Velmi zpomalený Ntb

Zpráva

#16 Příspěvek od **Diallix** » 16 říj 2020 21:19

Dobre. Prosim, vlozte sem este raz nove logy frst a addition.

marxx · #17 Příspěvek od **marxx** » 16 říj 2020 22:03

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-10-2020
Ran by Gabriela Šestáková (16-10-2020 22:28:38)
Running from C:\Users\Jarda.cksd\Desktop
Windows 10 Home Version 1903 18362.1139 (X64) (2020-04-15 10:00:03)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-2753391590-2437761739-2040745174-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2753391590-2437761739-2040745174-503 - Limited - Disabled)
Gabriela Šestáková (S-1-5-21-2753391590-2437761739-2040745174-1002 - Administrator - Enabled) => C:\Users\Jarda.cksd
Guest (S-1-5-21-2753391590-2437761739-2040745174-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2753391590-2437761739-2040745174-1004 - Limited - Enabled)
WDAGUtilityAccount (S-1-5-21-2753391590-2437761739-2040745174-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ABBYY FineReader 9.0 Sprint (HKLM-x32\...\{F9000000-0018-0000-0000-074957833700}) (Version: 9.01.513.58212 - ABBYY) Hidden
ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.00.2013.0 - Acer Incorporated)
Acer Backup Manager (HKLM-x32\...\InstallShield_{9DDDF20E-9FD1-4434-A43E-E7889DBC9420}) (Version: 4.0.0.0059 - NTI Corporation)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3011 - Acer Incorporated)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 20.012.20048 - Adobe Systems Incorporated)
Backup Manager v4 (HKLM-x32\...\{9DDDF20E-9FD1-4434-A43E-E7889DBC9420}) (Version: 4.0.0.0059 - NTI Corporation) Hidden
clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.01.3107 - Acer Incorporated)
clear.fi SDK - Video 2 (HKLM-x32\...\{EBA33CAD-E071-48d5-A168-FBA4EEB42E93}) (Version: 2.1.1910 - CyberLink Corp.) Hidden
clear.fi SDK- Movie 2 (HKLM-x32\...\{35DA427D-BB23-49B8-9AFD-CFFCFE3B708D}) (Version: 2.1.1910 - CyberLink Corp.) Hidden
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.8000.13 - Dolby Laboratories Inc)
ELAN Touchpad 11.15.0.18_X64 (HKLM\...\Elantech) (Version: 11.15.0.18 - ELAN Microelectronic Corp.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epson Easy Photo Print 2 (HKLM-x32\...\{39F58DDB-B2B8-4B86-AF20-4706A80EB30D}) (Version: 2.2.0.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{03B8AA32-F23C-4178-B8E6-09ECD07EAA47}) (Version: 2.40.0001 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EPSON SX420W Series Manuál (HKLM-x32\...\EPSON SX420W Series Manual) (Version: - )
EPSON SX420W Series Printer Uninstall (HKLM\...\EPSON SX420W Series) (Version: - SEIKO EPSON Corporation)
EPSON SX420W Series Síťová příručka (HKLM-x32\...\EPSON SX420W Series Network Guide) (Version: - )
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4i - SEIKO EPSON CORPORATION)
EpsonNet Setup 3.2 (HKLM-x32\...\{C9D8A041-2963-4B31-8FFC-1500F3DB9293}) (Version: 3.2a - SEIKO EPSON CORPORATION)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 86.0.4240.75 - Google LLC)
Google Photos Backup (HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\...\Google Photos Backup) (Version: 1.1.4.11 - Google, Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.36.31 - Google LLC) Hidden
HiSuite (HKLM-x32\...\Hi Suite) (Version: 10.0.1.100 - Huawei Technologies Co.,Ltd)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.0.1207 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Java 8 Update 211 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180211F0}) (Version: 8.0.2110.12 - Oracle Corporation)
Launch Manager (HKLM-x32\...\LManager) (Version: 7.0.4 - Acer Inc.)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 86.0.622.43 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.135.49 - )
