemplates2.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000259072 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\Qt5Svg.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 004718080 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\Qt5Widgets.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000439296 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\Qt5WinExtras.dll
2020-01-29 09:36 - 2020-01-29 09:36 - 000159232 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11809\Qt5Xml.dll
2019-11-07 17:49 - 2019-11-07 17:49 - 000386560 _____ (Yann Collet, Facebook, Inc.) [File not signed] C:\Riot Games\Riot Client\libzstd.dll

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\sasac\Data aplikací:00e481b5e22dbe1f649fcddd505d3eb7 [394]
AlternateDataStreams: C:\Users\sasac\Data aplikací:fbd50e2f7662a5c33287ddc6e65ab5a1 [394]
AlternateDataStreams: C:\Users\sasac\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [394]
AlternateDataStreams: C:\Users\sasac\AppData\Roaming:fbd50e2f7662a5c33287ddc6e65ab5a1 [394]

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-03-19 05:49 - 2019-03-19 05:49 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1527743807-1357318293-839389191-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\sasac\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\forests8.jpg
DNS Servers: 213.46.172.36 - 213.46.172.37
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{C71CB4CC-A030-440B-8467-3103E4A07671}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{E192AD6A-C1A6-46E7-87DB-8CC591EA4D65}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{114A54B1-B498-4FC7-8F7E-4D164FD9961B}] => (Allow) C:\Users\sasac\AppData\Local\Temp\DriverPack-20191106122303\tools\aria2c.exe No File
FirewallRules: [TCP Query User{377272AC-1549-4D12-965A-08ACFBA812EC}C:\program files (x86)\call of duty modern warfare\modernwarfare.exe] => (Allow) C:\program files (x86)\call of duty modern warfare\modernwarfare.exe (Activision Publishing Inc -> Activision)
FirewallRules: [UDP Query User{D62FBB04-B3D5-468B-8D3C-7269D1AC9069}C:\program files (x86)\call of duty modern warfare\modernwarfare.exe] => (Allow) C:\program files (x86)\call of duty modern warfare\modernwarfare.exe (Activision Publishing Inc -> Activision)
FirewallRules: [{93FED4C1-4009-42D5-B798-14DDF0DA585B}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{905D06A7-27ED-475D-A12A-732E98300AAC}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [TCP Query User{8B13846B-2C25-482E-909B-8E019BEECB49}C:\riot games\league of legends\game\league of legends.exe] => (Allow) C:\riot games\league of legends\game\league of legends.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [UDP Query User{86B23AE2-9EEE-4130-AF40-71551BFBDCE9}C:\riot games\league of legends\game\league of legends.exe] => (Allow) C:\riot games\league of legends\game\league of legends.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{2BCBAB54-BEE8-4750-844E-CB48C191F4D4}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{17521789-FAF3-4A8F-BA86-D7D030A8E3C6}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{D6A2BD64-68C5-465C-8C4C-B476D03E31E7}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{A12A94DB-793E-442D-AE2D-AD71E7782604}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{6D682A24-B5B8-4471-AE80-1553CB08D373}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [{02BC2B81-082C-4FC8-90A9-456D7B3AFF9B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [TCP Query User{10CF34FC-2ADB-46C2-B662-8F0DCDECB8F4}C:\program files (x86)\starcraft ii\versions\base76811\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base76811\sc2_x64.exe No File
FirewallRules: [UDP Query User{099137DB-F019-4B6F-ABD7-0D7A9AE38B27}C:\program files (x86)\starcraft ii\versions\base76811\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base76811\sc2_x64.exe No File
FirewallRules: [{89285CD1-05ED-4F7A-9EC3-BEC6706EC739}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{59570EC3-F001-4867-BAEB-C3F7852531E9}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{E3F33DE5-6603-4822-A882-53D6E0BDB08A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Mafia II\pc\mafia2.exe (Valve Corp. -> 2K Czech) [File not signed]
FirewallRules: [{F18F14DD-3953-4265-AD85-47DCAD979C00}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Mafia II\pc\mafia2.exe (Valve Corp. -> 2K Czech) [File not signed]
FirewallRules: [{2307B966-00AD-489E-86E4-8EBDEAA8C210}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3.exe (Microsoft Corporation -> Ensemble Studios)
FirewallRules: [{6B5C84FE-BB4F-4CE5-B00D-C4687658C496}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3.exe (Microsoft Corporation -> Ensemble Studios)
FirewallRules: [{8E48CC52-E9ED-43C4-9B71-ED9B557BD88C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3x.exe (Microsoft Corporation -> Ensemble Studios)
FirewallRules: [{D5A6DC08-7E5B-4503-AAA3-9227C3BD773C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3x.exe (Microsoft Corporation -> Ensemble Studios)
FirewallRules: [{3F5C0E93-3FF3-462C-8F87-310B40E0A958}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3y.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9D1ED38C-F89D-4634-A8E1-B07E2BCAB5F0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age Of Empires 3\bin\age3y.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{01DC1FFE-8E00-4D26-B064-AE91DE0C1ECE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rise of Nations\patriots.exe (TODO: <Company name>) [File not signed]
FirewallRules: [{EE57C75A-E808-4569-B5C5-69423BBB16B1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rise of Nations\patriots.exe (TODO: <Company name>) [File not signed]
FirewallRules: [{356ED460-468B-4637-BF87-63961EB9BDC5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\KingdomComeDeliverance\Bin\Win64\KingdomCome.exe (Warhorse Studios sro) [File not signed]
FirewallRules: [{8F7C59A1-2A3E-4BCA-90B6-4CD0547A05DF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\KingdomComeDeliverance\Bin\Win64\KingdomCome.exe (Warhorse Studios sro) [File not signed]
FirewallRules: [{A5ED8C8F-C78F-4F0F-A82D-1FDCAA7A1E2B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{BFA6CF26-2A18-41A2-B138-6234ACF506BB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{DF5F59A6-3518-4778-AD6B-0775D6218A7C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{145067DE-9048-4D8F-BC80-C5999AC8A754}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{9EFAE8C8-4972-4E7C-B54D-8A99E14C28AC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty WWII\s2_mp64_ship.exe (Activision Publishing Inc -> Activision)
FirewallRules: [{AD00CFE8-A29D-4956-A066-BED1E051B726}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty WWII\s2_mp64_ship.exe (Activision Publishing Inc -> Activision)
FirewallRules: [{224E9CDA-E8BF-4338-A9B2-95E1416142C4}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{25844889-2301-4582-964A-B410BF164E76}C:\program files (x86)\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe] => (Allow) C:\program files (x86)\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe No File
FirewallRules: [UDP Query User{38E37966-F977-40E1-9215-43AD890E1ABF}C:\program files (x86)\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe] => (Allow) C:\program files (x86)\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe No File
FirewallRules: [{A79104C1-4AAD-4B8B-B048-6CE27CABB60E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\ExecPubg.exe (Bluehole, Inc. -> PUBG Corporation )
FirewallRules: [{9EB497BD-74ED-4456-BE74-EB3CDF8F3664}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\ExecPubg.exe (Bluehole, Inc. -> PUBG Corporation )
FirewallRules: [TCP Query User{EA91B993-F10D-42BE-94B8-BC9D879A7C1E}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe (Bluehole, Inc. -> Bluehole GinnoGames, Inc.)
FirewallRules: [UDP Query User{5B7CB81A-D3DB-41F6-8756-5FCE99CB32DA}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe (Bluehole, Inc. -> Bluehole GinnoGames, Inc.)