Microsoft Office 365 - cs-cz (HKLM\...\O365HomePremRetail - cs-cz) (Version: 15.0.5249.1001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\...\OneDriveSetup.exe) (Version: 20.169.0823.0006 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\...\Teams) (Version: 1.3.00.26064 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{97238E8A-4919-4A1E-965A-C6C36938F4CE}) (Version: 2.68.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.13.26020 (HKLM-x32\...\{7474cd6e-76cc-4257-837e-5b9261e526af}) (Version: 14.13.26020.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32\...\{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation)
MyWinLocker (HKLM\...\{0B78ECB0-1A6B-4E6D-89D7-0E7CE77F0427}) (Version: 4.0.14.35 - Egis Technology Inc.) Hidden
MyWinLocker 4 (HKLM-x32\...\{39F15B50-A977-4CA6-B1C3-6A8724CDA025}) (Version: 4.0.14.35 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.24 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.24 - Egis Technology Inc.)
NTI Media Maker 9 (HKLM-x32\...\{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9008 - NTI Corporation) Hidden
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9008 - NTI Corporation)
NVIDIA PhysX System Software 9.12.0613 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0613 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (HKLM-x32\...\{90150000-008C-0000-0000-0000000FF1CE}) (Version: 15.0.5249.1001 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-008F-0000-1000-0000000FF1CE}) (Version: 15.0.5249.1001 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (HKLM-x32\...\{90150000-008C-0405-0000-0000000FF1CE}) (Version: 15.0.5249.1001 - Microsoft Corporation) Hidden
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.01.3200 - Acer)
Ovládací panel NVIDIA 376.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 376.54 - NVIDIA Corporation) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.259 - Google, Inc.)
Pomocník s aktualizací Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22617 - Microsoft Corporation)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.220 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.41 - Qualcomm Atheros)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6690 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.8400.27023 - Realtek Semiconductor Corp.)
Sada Compatibility Pack pro systém Office 2007 (HKLM-x32\...\{90120000-0020-0405-0000-0000000FF1CE}) (Version: 12.0.6514.5001 - Microsoft Corporation)
Seznam prohlížeč (HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\...\Seznam Browser) (Version: 6.4.1 - Seznam.cz a.s.)
Seznam Software (HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\...\SeznamInstall) (Version: - Seznam.cz)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Shredder (HKLM\...\{1F557316-CFC0-41BD-AFF7-8BC49CE444D7}) (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (HKLM-x32\...\{C2695E83-CF1D-43D1-84FE-B3BEC561012A}) (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.151 - Skype Technologies S.A.)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
Update for Windows 10 for x64-based Systems (KB4480730) (HKLM\...\{3BAE4496-6F6C-4330-A8AA-B93D3D346FA5}) (Version: 2.53.0.0 - Microsoft Corporation)
UpdateAssistant (HKLM\...\{F339C545-24DC-4870-AA32-6EB6B0500B95}) (Version: 1.24.0.0 - Microsoft Corporation) Hidden
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version: - Microsoft Corporation)
Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
WebAdvisor od společnosti McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.157 - McAfee, LLC)
Windows Setup Remediations (x64) (KB4023057) (HKLM\...\{5534e02f-0f5d-40dd-ba92-bea38d22384d}.sdb) (Version: - )