==================== Restore Points =========================

12-02-2020 00:23:31 Windows Update
21-02-2020 13:11:32 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (02/23/2020 09:28:41 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: csgo.exe, verze: 0.0.0.0, časové razítko: 0x5dfc26fc
Název chybujícího modulu: tier0.dll, verze: 0.0.0.0, časové razítko: 0x5dfc2670
Kód výjimky: 0xc0000409
Posun chyby: 0x00029114
ID chybujícího procesu: 0xca0
Čas spuštění chybující aplikace: 0x01d5ea1d9056898d
Cesta k chybující aplikaci: C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
Cesta k chybujícímu modulu: C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\tier0.dll
ID zprávy: b41b45c4-76dd-4c27-a89c-9ddcf04b9435
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (02/23/2020 09:01:50 AM) (Source: Microsoft-Windows-Perflib) (EventID: 1020) (User: NT AUTHORITY)
Description: Velikost požadované vyrovnávací paměti je větší než velikost vyrovnávací paměti předané do funkce Collect knihovny DLL rozšiřitelných čítačů C:\Windows\System32\perfts.dll pro službu LSM. Velikost dané vyrovnávací paměti: 31440; požadovaná velikost: 34512.

Error: (02/22/2020 01:57:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: GameBar.exe, verze: 3.37.2001.29002, časové razítko: 0x5e31a5b1
Název chybujícího modulu: ucrtbase.dll, verze: 10.0.18362.387, časové razítko: 0x4361b720
Kód výjimky: 0xc0000409
Posun chyby: 0x000000000006db8e
ID chybujícího procesu: 0x1344
Čas spuštění chybující aplikace: 0x01d5e97f8c227955
Cesta k chybující aplikaci: C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_3.37.29002.0_x64__8wekyb3d8bbwe\GameBar.exe
Cesta k chybujícímu modulu: C:\Windows\System32\ucrtbase.dll
ID zprávy: 09709c72-f892-4b0c-9f72-52953a0a390d
Úplný název chybujícího balíčku: Microsoft.XboxGamingOverlay_3.37.29002.0_x64__8wekyb3d8bbwe
ID aplikace související s chybujícím balíčkem: App

Error: (02/18/2020 06:32:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: GameBar.exe, verze: 3.37.2001.29002, časové razítko: 0x5e31a5b1
Název chybujícího modulu: ucrtbase.dll, verze: 10.0.18362.387, časové razítko: 0x4361b720
Kód výjimky: 0xc0000409
Posun chyby: 0x000000000006db8e
ID chybujícího procesu: 0x18b4
Čas spuštění chybující aplikace: 0x01d5e6807bc3269d
Cesta k chybující aplikaci: C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_3.37.29002.0_x64__8wekyb3d8bbwe\GameBar.exe
Cesta k chybujícímu modulu: C:\Windows\System32\ucrtbase.dll
ID zprávy: 4893bb20-9e44-4f79-aee4-46c85fb3b18e
Úplný název chybujícího balíčku: Microsoft.XboxGamingOverlay_3.37.29002.0_x64__8wekyb3d8bbwe
ID aplikace související s chybujícím balíčkem: App

Error: (02/18/2020 04:33:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: GameBar.exe, verze: 3.37.2001.29002, časové razítko: 0x5e31a5b1
Název chybujícího modulu: ucrtbase.dll, verze: 10.0.18362.387, časové razítko: 0x4361b720
Kód výjimky: 0xc0000409
Posun chyby: 0x000000000006db8e
ID chybujícího procesu: 0x2ee4
Čas spuštění chybující aplikace: 0x01d5e66ce2d07e31
Cesta k chybující aplikaci: C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_3.37.29002.0_x64__8wekyb3d8bbwe\GameBar.exe
Cesta k chybujícímu modulu: C:\Windows\System32\ucrtbase.dll
ID zprávy: fe7d7d3c-a06b-4f01-9331-6041b87049cf
Úplný název chybujícího balíčku: Microsoft.XboxGamingOverlay_3.37.29002.0_x64__8wekyb3d8bbwe
ID aplikace související s chybujícím balíčkem: App

Error: (02/18/2020 04:01:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: NVDisplay.Container.exe, verze: 1.19.2722.8896, časové razítko: 0x5d75d64b
Název chybujícího modulu: AppXDeploymentClient.dll, verze: 10.0.18362.449, časové razítko: 0x92358de5
Kód výjimky: 0xc0000005
Posun chyby: 0x00000000000134ad
ID chybujícího procesu: 0xed0
Čas spuštění chybující aplikace: 0x01d5e5ffa30e7713
Cesta k chybující aplikaci: C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
Cesta k chybujícímu modulu: C:\Windows\System32\AppXDeploymentClient.dll
ID zprávy: e9b34db5-eabf-4623-85c9-fda0de26e702
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (02/18/2020 03:28:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: GameBar.exe, verze: 3.37.2001.29002, časové razítko: 0x5e31a5b1
Název chybujícího modulu: ucrtbase.dll, verze: 10.0.18362.387, časové razítko: 0x4361b720
Kód výjimky: 0xc0000409
Posun chyby: 0x000000000006db8e
ID chybujícího procesu: 0x3094
Čas spuštění chybující aplikace: 0x01d5e666f9c185f8
Cesta k chybující aplikaci: C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_3.37.29002.0_x64__8wekyb3d8bbwe\GameBar.exe
Cesta k chybujícímu modulu: C:\Windows\System32\ucrtbase.dll
ID zprávy: 2b4b959f-c5e3-4f75-b1ae-6a59c9c557b0
Úplný název chybujícího balíčku: Microsoft.XboxGamingOverlay_3.37.29002.0_x64__8wekyb3d8bbwe
ID aplikace související s chybujícím balíčkem: App

Error: (02/18/2020 03:08:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: GameBar.exe, verze: 3.37.2001.29002, časové razítko: 0x5e31a5b1
Název chybujícího modulu: ucrtbase.dll, verze: 10.0.18362.387, časové razítko: 0x4361b720
Kód výjimky: 0xc0000409
Posun chyby: 0x000000000006db8e
ID chybujícího procesu: 0x1bf4
Čas spuštění chybující aplikace: 0x01d5e6609b18ad91
Cesta k chybující aplikaci: C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_3.37.29002.0_x64__8wekyb3d8bbwe\GameBar.exe
Cesta k chybujícímu modulu: C:\Windows\System32\ucrtbase.dll
ID zprávy: b9623861-d8f4-45ff-91f9-5635b803df70
Úplný název chybujícího balíčku: Microsoft.XboxGamingOverlay_3.37.29002.0_x64__8wekyb3d8bbwe
ID aplikace související s chybujícím balíčkem: App


System errors:
=============
Error: (02/23/2020 08:17:06 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-SD882H2)
Description: Server Microsoft.Windows.ContentDeliveryManager_10.0.18362.449_neutral_neutral_cw5n1h2txyewy!App.AppXw3qcpc7p849541dp39vvqd01bn7z9ybh.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (02/23/2020 08:14:09 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba NVIDIA LocalSystem Container byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 6000 milisekund: Restartovat službu.

Error: (02/23/2020 08:14:09 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba NVIDIA Display Container LS byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 6000 milisekund: Restartovat službu.

Error: (02/22/2020 02:00:53 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-SD882H2)
Description: Server Windows.Media.Capture.AppCaptureManager se v daném časovém limitu neregistroval u služby DCOM.