Packages:
=========
7digital Music Store -> C:\Program Files\WindowsApps\7digitalLtd.7digitalMusicStore_2.1.10.3_x86__qv1vc61z2t2b4 [2017-09-14] (7digital Ltd)
Acer Crystal Eye -> C:\Program Files\WindowsApps\CyberLinkCorp.ac.AcerCrystalEye_2.0.1804.25604_x86__ypz87dpxkv292 [2013-06-20] (CYBERLINK COM CORP)
Acer Explorer -> C:\Program Files\WindowsApps\AcerIncorporated.AcerExplorer_2.0.3007.0_x86__48frkmn4z8aw4 [2016-07-09] (Acer Incorporated)
Any Word to PDF -> C:\Program Files\WindowsApps\AnywaySoftInc.AnyWordtoPDF_1.2.6.0_x64__0qkrc2qacwvfm [2020-04-26] (AnywaySoft, Inc.) [MS Ad]
Candy Crush Soda Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSodaSaga_1.179.300.0_x86__kgqvnymyfvs32 [2020-10-16] (king.com)
Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.5.201.0_x64__rz1tebttyb220 [2020-09-28] (Dolby Laboratories)
Evernote -> C:\Program Files\WindowsApps\Evernote.Evernote_10.1.6.0_x86__q4d96b2w5wcc2 [2020-10-16] (Evernote)
Fresh Paint -> C:\Program Files\WindowsApps\Microsoft.FreshPaint_3.1.10383.1000_x86__8wekyb3d8bbwe [2019-06-12] (Microsoft Corporation)
Kindle -> C:\Program Files\WindowsApps\AMZNMobileLLC.KindleforWindows8_2.1.0.2_neutral__stfe6vwa9jnbp [2015-06-21] (AMZN Mobile LLC)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-02-11] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-02-11] (Microsoft Corporation) [MS Ad]
Microsoft Mahjong -> C:\Program Files\WindowsApps\Microsoft.MicrosoftMahjong_3.11.6020.0_x64__8wekyb3d8bbwe [2020-08-04] (Microsoft Studios) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.8101.0_x64__8wekyb3d8bbwe [2020-09-27] (Microsoft Studios) [MS Ad]
MSN Cestování -> C:\Program Files\WindowsApps\Microsoft.BingTravel_3.0.4.336_x64__8wekyb3d8bbwe [2015-07-14] (Microsoft Corporation) [MS Ad]
MSN Gurmánský svět -> C:\Program Files\WindowsApps\Microsoft.BingFoodAndDrink_3.0.4.336_x64__8wekyb3d8bbwe [2015-07-14] (Microsoft Corporation) [MS Ad]
MSN Sports -> C:\Program Files\WindowsApps\Microsoft.BingSports_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-24] (Microsoft Corporation) [MS Ad]
MSN Zdraví a fitness -> C:\Program Files\WindowsApps\Microsoft.BingHealthAndFitness_3.0.4.336_x64__8wekyb3d8bbwe [2015-07-14] (Microsoft Corporation) [MS Ad]
Neat Office -> C:\Program Files\WindowsApps\15191PeakPlayer.NeatOffice_3.2.5.0_x86__y5c4dfz5b21fm [2020-05-30] (Any DVD & Office App)
newsXpresso -> C:\Program Files\WindowsApps\esobiIncorporated.newsXpressoMetro_3.1.3.395_x86__sngswjb5h6fyg [2015-03-22] (Yisoubi Co. Ltd.)
Skitch Touch -> C:\Program Files\WindowsApps\Evernote.Skitch_2.4.2000.1918_neutral__q4d96b2w5wcc2 [2013-07-19] (Evernote)
Social Jogger -> C:\Program Files\WindowsApps\CyberLinkCorp.ac.SocialJogger_1.0.2228.0_neutral__ypz87dpxkv292 [2013-11-27] (CYBERLINK COM CORP)
Taptiles -> C:\Program Files\WindowsApps\Microsoft.Taptiles_2.6.288.0_x86__8wekyb3d8bbwe [2018-12-29] (Microsoft Studios) [MS Ad]
Twitter -> C:\Program Files\WindowsApps\9E2F88E3.Twitter_6.1.4.1000_neutral__wgeqdkkx372wm [2018-12-29] (Twitter Inc.)
Vtelevizi.cz -> C:\Program Files\WindowsApps\54151VJirovsky.Vtelevizi_2.1.12.14_x64__fm5te3xsz8v00 [2013-04-02] (VJirovsky)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2753391590-2437761739-2040745174-1002_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\Jarda.cksd\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2753391590-2437761739-2040745174-1002_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\Jarda.cksd\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2753391590-2437761739-2040745174-1002_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Jarda.cksd\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-2753391590-2437761739-2040745174-1002_Classes\CLSID\{E9E7529D-7F09-410B-AF2A-CC154473B19C}\InprocServer32 -> C:\Users\Jarda.cksd\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll (Google LLC -> Google LLC)
ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-05-06] (Acer Incorporated -> Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-05-06] (Acer Incorporated -> Acer Incorporated)
ContextMenuHandlers3: [MWLIVShellExt] -> {B1B294FE-EC1E-4fef-AF68-D34CE3E38157} => C:\Program Files (x86)\EgisTec MyWinLocker\x64\MWLIVShellExt.dll [2012-07-12] (EGIS TECHNOLOGY INC. -> Egis Technology Inc.)
ContextMenuHandlers3: [ShredderContextMenu] -> {521065F1-DE6C-4E46-BBCB-89B0D0BE860D} => C:\Program Files (x86)\EgisTec Shredder\x64\ShredderContextMenu.dll [2011-03-29] (EGIS TECHNOLOGY INC. -> Egis Technology Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll [2017-03-09] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-12-29] (NVIDIA Corporation -> NVIDIA Corporation)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\Jarda.cksd\AppData\Local\Microsoft\Windows\RoamingTiles\6081250430.lnk -> hxxp://www.playtvak.cz/byt-hezka.asp
ShortcutWithArgument: C:\Users\Jarda.cksd\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\6081250430.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> -contentTile -formatVersion 0x00000003 -pinnedTimeLow 0x2b3ea731 -pinnedTimeHigh 0x01d148ab -securityFlags 0x00000000 -tileType 0x00000000 -url 0x00000025 hxxp://www.playtvak.cz/byt-hezka.aspx
ShortcutWithArgument: C:\Users\Jarda.cksd\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\b38c8a402571e3e7\Seznam.cz.lnk -> C:\Users\Jarda.cksd\AppData\Roaming\Seznam Browser\Seznam.cz.exe (Seznam.cz) -> --user-data-dir="C:\Users\Jarda.cksd\AppData\Local\Seznam.cz\User Data" --profile-directory=Default --app-id=ckjpageadhfekbilpnlbcjgbflimllbk