Error: (02/22/2020 01:58:53 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-SD882H2)
Description: Server Windows.Media.Capture.Internal.AppCaptureShell se v daném časovém limitu neregistroval u služby DCOM.

Error: (02/21/2020 12:44:14 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-SD882H2)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (02/21/2020 12:44:14 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-SD882H2)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (02/21/2020 12:44:14 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-SD882H2)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.


Windows Defender:
===================================
Date: 2020-02-12 13:34:59.022
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {19EEBB32-5BC4-4C2B-A54A-284DE496380C}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2020-01-29 17:47:27.221
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {BEA090A4-A77F-4700-90A4-3B0978E5716D}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2020-01-29 11:25:53.387
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {94D284D9-7844-4E51-A157-17FCA7E6AF8C}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2020-01-21 15:18:48.632
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {5B1BBF52-4496-425C-BF71-18EBFB8BC3AF}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2020-01-14 16:14:05.183
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {053C121C-B9F9-462C-83AB-BC94FCFAF093}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

CodeIntegrity:
===================================

Date: 2020-02-24 21:51:22.098
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Windows signing level requirements.

Date: 2020-02-24 21:51:22.093
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Windows signing level requirements.

Date: 2020-02-24 21:51:22.082
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Windows signing level requirements.

Date: 2020-02-24 21:51:22.077
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Windows signing level requirements.

Date: 2020-02-24 21:51:22.049
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Windows signing level requirements.

Date: 2020-02-23 21:17:35.668
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-23 21:17:35.661
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-23 21:17:35.652
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

BIOS: Dell Inc. A11 08/09/2013
Motherboard: Dell Inc. 08HPGT
Processor: Intel(R) Xeon(R) CPU E5-1607 0 @ 3.00GHz
Percentage of memory in use: 65%
Total physical RAM: 8149.74 MB
Available physical RAM: 2784.54 MB
Total Virtual: 14805.74 MB
Available Virtual: 6997.51 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:930.95 GB) (Free:431.47 GB) NTFS

\\?\Volume{b802d58c-0000-0000-0000-100000000000}\ () (Fixed) (Total:0.57 GB) (Free:0.13 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: B802D58C)
Partition 1: (Active) - (Size=579 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=930.9 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================

sasa.eu
Návštěvník
Návštěvník
Příspěvky: 42
Registrován: 08 Lis 2008 20:15

FRST

#6 Příspěvek od sasa.eu »

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 23-02-2020
Ran by sasac (administrator) on DESKTOP-SD882H2 (Dell Inc. Precision T3600) (24-02-2020 21:52:07)
Running from C:\Users\sasac\Desktop
Loaded Profiles: sasac (Available Profiles: sasac)
Platform: Windows 10 Pro Version 1909 18363.657 (X64) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.exe
(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.exe
(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.exe
(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.exe
(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.6926\Agent.exe
(Discord Inc. -> Discord Inc.) C:\Users\sasac\AppData\Local\Discord\app-0.0.305\Discord.exe
(Discord Inc. -> Discord Inc.) C:\Users\sasac\AppData\Local\Discord\app-0.0.305\Discord.exe
(Discord Inc. -> Discord Inc.) C:\Users\sasac\AppData\Local\Discord\app-0.0.305\Discord.exe
(Discord Inc. -> Discord Inc.) C:\Users\sasac\AppData\Local\Discord\app-0.0.305\Discord.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(GOG Sp. z o.o. -> GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe
(GOG Sp. z o.o. -> GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe
(GOG Sp. z o.o. -> GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe
(GOG Sp. z o.o. -> GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe
(GOG Sp. z o.o. -> GOG.com) C:\Program Files (x86)\GOG Galaxy\GOG Galaxy Notifications Renderer.exe
(GOG Sp. z o.o. -> GOG.com) C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
(Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.442\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.442\GoogleCrashHandler64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\sasac\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.18362.651_none_5f2896f458eff373\TiWorker.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2001.7-0\MsMpEng.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Users\sasac\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
(Riot Games, Inc. -> Riot Games, Inc.) C:\Riot Games\Riot Client\RiotClientServices.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [183088 2019-11-29] (ESET, spol. s r.o. -> ESET)
HKU\S-1-5-21-1527743807-1357318293-839389191-1001\...\Run: [Battle.net] => C:\Program Files (x86)\Battle.net\Battle.net.exe [1109152 2020-01-29] (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
HKU\S-1-5-21-1527743807-1357318293-839389191-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3365840 2020-02-11] (Valve -> Valve Corporation)
HKU\S-1-5-21-1527743807-1357318293-839389191-1001\...\Run: [GalaxyClient] => [X]
HKU\S-1-5-21-1527743807-1357318293-839389191-1001\...\Run: [launchOnStartup] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [7955016 2020-01-23] (GOG Sp. z o.o. -> GOG.com)
HKU\S-1-5-21-1527743807-1357318293-839389191-1001\...\Run: [Discord] => C:\Users\sasac\AppData\Local\Discord\app-0.0.305\Discord.exe [81780056 2019-03-07] (Discord Inc. -> Discord Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.130\Installer\chrmstp.exe [2020-01-16] (Google LLC -> Google LLC)
GroupPolicy: Restriction ? <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {094A614A-1724-4B53-9232-DA059F8A2589} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [653848 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3E6AFB76-650E-4565-988E-82ADFD1C542E} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [914456 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {56C4D7AC-67FD-454E-B9B1-55DF00125938} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5979769E-21F3-4038-8ECE-2BF797FDCBE7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.7-0\MpCmdRun.exe [473544 2020-02-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5C086176-B707-4D85-92D2-3DEF9DB0B509} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2019-11-26] (Google Inc -> Google LLC)
Task: {5E5BF38B-E1FB-4B33-8763-4466961F2497} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3302880 2019-12-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {692AB762-7BF8-416D-8AD0-4A1794D353B3} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6DA53360-2B29-4E24-94DA-004301A8326F} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [914456 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {83243ABD-41F2-4F12-8568-5FF095FEB61C} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2019-12-05] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {8FFA0082-DEC3-44FD-82DA-DDBE877D9CA5} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {936D4D41-BB08-4E41-BE53-DBAC120A7778} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.7-0\MpCmdRun.exe [473544 2020-02-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9BC349B3-E7F8-440D-A914-399330FF211D} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2019-12-05] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A357F028-20C9-4489-ABA8-C4243774801B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.7-0\MpCmdRun.exe [473544 2020-02-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A694238B-A0B7-4EBC-9223-7150B63EFA72} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2019-11-26] (Google Inc -> Google LLC)
Task: {F5A3FD3E-5FB9-4F95-AC6D-7975764433E4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.7-0\MpCmdRun.exe [473544 2020-02-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F9D11EDE-64C8-4B73-B7AE-3067DFCA1FD3} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37
Tcpip\..\Interfaces\{8b85dd98-1342-4cd5-acf4-116253451089}: [DhcpNameServer] 213.46.172.36 213.46.172.37

Internet Explorer:
==================
HKU\S-1-5-21-1527743807-1357318293-839389191-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP
SearchScopes: HKU\S-1-5-21-1527743807-1357318293-839389191-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

Edge:
======
DownloadDir: C:\Users\sasac\Downloads
Edge Notifications: HKU\S-1-5-21-1527743807-1357318293-839389191-1001 -> hxxps://web.skype.com

Chrome:
=======
CHR Profile: C:\Users\sasac\AppData\Local\Google\Chrome\User Data\Default [2020-02-24]
CHR Notifications: Default -> hxxps://www.facebook.com
CHR Extension: (Prezentace) - C:\Users\sasac\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-11-26]
CHR Extension: (Dokumenty) - C:\Users\sasac\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-11-26]
CHR Extension: (Disk Google) - C:\Users\sasac\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-11-26]
CHR Extension: (YouTube) - C:\Users\sasac\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-11-26]
CHR Extension: (Tabulky) - C:\Users\sasac\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-11-26]
CHR Extension: (Dokumenty Google offline) - C:\Users\sasac\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-01-15]
CHR Extension: (Auto Refresh) - C:\Users\sasac\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifooldnmmcmlbdennkpdnlnbgbmfalko [2020-01-22]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\sasac\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-11-26]
CHR Extension: (Gmail) - C:\Users\sasac\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-11-26]
CHR Extension: (Chrome Media Router) - C:\Users\sasac\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-12-12]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [777856 2020-01-28] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2245488 2019-11-29] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [2245488 2019-11-29] (ESET, spol. s r.o. -> ESET)
S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [1218632 2020-01-23] (GOG Sp. z o.o. -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6617160 2020-01-23] (GOG Sp. z o.o. -> GOG.com)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2019-12-05] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2019-12-05] (NVIDIA Corporation -> NVIDIA Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5796168 2019-09-09] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 uncheater_bgl; C:\Program Files\Common Files\Uncheater\uncheater_bgl.exe [2097008 2020-01-28] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.7-0\NisSrv.exe [3284840 2020-02-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.7-0\MsMpEng.exe [103168 2020-02-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 e1cexpress; C:\Windows\system32\DRIVERS\e1c65x64.sys [488736 2015-08-03] (Intel(R) Intel Network Drivers -> Intel Corporation)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [149944 2019-11-29] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [103264 2019-11-29] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [15800 2019-10-16] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [189512 2019-11-29] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [50712 2019-11-29] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [79744 2019-11-29] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [116696 2019-11-29] (ESET, spol. s r.o. -> ESET)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_9e532b5f619dc909\nvlddmkm.sys [23276960 2020-01-31] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30336 2019-12-07] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [69840 2019-04-17] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [75600 2019-08-23] (NVIDIA Corporation -> NVIDIA Corporation)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [45960 2020-02-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [376032 2020-02-04] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [53984 2020-02-04] (Microsoft Windows -> Microsoft Corporation)
S3 xhunter1; C:\Windows\xhunter1.sys [74552 2020-01-28] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-02-24 21:52 - 2020-02-24 21:53 - 000019040 _____ C:\Users\sasac\Desktop\FRST.txt
2020-02-24 21:52 - 2020-02-24 21:52 - 000000000 ____D C:\Users\sasac\Desktop\FRST-OlderVersion
2020-02-24 21:51 - 2020-02-24 21:51 - 000000000 ___HD C:\OneDriveTemp
2020-02-22 14:09 - 2020-02-23 20:14 - 000000000 ____D C:\AdwCleaner
2020-02-22 14:09 - 2020-02-22 14:09 - 008356016 _____ (Malwarebytes) C:\Users\sasac\Downloads\adwcleaner_8.0.2 (1).exe
2020-02-22 14:08 - 2020-02-22 14:09 - 008356016 _____ (Malwarebytes) C:\Users\sasac\Desktop\adwcleaner_8.0.2.exe
2020-02-21 09:17 - 2020-02-21 09:17 - 000000000 ____D C:\Users\sasac\AppData\Roaming\Logicool
2020-02-21 09:14 - 2020-02-21 09:16 - 119770944 _____ (Logicool Inc.) C:\Users\sasac\Downloads\LGS_8.96.88_x64_Logicool.exe
2020-02-21 08:38 - 2020-02-21 08:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO64
2020-02-21 08:38 - 2020-02-21 08:38 - 000000000 ____D C:\Program Files\HWiNFO64
2020-02-21 08:37 - 2020-02-21 08:38 - 009537448 _____ (Martin Malik - REALiX ) C:\Users\sasac\Downloads\hwi_622.exe
2020-02-21 08:23 - 2020-02-21 08:36 - 000000000 ____D C:\Users\sasac\Heaven
2020-02-21 08:18 - 2020-02-21 08:23 - 001065984 _____ C:\Users\sasac\AppData\Local\file__0.localstorage
2020-02-21 08:18 - 2020-02-21 08:18 - 000002190 _____ C:\Users\Public\Desktop\Heaven Benchmark 4.0.lnk
2020-02-21 08:18 - 2020-02-21 08:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unigine
2020-02-21 08:18 - 2020-02-21 08:18 - 000000000 ____D C:\Program Files (x86)\Unigine
2020-02-21 08:01 - 2020-02-21 08:10 - 258728440 _____ (Unigine Corp. ) C:\Users\sasac\Downloads\Unigine_Heaven-4.0.exe
2020-02-20 23:56 - 2020-02-20 23:56 - 000000000 ____D C:\Users\sasac\AppData\Roaming\Logitech
2020-02-20 23:56 - 2020-02-20 23:56 - 000000000 ____D C:\Users\sasac\AppData\Roaming\Logishrd
2020-02-20 23:29 - 2020-02-20 23:30 - 000038436 _____ C:\Users\sasac\Downloads\Addition.txt
2020-02-20 23:28 - 2020-02-20 23:30 - 000087597 _____ C:\Users\sasac\Downloads\FRST.txt
2020-02-20 23:15 - 2020-02-20 23:15 - 001222144 _____ C:\Users\sasac\Desktop\RSITx64.exe
2020-02-20 23:11 - 2020-02-24 21:52 - 002279424 _____ (Farbar) C:\Users\sasac\Desktop\FRST64.exe
2020-02-20 23:11 - 2020-02-24 21:52 - 000000000 ____D C:\FRST
2020-02-20 22:58 - 2020-02-20 22:59 - 112859648 _____ (Logitech Inc.) C:\Users\sasac\Downloads\LGS_9.00.42_x86_Logitech.exe
2020-02-20 22:43 - 2020-02-20 22:43 - 000002016 _____ C:\Users\Public\Desktop\ESET Ochrana bankovnictví a online plateb.lnk
2020-02-20 22:34 - 2020-02-20 22:34 - 000000000 ____D C:\Users\sasac\AppData\Local\ESET
2020-02-20 22:33 - 2020-02-20 22:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2020-02-20 22:33 - 2020-02-20 22:33 - 000000000 ____D C:\ProgramData\ESET
2020-02-20 22:33 - 2020-02-20 22:33 - 000000000 ____D C:\Program Files\ESET
2020-02-20 22:29 - 2020-02-20 22:29 - 005504824 _____ (ESET) C:\Users\sasac\Downloads\eset_internet_security_live_installer.exe
2020-02-18 16:47 - 2020-02-18 16:47 - 000000422 __RSH C:\ProgramData\ntuser.pol
2020-02-18 16:01 - 2020-02-18 16:01 - 000000000 ____D C:\Windows\LastGood.Tmp
2020-02-18 15:59 - 2020-01-31 00:04 - 001729232 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe
2020-02-18 15:59 - 2020-01-31 00:04 - 001729232 _____ C:\Windows\system32\vulkaninfo.exe
2020-02-18 15:59 - 2020-01-31 00:04 - 001329360 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2020-02-18 15:59 - 2020-01-31 00:04 - 001329360 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2020-02-18 15:59 - 2020-01-31 00:04 - 001078992 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll
2020-02-18 15:59 - 2020-01-31 00:04 - 001078992 _____ C:\Windows\system32\vulkan-1.dll
2020-02-18 15:59 - 2020-01-31 00:04 - 000937680 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll
2020-02-18 15:59 - 2020-01-31 00:04 - 000937680 _____ C:\Windows\SysWOW64\vulkan-1.dll
2020-02-18 15:59 - 2020-01-31 00:04 - 000450576 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2020-02-18 15:59 - 2020-01-31 00:04 - 000353160 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2020-02-18 15:59 - 2020-01-31 00:03 - 011843504 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2020-02-18 15:59 - 2020-01-31 00:03 - 010167544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 017462616 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 005384584 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 004718792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 002075904 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 001727320 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6444219.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 001569160 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 001490688 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6444219.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 001485688 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 001370360 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 001145776 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 001064384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 000825720 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 000815120 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 000685912 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 000677584 _____ C:\Windows\system32\nvofapi64.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 000557304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2020-02-18 15:58 - 2020-01-31 00:02 - 000545112 _____ C:\Windows\SysWOW64\nvofapi.dll
2020-02-18 15:58 - 2020-01-31 00:01 - 040511408 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2020-02-18 15:58 - 2020-01-31 00:01 - 035380120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2020-02-18 15:58 - 2020-01-31 00:01 - 015031808 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2020-02-18 15:58 - 2020-01-30 23:58 - 004230752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2020-02-17 12:04 - 2020-02-17 12:04 - 000649766 _____ C:\Users\sasac\Downloads\2201180055.pdf
2020-02-12 01:23 - 2020-02-12 01:23 - 000000000 ____D C:\ProgramData\ssh
2020-02-12 00:18 - 2020-02-12 00:18 - 005502464 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2020-02-12 00:18 - 2020-02-12 00:18 - 004308480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
2020-02-12 00:18 - 2020-02-12 00:18 - 002314952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2020-02-12 00:18 - 2020-02-12 00:18 - 001541632 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
2020-02-12 00:18 - 2020-02-12 00:18 - 000952416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DolbyDecMFT.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 025900032 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 025444352 _____ (Microsoft Corporation) C:\Windows\system32\Hydrogen.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 022635008 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 019850240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 019813376 _____ (Microsoft Corporation) C:\Windows\system32\HologramWorld.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 018026496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 009929016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 008013824 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 007754752 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 007600448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 007259648 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 007017472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 006519752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 006435840 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 006284800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 006083832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 005912064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 005764664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 005112320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 005041664 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 004856832 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 004575232 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 004562896 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 004538880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 004348616 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Mirage.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 004129416 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 003967888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 003820032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 003792384 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 003525592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 003484672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 003372440 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 003243080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Mirage.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002988552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 002861568 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002800128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 002773776 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002766088 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2020-02-12 00:17 - 2020-02-12 00:17 - 002755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2020-02-12 00:17 - 2020-02-12 00:17 - 002703872 _____ (Microsoft Corporation) C:\Windows\system32\WebRuntimeManager.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002584008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002561536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002493720 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002305536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002260176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002230232 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002225160 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002084576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 002032128 _____ C:\Windows\system32\rdpnano.