==================== Loaded Modules (Whitelisted) =============

2008-04-11 11:54 - 2008-04-11 11:54 - 000348160 _____ (Microsoft Corporation) [File not signed] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\MSVCR71.dll
2005-01-13 10:47 - 2005-01-13 10:47 - 000049152 _____ (SEIKO EPSON CORP.) [File not signed] C:\Program Files (x86)\Epson Software\Event Manager\ESPSUTL.dll
2009-11-26 16:53 - 2009-11-26 16:53 - 000055296 _____ (SEIKO EPSON CORP.) [File not signed] C:\Program Files (x86)\Epson Software\Event Manager\ScnMgr10.dll
2009-11-20 10:46 - 2009-11-20 10:46 - 000103936 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\Epson Software\Event Manager\epnsm.dll
2009-10-21 17:39 - 2009-10-21 17:39 - 000291328 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\Epson Software\Event Manager\LcMgr.dll
2009-11-24 15:18 - 2009-11-24 15:18 - 000142336 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\Epson Software\Event Manager\ScanEngine30.dll
2020-04-27 08:26 - 2008-12-01 12:59 - 000558080 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\WINDOWS\System32\enppmon.dll
2020-04-27 08:26 - 2008-06-18 11:49 - 000250880 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\WINDOWS\System32\enpres.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.seznam.cz/
SearchScopes: HKLM-x32 -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKLM-x32 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2753391590-2437761739-2040745174-1002 -> DefaultScope {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2753391590-2437761739-2040745174-1002 -> {1308F572-0F8D-4C5D-B3B2-2BA2976D6815} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-2753391590-2437761739-2040745174-1002 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2753391590-2437761739-2040745174-1002 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKU\S-1-5-21-2753391590-2437761739-2040745174-1002 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={9DB66DC4-EE19-4589-A0EC-7BE0D9171D17}&mid=a007e6f0a0b647d39dc6f123cc3c0e00-2e5f61ce55776d302306b0da3e43af198dfca2f1&lang=cs&ds=AVG&pr=pr&d=2013-09-20 08:45:39&v=15.4.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2020-08-03] (Microsoft Corporation -> Microsoft Corporation)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\IEPlugIn.dll [2013-01-28] (Qualcomm Atheros -> Qualcomm Atheros Commnucations) [File not signed]
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2009-08-24] (SEIKO EPSON CORPORATION / CyCom Technology Corp.) [File not signed]
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-27] (Google Inc -> Google Inc.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2020-08-03] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_211\bin\ssv.dll [2019-05-12] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-27] (Google Inc -> Google Inc.)
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2020-10-10] (McAfee, LLC -> McAfee, LLC)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_211\bin\jp2ssv.dll [2019-05-12] (Oracle America, Inc. -> Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-27] (Google Inc -> Google Inc.)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2009-08-24] (SEIKO EPSON CORPORATION / CyCom Technology Corp.) [File not signed]
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-27] (Google Inc -> Google Inc.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2017-07-18] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2019-01-20 17:53 - 000000878 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\EgisTec MyWinLocker\x64;C:\Program Files (x86)\EgisTec MyWinLocker\;C:\Program Files (x86)\Acer\abFiles\;C:\Program Files (x86)\Skype\Phone\;C:\WINDOWS\System32\OpenSSH\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Jarda.cksd\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\IMG_1358.JPG
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{89958B64-D1AA-4166-BAB6-6D90DF040801}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{9AB062E7-CAED-4AF2-B0C7-4E0585EDB5CB}C:\program files (x86)\acer\abphoto\windowsupnp.exe] => (Block) C:\program files (x86)\acer\abphoto\windowsupnp.exe (Acer Incorporated -> acer)
FirewallRules: [TCP Query User{0C92297E-C275-4E55-A3F5-25F793113AAA}C:\program files (x86)\acer\abphoto\windowsupnp.exe] => (Block) C:\program files (x86)\acer\abphoto\windowsupnp.exe (Acer Incorporated -> acer)
FirewallRules: [UDP Query User{A1538AC6-C645-46C1-B79E-7CB11DF1EF37}C:\program files (x86)\acer\abphoto\dmcdaemon.exe] => (Block) C:\program files (x86)\acer\abphoto\dmcdaemon.exe (Acer Incorporated -> acer)
FirewallRules: [TCP Query User{70CAC16E-6A7C-4494-B5C1-D14D57172EB9}C:\program files (x86)\acer\abphoto\dmcdaemon.exe] => (Block) C:\program files (x86)\acer\abphoto\dmcdaemon.exe (Acer Incorporated -> acer)
FirewallRules: [{96473C4E-BE8C-4F30-B117-FD66B2A7E0AC}] => (Allow) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManager.exe (NTI Corporation -> NTI Corporation)
FirewallRules: [{E55C0AE6-6EC0-432D-8023-08F6A3C4D648}] => (Allow) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe (NTI Corporation -> NTI Corporation)
FirewallRules: [{9622AF03-BB91-460A-B17B-0BC96F1BC5F2}] => (Allow) C:\Program Files (x86)\NTI\Acer Backup Manager\FileExplorer.exe (NTI Corporation -> NTI Corporation)
FirewallRules: [{D4EA5EE0-1CA8-40D6-9D60-4D998E28317C}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe (Acer Incorporated -> acer)
FirewallRules: [{E2531EC2-38DA-46B3-B68F-5D0E790A3A20}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe (Acer Incorporated -> acer)
FirewallRules: [{5CD6BA85-D2FD-433A-B8FF-79FAAB480B41}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe (Acer Incorporated -> acer)
FirewallRules: [{7D0E5FA6-5CD4-4B94-83DD-CDBB5BBE2B5C}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe (Acer Incorporated -> acer)
FirewallRules: [{C8F383C9-1614-4D12-97B0-B34273F29133}] => (Allow) C:\Program Files (x86)\Acer\clear.fi SDK21\Video\VideoPlayer.exe (CyberLink -> )
FirewallRules: [TCP Query User{52329BF1-DE39-4D1C-BCF6-536845D89519}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [UDP Query User{F4AE2B09-50A8-4910-BD16-C9CC5D798719}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{73633C16-F6F0-485C-ADE9-331CCDCD5273}] => (Block) C:\program files (x86)\skype\phone\skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{DA4375DA-F9B0-45D0-BEF6-75C406E26F3A}] => (Block) C:\program files (x86)\skype\phone\skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{90C57303-99C9-4AE0-BED4-56F13B5D3262}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe (Acer Incorporated -> Acer Cloud Technology)
FirewallRules: [{DF5AFE7C-8AB4-4B3F-9962-413E14912FF1}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe (Acer Incorporated -> Acer Cloud Technology)
FirewallRules: [TCP Query User{3BEB99B6-BE36-4A64-A0FE-A60D9208692A}C:\program files (x86)\acer\abphoto\dmcdaemon.exe] => (Allow) C:\program files (x86)\acer\abphoto\dmcdaemon.exe (Acer Incorporated -> acer)
FirewallRules: [UDP Query User{9CAEE4E2-0BD7-480B-85CE-254B12196F56}C:\program files (x86)\acer\abphoto\dmcdaemon.exe] => (Allow) C:\program files (x86)\acer\abphoto\dmcdaemon.exe (Acer Incorporated -> acer)
FirewallRules: [TCP Query User{9F70E80D-5162-45C5-B877-218F2267C667}C:\program files (x86)\acer\abphoto\windowsupnp.exe] => (Allow) C:\program files (x86)\acer\abphoto\windowsupnp.exe (Acer Incorporated -> acer)
FirewallRules: [UDP Query User{6C4FA7F8-DBEE-440C-B7C1-1EB0ADC68DCA}C:\program files (x86)\acer\abphoto\windowsupnp.exe] => (Allow) C:\program files (x86)\acer\abphoto\windowsupnp.exe (Acer Incorporated -> acer)
FirewallRules: [{9FE316F7-8CB8-4007-BA08-AFE5DFADAE61}] => (Allow) C:\Program Files (x86)\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
FirewallRules: [{E8BDF2EE-7FC6-4AD3-8E0D-1A46DD6D55C6}] => (Allow) C:\Program Files (x86)\EpsonNet\EpsonNet Setup\tool10\ENEasyApp.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
FirewallRules: [TCP Query User{9D9F2CC2-F854-472C-924D-D6AC58186BEF}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
FirewallRules: [UDP Query User{C6CF3866-877E-4DD2-9A23-0C5206AA9724}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
FirewallRules: [{8563BFBF-6A29-4A62-811D-3871E64C6CAE}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{BF20F279-789D-4CFA-8DB9-22799BC06AF3}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{BC0A1FD8-E82D-4FDF-BBBB-AC15A9F61F64}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{51E8CADE-B5E3-4388-A83C-B0F078F6CCEB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [TCP Query User{E2A3F1BF-65D3-4F94-9F14-55E56AB7440E}C:\users\jarda.cksd\appdata\local\microsoft\teams\current\teams.exe] => (Block) C:\users\jarda.cksd\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{D4E4205F-7A8E-4375-9F2B-C5B46F054A55}C:\users\jarda.cksd\appdata\local\microsoft\teams\current\teams.exe] => (Block) C:\users\jarda.cksd\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D11144DF-8C4C-409E-99F9-375A9C922743}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