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001999960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001916744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001858560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001835128 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001743680 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001693184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001687040 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001664696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001664680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001657856 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001610240 _____ (Microsoft Corporation) C:\Windows\system32\HologramCompositor.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001562424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpserverbase.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001540096 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001489064 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001482040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 001417760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001412096 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001398584 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 001394168 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001319936 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001300280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 001284096 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001283592 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2020-02-12 00:17 - 2020-02-12 00:17 - 001273856 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001272360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001260544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpsharercom.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001218120 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 001216000 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 001214976 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001213752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpbase.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001195008 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001170960 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001154448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001151816 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001105776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001098720 _____ (Microsoft Corporation) C:\Windows\system32\DolbyDecMFT.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001097216 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001083392 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001077264 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 001060352 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001051448 _____ (Microsoft Corporation) C:\Windows\system32\pidgenx.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 001000960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Mirage.Internal.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000996352 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000928120 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthService.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000923136 _____ (Microsoft Corporation) C:\Windows\system32\EdgeManager.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000913408 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000904504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000895488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000892488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000891736 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000890368 _____ (Microsoft Corporation) C:\Windows\system32\HolographicExtensions.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000882688 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000875448 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000864256 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000857088 _____ C:\Windows\system32\MBR2GPT.EXE
2020-02-12 00:17 - 2020-02-12 00:17 - 000852480 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000843776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000839680 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000828216 _____ (Microsoft Corporation) C:\Windows\system32\AppVClient.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000824848 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000805888 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000788992 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000784384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000783480 _____ (Microsoft Corporation) C:\Windows\system32\tcblaunch.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000774664 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000768488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000749568 _____ (Microsoft Corporation) C:\Windows\system32\FrameServer.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000705536 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000704512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.FileExplorer.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Mirage.Internal.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000685056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000679368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000673080 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000670720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000667136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000667136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EdgeManager.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000661816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 000637440 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000629760 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000623104 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000617784 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000610816 _____ (Microsoft Corporation) C:\Windows\system32\netprofmsvc.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000599552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000598528 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000597816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000587064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupEngine.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000578560 _____ (Microsoft Corporation) C:\Windows\system32\SppExtComObj.Exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000568120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000562176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000542288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000537608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000530432 _____ (Microsoft Corporation) C:\Windows\system32\sppcext.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000521728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.Launcher.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000518456 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000516544 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000512000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000510768 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000500736 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2020-02-12 00:17 - 2020-02-12 00:17 - 000497152 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000494080 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000490496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.FileExplorer.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000490496 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000486912 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000486400 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000477496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2020-02-12 00:17 - 2020-02-12 00:17 - 000476672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000475648 _____ (Microsoft Corporation) C:\Windows\system32\DscCore.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000469504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000467952 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000453432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000450560 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000443904 _____ (Microsoft Corporation) C:\Windows\system32\edgeIso.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000441072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.MediaControl.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000435200 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000430080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000422912 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000422008 _____ (Microsoft Corporation) C:\Windows\system32\SgrmEnclave_secure.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000421376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2020-02-12 00:17 - 2020-02-12 00:17 - 000416056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 000407040 _____ (Microsoft Corporation) C:\Windows\system32\DispBroker.Desktop.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000405632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000400696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 000399360 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000384000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000375504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000370688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000366416 _____ (Microsoft Corporation) C:\Windows\system32\mfsensorgroup.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000353280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000345088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000336384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000335448 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000327680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgeIso.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000324608 _____ (Microsoft Corporation) C:\Windows\system32\FSClient.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 000324096 _____ (Microsoft Corporation) C:\Windows\system32\rdpviewerax.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000311096 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthAgent.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000309248 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000308736 _____ (Microsoft Corporation) C:\Windows\system32\msIso.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000307712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000300392 _____ (Microsoft Corporation) C:\Windows\system32\skci.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000299520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000283136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000281088 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000274464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BCP47Langs.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpviewerax.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000268800 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000266752 _____ (Microsoft Corporation) C:\Windows\system32\DAFMCP.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000259984 _____ (Microsoft Corporation) C:\Windows\system32\logoncli.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tapisrv.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000251904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msIso.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000249344 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000247856 _____ (Microsoft Corporation) C:\Windows\system32\weretw.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000228864 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000227840 _____ (Microsoft Corporation) C:\Windows\system32\IndexedDbLegacy.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000226816 _____ (Microsoft Corporation) C:\Windows\system32\netprofm.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000225792 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000224768 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE
2020-02-12 00:17 - 2020-02-12 00:17 - 000220984 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000217600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msutb.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000214528 _____ (Microsoft Corporation) C:\Windows\system32\rdsdwmdr.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000211968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000210744 _____ (Microsoft Corporation) C:\Windows\system32\tcbloader.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000203776 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000201728 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000199480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000194560 _____ (Microsoft Corporation) C:\Windows\system32\recdisc.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000193800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\weretw.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000190464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\regapi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000190256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logoncli.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE
2020-02-12 00:17 - 2020-02-12 00:17 - 000186880 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000183808 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngOnline.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000179720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 000175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IndexedDbLegacy.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000174392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\AppvVemgr.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000165832 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000160768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Winlangdb.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000155136 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000153912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\AppvVfs.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\fdWSD.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000150536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000149504 _____ (Microsoft Corporation) C:\Windows\system32\sdrsvc.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SpatialAudioLicenseSrv.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000143160 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000139776 _____ (Microsoft Corporation) C:\Windows\system32\Chakrathunk.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000138040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\AppVStrm.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 000133464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BCP47mrm.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000132624 _____ (Microsoft Corporation) C:\Windows\system32\offlinelsa.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdWSD.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000125440 _____ (Microsoft Corporation) C:\Windows\system32\sdshext.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000123392 _____ (Microsoft Corporation) C:\Windows\system32\wercplsupport.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000119808 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000119296 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000113152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000112128 _____ (Microsoft Corporation) C:\Windows\system32\NetDriverInstall.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000108544 _____ (Microsoft Corporation) C:\Windows\system32\fdSSDP.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000107832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupApi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000106808 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthProxyStub.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000105984 _____ (Microsoft Corporation) C:\Windows\system32\utcutil.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000105472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakrathunk.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000105472 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000099712 _____ (Microsoft Corporation) C:\Windows\system32\FsIso.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000097280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\compstui.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000097080 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\globinputhost.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000095232 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000093496 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000090624 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000090624 _____ (Microsoft Corporation) C:\Windows\system32\keyiso.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000089600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfrgui.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000089328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32u.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdSSDP.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000084496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hvservice.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 000080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetDriverInstall.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usoapi.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000072816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remoteaudioendpoint.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\keyiso.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\findnetprinters.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\iemigplugin.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\printui.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iemigplugin.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000063288 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthHost.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000059221 _____ C:\Windows\system32\srms.dat
2020-02-12 00:17 - 2020-02-12 00:17 - 000058880 _____ C:\Windows\system32\runexehelper.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000057856 _____ (Microsoft Corporation) C:\Windows\system32\SrTasks.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\findnetprinters.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rtutils.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000046592 _____ (Microsoft Corporation) C:\Windows\system32\Websocket.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000045056 _____ (Microsoft Corporation) C:\Windows\system32\npmproxy.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000044544 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserLanguageProfileCallback.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000042512 _____ (Microsoft Corporation) C:\Windows\system32\SysResetErr.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mcicda.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Websocket.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000032056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2020-02-12 00:17 - 2020-02-12 00:17 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\nlmproxy.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000027648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mciwave.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000024064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mciseq.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000021520 _____ (Microsoft Corporation) C:\Windows\system32\kdhvcom.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000020944 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000019768 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\icsunattend.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\nlmsprep.dll
2020-02-12 00:17 - 2020-02-12 00:17 - 000015360 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000013824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth9.bin
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth12.bin
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth11.bin
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth10.bin
2020-02-12 00:17 - 2020-02-12 00:17 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
2020-02-12 00:16 - 2020-02-12 00:17 - 007263992 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 017787904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 007905208 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 006231200 _____ (Microsoft Corporation) C:\Windows\system32\StartTileData.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 006167552 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 004615376 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 004470784 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 004005888 _____ (Microsoft Corporation) C:\Windows\system32\EdgeContent.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 003969536 _____ (Microsoft Corporation) C:\Windows\system32\tellib.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 003728896 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 003703296 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 003590968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 003550208 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 003263488 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 003110400 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 002870272 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 002714624 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 002284544 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 002125904 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 002071552 _____ (Microsoft Corporation) C:\Windows\system32\ISM.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001942016 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001841152 _____ C:\Windows\system32\TextInputMethodFormatter.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001830200 _____ (Microsoft Corporation) C:\Windows\system32\rdpserverbase.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001757096 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2020-02-12 00:16 - 2020-02-12 00:16 - 001748480 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001726480 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001655880 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001602560 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001512320 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 001505592 _____ (Microsoft Corporation) C:\Windows\system32\rdpbase.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001481216 _____ (Microsoft Corporation) C:\Windows\system32\rdpsharercom.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001480192 _____ (Microsoft Corporation) C:\Windows\system32\usocoreworker.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 001413912 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001372160 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001366128 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2020-02-12 00:16 - 2020-02-12 00:16 - 001182232 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 001149928 _____ (Microsoft Corporation) C:\Windows\system32\ApplyTrustOffline.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 001084216 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001083904 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001026792 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 001009664 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000974336 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000949248 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthSSO.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000916480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000874296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000851968 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000804872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000803840 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000782848 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000758800 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000750080 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000747320 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000737280 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Launcher.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000735744 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000732200 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_StorageSense.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000727040 _____ (Microsoft Corporation) C:\Windows\system32\agentactivationruntime.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000716288 _____ (Microsoft Corporation) C:\Windows\system32\agentactivationruntimewindows.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000678928 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000646656 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000642008 _____ (Microsoft Corporation) C:\Windows\system32\TextInputFramework.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000637968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000605184 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000589592 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000558592 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Notifications.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000550400 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000545432 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.MediaControl.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000535552 _____ (Microsoft Corporation) C:\Windows\system32\usosvc.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000516648 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000516096 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000465208 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000464384 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000459896 _____ (Microsoft Corporation) C:\Windows\system32\MusNotifyIcon.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000456192 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000441144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000437776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000415808 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000401408 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000392192 _____ (Microsoft Corporation) C:\Windows\system32\Search.ProtocolHandler.MAPI2.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000369504 _____ (Microsoft Corporation) C:\Windows\system32\BCP47Langs.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000368128 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000355840 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicSvc.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000350720 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_SpeechPrivacy.