01-10-2020 00:28:39 Windows Update
09-10-2020 20:11:44 Naplánovaný kontrolní bod
09-10-2020 20:14:23 AdwCleaner_BeforeCleaning_09/10/2020_20:14:23
14-10-2020 21:51:50 Windows Update

==================== Faulty Device Manager Devices ============

Name: Bluetooth USB Module
Description: Bluetooth USB Module
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Qualcomm Atheros Communications
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

==================== Event log errors: ========================

Application errors:
==================
Error: (10/16/2020 10:19:35 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (11072,R,98) TILEREPOSITORYS-1-5-18: Při otevírání souboru protokolu C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log došlo k chybě -1023 (0xfffffc01).

Error: (10/16/2020 10:12:02 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (4364,R,98) TILEREPOSITORYS-1-5-18: Při otevírání souboru protokolu C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log došlo k chybě -1023 (0xfffffc01).

Error: (10/16/2020 09:57:31 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.

Error: (10/16/2020 09:57:31 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informace služby Stínová kopie svazku: Server COM s identifikátorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} a názvem CEventSystem nelze spustit. [0x8007045b, Probíhá vypnutí systému.
]

Error: (10/16/2020 09:51:17 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (9212,R,98) TILEREPOSITORYS-1-5-18: Při otevírání souboru protokolu C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log došlo k chybě -1023 (0xfffffc01).

Error: (10/16/2020 09:36:07 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (10496,R,98) TILEREPOSITORYS-1-5-18: Při otevírání souboru protokolu C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log došlo k chybě -1023 (0xfffffc01).

Error: (10/16/2020 09:24:50 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (5044,R,98) TILEREPOSITORYS-1-5-18: Při otevírání souboru protokolu C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log došlo k chybě -1023 (0xfffffc01).

Error: (10/16/2020 09:11:23 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny CoCreateInstance došlo k neočekávané chybě. hr= 0x8007045b, Probíhá vypnutí systému.
.

System errors:
=============
Error: (10/16/2020 10:29:21 PM) (Source: DCOM) (EventID: 10010) (User: ADAMEK)
Description: Server Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (10/16/2020 10:04:17 PM) (Source: DCOM) (EventID: 10010) (User: ADAMEK)
Description: Server Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (10/16/2020 10:03:37 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Služba Správce stažených map přestala během spouštění reagovat.

Error: (10/16/2020 10:00:46 PM) (Source: DCOM) (EventID: 10010) (User: ADAMEK)
Description: Server Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (10/16/2020 09:43:23 PM) (Source: DCOM) (EventID: 10010) (User: ADAMEK)
Description: Server Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (10/16/2020 09:18:21 PM) (Source: DCOM) (EventID: 10010) (User: ADAMEK)
Description: Server Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca se v daném časovém limitu neregistroval u služby DCOM.

Error: (10/16/2020 09:17:43 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Služba Správce stažených map přestala během spouštění reagovat.

Error: (10/16/2020 09:14:59 PM) (Source: DCOM) (EventID: 10010) (User: ADAMEK)
Description: Server Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca se v daném časovém limitu neregistroval u služby DCOM.

Windows Defender:
===================================
Date: 2020-10-16 21:29:08.920
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {840493D9-6A66-46F6-8DC4-7D8EE4B7A26C}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2020-10-16 21:09:27.522
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {E95B23BD-3C21-4D35-87EE-70D2097CBE69}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2020-10-16 21:00:57.577
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {76F69BA7-EB9C-4C73-8E4D-5BCC5C5F8D89}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2020-10-16 20:50:55.979
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {55A90017-DF42-45AA-98E5-2149DF4007B1}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2020-10-16 08:27:28.819
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {3655FC61-AB47-4D7D-8C14-B2452D7A6858}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2020-09-27 00:21:27.314
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.321.1325.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.17300.4
Kód chyby: 0x80070020
Popis chyby: Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.