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000324616 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000296760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\DeviceDirectoryClient.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000285184 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicCapsule.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000282112 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.AppDefaults.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000277504 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_CapabilityAccess.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000265216 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000256000 _____ (Microsoft Corporation) C:\Windows\system32\UpdateDeploymentProvider.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000250880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winnat.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000240640 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000222208 _____ (Microsoft Corporation) C:\Windows\system32\Winlangdb.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000209920 _____ (Microsoft Corporation) C:\Windows\system32\wuuhosdeployment.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000204800 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000201728 _____ (Microsoft Corporation) C:\Windows\system32\AppXApplicabilityBlob.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000197632 _____ (Microsoft Corporation) C:\Windows\system32\Win32CompatibilityAppraiserCSP.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000194064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000187392 _____ (Microsoft Corporation) C:\Windows\system32\tssrvlic.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000186672 _____ (Microsoft Corporation) C:\Windows\system32\BCP47mrm.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000184832 _____ (Microsoft Corporation) C:\Windows\system32\AarSvc.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000169472 _____ (Microsoft Corporation) C:\Windows\system32\SpatialAudioLicenseSrv.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000157696 _____ (Microsoft Corporation) C:\Windows\system32\dssvc.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000155648 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_AppExecutionAlias.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_BackgroundApps.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000147456 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000138752 _____ (Microsoft Corporation) C:\Windows\system32\InputLocaleManager.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000135168 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000130560 _____ (Microsoft Corporation) C:\Windows\system32\globinputhost.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000128528 _____ (Microsoft Corporation) C:\Windows\system32\wifitask.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\usoapi.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000127280 _____ (Microsoft Corporation) C:\Windows\system32\win32u.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\ApplicationControlCSP.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000117264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bindflt.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000107008 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingExperienceMEM.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000089912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000089088 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicAgent.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000088352 _____ (Microsoft Corporation) C:\Windows\system32\remoteaudioendpoint.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000087040 _____ (Microsoft Corporation) C:\Windows\system32\EditBufferTestHook.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000084992 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthSystray.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\CustomInstallExec.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000071480 _____ (Microsoft Corporation) C:\Windows\system32\win32appinventorycsp.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000069120 _____ (Microsoft Corporation) C:\Windows\system32\UsoClient.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000062976 _____ (Microsoft Corporation) C:\Windows\system32\LSCSHostPolicy.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000059392 _____ (Microsoft Corporation) C:\Windows\system32\UserLanguageProfileCallback.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000057856 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000057344 _____ (Microsoft Corporation) C:\Windows\system32\audioresourceregistrar.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\mcicda.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000047208 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2020-02-12 00:16 - 2020-02-12 00:16 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\WordBreakers.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000037392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wimmount.sys
2020-02-12 00:16 - 2020-02-12 00:16 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\mciwave.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000030208 _____ (Microsoft Corporation) C:\Windows\system32\mciseq.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicPS.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000027648 _____ (Microsoft Corporation) C:\Windows\system32\lstelemetry.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\bindflt.dll
2020-02-12 00:16 - 2020-02-12 00:16 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\dstokenclean.exe
2020-02-12 00:03 - 2020-01-16 06:07 - 000492544 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2020-02-12 00:03 - 2020-01-16 05:23 - 000390656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2020-02-08 16:36 - 2020-02-23 20:12 - 000000000 ____D C:\Users\sasac\AppData\Roaming\Discord
2020-02-08 16:36 - 2020-02-08 16:36 - 061370712 _____ (Discord Inc.) C:\Users\sasac\Downloads\DiscordSetup.exe
2020-02-08 16:36 - 2020-02-08 16:36 - 000002233 _____ C:\Users\sasac\Desktop\Discord.lnk
2020-02-08 16:36 - 2020-02-08 16:36 - 000000000 ____D C:\Users\sasac\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2020-02-08 16:36 - 2020-02-08 16:36 - 000000000 ____D C:\Users\sasac\AppData\Local\SquirrelTemp
2020-02-08 16:36 - 2020-02-08 16:36 - 000000000 ____D C:\Users\sasac\AppData\Local\Discord
2020-02-04 16:18 - 2020-02-04 16:28 - 000000000 ____D C:\Users\sasac\Documents\Warcraft III
2020-02-04 16:15 - 2020-02-04 16:15 - 000000930 _____ C:\Users\Public\Desktop\Warcraft III.lnk
2020-02-04 16:15 - 2020-02-04 16:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Warcraft III
2020-02-04 16:02 - 2020-02-24 21:51 - 000000000 ____D C:\Program Files (x86)\Warcraft III
2020-02-03 13:47 - 2020-02-03 13:47 - 000456901 _____ (Stargate-Game.cz ) C:\Users\sasac\Downloads\sgalert_1_0.exe
2020-02-03 02:23 - 2020-02-03 02:25 - 1162152768 _____ C:\Users\sasac\Downloads\Kyborgové ( Kiborhy , Cyborgs Heroes Never Die 2017) CZ titulky ,BRDrip,XviD,.avi
2020-01-28 23:19 - 2020-01-28 23:19 - 000000000 ____D C:\Users\sasac\AppData\Local\TslGame
2020-01-28 23:18 - 2020-01-28 23:18 - 000000000 ____D C:\Program Files (x86)\EasyAntiCheat
2020-01-28 23:02 - 2020-01-28 23:02 - 000000222 _____ C:\Users\sasac\Desktop\PLAYERUNKNOWN'S BATTLEGROUNDS.url
2020-01-28 21:09 - 2020-01-28 23:19 - 000000000 ____D C:\Users\sasac\AppData\Local\UnrealEngine
2020-01-28 21:09 - 2020-01-28 21:09 - 000074552 _____ (Wellbia.com Co., Ltd.) C:\Windows\xhunter1.sys
2020-01-28 21:09 - 2020-01-28 21:09 - 000000000 ____D C:\Users\sasac\AppData\Local\ShadowTrackerExtra
2020-01-28 21:09 - 2020-01-28 21:09 - 000000000 ____D C:\Program Files\Common Files\Uncheater
2020-01-28 20:48 - 2020-01-28 20:48 - 000000000 ____D C:\ProgramData\PUBG
2020-01-28 20:47 - 2020-01-28 20:47 - 067269568 _____ ( ) C:\Users\sasac\Downloads\PUBG-Lite-Setup.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-02-24 21:52 - 2019-11-07 20:55 - 000000000 ____D C:\Program Files (x86)\Steam
2020-02-24 21:52 - 2019-11-06 11:53 - 000000000 ____D C:\ProgramData\NVIDIA
2020-02-24 21:52 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-02-24 21:51 - 2019-11-06 11:57 - 000000000 ____D C:\Users\sasac\AppData\Local\Battle.net
2020-02-24 21:51 - 2019-11-06 11:08 - 000000000 ___RD C:\Users\sasac\OneDrive
2020-02-23 23:48 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-02-23 23:48 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\AppReadiness
2020-02-23 23:16 - 2019-11-08 08:07 - 000000000 ____D C:\Users\sasac\AppData\Roaming\TS3Client
2020-02-23 21:20 - 2019-11-06 11:07 - 001694640 _____ C:\Windows\system32\PerfStringBackup.INI
2020-02-23 21:20 - 2019-03-19 12:57 - 000717182 _____ C:\Windows\system32\perfh005.dat
2020-02-23 21:20 - 2019-03-19 12:57 - 000145262 _____ C:\Windows\system32\perfc005.dat
2020-02-23 21:20 - 2019-03-19 05:50 - 000000000 ____D C:\Windows\INF
2020-02-23 20:14 - 2019-11-06 10:59 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-02-23 20:14 - 2019-03-19 05:37 - 000524288 _____ C:\Windows\system32\config\BBI
2020-02-23 09:28 - 2019-11-08 08:43 - 000000000 ____D C:\Users\sasac\AppData\Local\CrashDumps
2020-02-21 14:34 - 2019-11-06 10:59 - 000000000 ____D C:\Windows\system32\SleepStudy
2020-02-21 12:14 - 2019-11-06 12:11 - 000000000 ____D C:\Program Files (x86)\Call of Duty Modern Warfare
2020-02-21 08:23 - 2019-11-06 11:03 - 000000000 ____D C:\Users\sasac
2020-02-20 22:45 - 2019-03-19 05:37 - 000032768 _____ C:\Windows\system32\config\ELAM
2020-02-20 22:33 - 2019-03-19 05:52 - 000000000 ___HD C:\Windows\ELAMBKUP
2020-02-18 16:42 - 2019-03-19 05:52 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2020-02-15 00:16 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\SecureBootUpdates
2020-02-15 00:16 - 2019-03-19 05:37 - 000000000 ____D C:\Windows\CbsTemp
2020-02-14 23:02 - 2019-11-06 11:08 - 000003378 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1527743807-1357318293-839389191-1001
2020-02-14 23:02 - 2019-11-06 11:03 - 000002361 _____ C:\Users\sasac\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-02-12 08:50 - 2019-11-06 11:06 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-02-12 08:50 - 2019-11-06 11:06 - 000000000 ___RD C:\Users\sasac\3D Objects
2020-02-12 08:50 - 2019-11-06 10:59 - 000267672 _____ C:\Windows\system32\FNTCACHE.DAT
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ___RD C:\Windows\PrintDialog
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\SysWOW64\oobe
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\SysWOW64\Dism
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\SystemResources
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\PerceptionSimulation
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\oobe
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\Dism
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\ShellExperiences
2020-02-12 01:23 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\bcastdvr
2020-02-12 01:23 - 2019-03-19 05:37 - 000000000 ____D C:\Windows\servicing
2020-02-12 00:28 - 2019-11-06 11:47 - 000000000 ____D C:\Windows\system32\MRT
2020-02-12 00:25 - 2019-11-06 11:47 - 120407888 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2020-02-08 16:51 - 2019-11-06 13:15 - 000000000 ____D C:\Users\sasac\AppData\Local\D3DSCache
2020-02-05 21:39 - 2019-11-26 23:31 - 000003474 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2020-02-05 21:39 - 2019-11-26 23:31 - 000003350 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2020-02-04 10:38 - 2019-11-06 10:59 - 000000000 ____D C:\Windows\system32\Drivers\wd
2020-02-03 21:56 - 2019-03-19 05:56 - 000835688 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2020-02-03 21:56 - 2019-03-19 05:56 - 000179608 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2020-02-03 16:33 - 2020-01-05 23:08 - 000000000 ____D C:\Users\sasac\Documents\The Witcher 3
2020-02-03 13:55 - 2019-11-06 11:06 - 000000000 ____D C:\Users\sasac\AppData\Local\Packages
2020-02-03 13:51 - 2019-11-22 20:58 - 000000000 ____D C:\Users\sasac\AppData\Local\BattlEye
2020-02-03 13:51 - 2019-11-07 21:14 - 000000000 ____D C:\Users\sasac\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2020-02-03 13:47 - 2019-11-06 11:06 - 000000000 ____D C:\Users\sasac\AppData\Local\VirtualStore
2020-01-31 00:02 - 2020-01-14 11:58 - 000660176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2020-01-30 23:58 - 2019-11-06 11:52 - 004963008 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2020-01-30 10:53 - 2019-11-06 11:54 - 000000000 ____D C:\Program Files (x86)\Battle.net
2020-01-30 02:40 - 2019-11-06 11:52 - 000055783 _____ C:\Windows\system32\nvinfo.pb
2020-01-30 00:56 - 2019-11-06 11:53 - 005577224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2020-01-30 00:56 - 2019-11-06 11:53 - 002655864 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2020-01-30 00:56 - 2019-11-06 11:53 - 001767920 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2020-01-30 00:56 - 2019-11-06 11:53 - 000670840 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2020-01-30 00:56 - 2019-11-06 11:53 - 000454512 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2020-01-30 00:56 - 2019-11-06 11:53 - 000131176 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2020-01-30 00:56 - 2019-11-06 11:53 - 000083976 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2020-01-29 11:21 - 2019-11-08 08:11 - 000000000 ____D C:\Users\sasac\AppData\Local\ElevatedDiagnostics
2020-01-27 08:11 - 2019-11-06 11:53 - 008887562 _____ C:\Windows\system32\nvcoproc.bin

==================== Files in the root of some directories ========

2020-02-21 08:18 - 2020-02-21 08:23 - 001065984 _____ () C:\Users\sasac\AppData\Local\file__0.localstorage

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Avatar uživatele
Diallix
VIP
VIP
Příspěvky: 2759
Registrován: 27 Dub 2008 10:34
Kontaktovat uživatele:

Re: Prosim o kontrolu

#7 Příspěvek od Diallix »

Do poznamkoveho bloku skopirujte obsah dole:

Kód: Vybrat vše

ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
AlternateDataStreams: C:\Users\sasac\Data aplikací:00e481b5e22dbe1f649fcddd505d3eb7 [394]
AlternateDataStreams: C:\Users\sasac\Data aplikací:fbd50e2f7662a5c33287ddc6e65ab5a1 [394]
AlternateDataStreams: C:\Users\sasac\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [394]
AlternateDataStreams: C:\Users\sasac\AppData\Roaming:fbd50e2f7662a5c33287ddc6e65ab5a1 [394]
FirewallRules: [{D6A2BD64-68C5-465C-8C4C-B476D03E31E7}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{A12A94DB-793E-442D-AE2D-AD71E7782604}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [TCP Query User{25844889-2301-4582-964A-B410BF164E76}C:\program files (x86)\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe] => (Allow) C:\program files (x86)\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe No File
FirewallRules: [UDP Query User{38E37966-F977-40E1-9215-43AD890E1ABF}C:\program files (x86)\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe] => (Allow) C:\program files (x86)\pubglite\client\shadowtrackerextra\binaries\win64\pubglite-win64-shipping.exe No File
HKU\S-1-5-21-1527743807-1357318293-839389191-1001\...\Run: [GalaxyClient] => [X]
SearchScopes: HKU\S-1-5-21-1527743807-1357318293-839389191-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

EmptyTemp:
Hosts:

Poznamkovy blok ulozte pod nazvom fixlist.txt do umiestnenia kde je FRST.
Spustite FRST a odkliknite tlacidlo: Fix
Vykona sa funkcionalita po ktorej sa pocitac rebootuje. Po reboote sem vlozte obsah logu: fixlog.txt ulozeneho v umiestneni FRST.
► Vyšla moja nová kniha BOTNETY! :173: Informácie o nej nájdete tu: >> BOTNETY <<

¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­¯­­­
---
Obrázek Hľadáme nové posily do nášej CyberSecurity UNIT jednotky. Viac informácií o tom, čo to obnáša a ako sa pripojiť nájdete tu: >> CyberSecurity UNIT << Obrázek
----
► Nízkoúrovňový, Vysokoúrovňový programátor - profilová karta tu: card <<
----
► Háveťárna - UPLOAD Malwaru: >> upload <<
---
► Ak sa Vám ľúbi moja práca a ste sňou spokojný, môžete ma kontaktovať na: diallix@centrum.sk, info@diallix.net alebo diallix@forum.viry.cz .
---
Momentálne aktívny ako:
- konzultant, vývojár a tutor výskumu inteligentného malwaru.
- tutor v oblasti dotazovacích jazykoch SQL (TSQL, PLSQL), objektového programovania (c++,c#,php) pre študentov.

Na fóre pôsobím ako:
- Bezpečnostná autorita viry.cz
- Zástupca tutora pre vzdelávanie nováčikov
- Zakladateľ Cyber Security jednotky

Odpovědět