Date: 2020-09-27 00:21:27.313
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.321.1325.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.17300.4
Kód chyby: 0x80070020
Popis chyby: Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.

Date: 2020-09-27 00:21:27.312
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.321.1325.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.17300.4
Kód chyby: 0x80070020
Popis chyby: Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.

Date: 2020-09-26 23:56:07.797
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.321.1325.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.17300.4
Kód chyby: 0x80070102
Popis chyby: Vypršel časový limit operace čekání.

CodeIntegrity:
===================================

Date: 2020-08-03 16:48:46.181
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Acer\shellext\x64\shellext_win.dll that did not meet the Microsoft signing level requirements.

Date: 2020-08-03 16:48:46.117
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Acer\shellext\x64\shellext_win.dll that did not meet the Microsoft signing level requirements.

Date: 2020-08-03 16:48:45.985
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Acer\shellext\x64\shellext_win.dll that did not meet the Microsoft signing level requirements.

Date: 2020-05-29 18:58:35.206
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Acer\shellext\x64\shellext_win.dll that did not meet the Microsoft signing level requirements.

Date: 2020-05-29 18:58:35.099
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Acer\shellext\x64\shellext_win.dll that did not meet the Microsoft signing level requirements.

Date: 2020-05-29 18:58:34.834
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Acer\shellext\x64\shellext_win.dll that did not meet the Microsoft signing level requirements.

Date: 2020-05-13 12:18:16.408
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Acer\shellext\x64\shellext_win.dll that did not meet the Microsoft signing level requirements.

Date: 2020-05-13 12:18:16.364
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Acer\shellext\x64\shellext_win.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

BIOS: Phoenix Technologies Ltd. V2.11 11/05/2012
Motherboard: Acer Aspire V5-531G
Processor: Intel(R) Pentium(R) CPU 987 @ 1.50GHz
Percentage of memory in use: 85%
Total physical RAM: 3889.6 MB
Available physical RAM: 573.93 MB
Total Virtual: 4593.6 MB
Available Virtual: 734.54 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:449.77 GB) (Free:179.33 GB) NTFS

\\?\Volume{7c1da943-a37f-4cdd-a759-907b0b1fe24a}\ (Recovery) (Fixed) (Total:0.39 GB) (Free:0.13 GB) NTFS
\\?\Volume{223bbe51-d4ab-4e73-9b1d-191afb736a0d}\ () (Fixed) (Total:0.92 GB) (Free:0.4 GB) NTFS
\\?\Volume{49235e84-bab7-47e3-ac4d-22bb1fc2ffd5}\ (Push Button Reset) (Fixed) (Total:14.26 GB) (Free:1.65 GB) NTFS
\\?\Volume{544c02a9-62a7-4bcc-969f-ceb969b6708a}\ (ESP) (Fixed) (Total:0.29 GB) (Free:0.26 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 6AC3DE3B)

Partition: GPT.

==================== End of Addition.txt =======================

FRST1.zip: (17.99 KiB) Staženo 41 x

#18 Příspěvek od **Diallix** » 16 říj 2020 22:19

Bezi vam v systeme windows defender, a zaroven mate nainstalovane casti MCAFEE.

Odinstalujte tieto polozky:

Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
WebAdvisor od společnosti McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.157 - McAfee, LLC)

marxx · #19 Příspěvek od **marxx** » 17 říj 2020 09:52

Můžete mě prosím nakopnout jak toho docílím. Ať jsem se snažil všemožně, nepřišel jsem na to, jak to provést. Děkuji za ochotu.

marxx · #20 Příspěvek od **marxx** » 17 říj 2020 13:02

Podařilo se mi je v editoru registru najít. Stačí je odstranit, nebo se musí nějakým způsobem odinstalovat?

#21 Příspěvek od **Diallix** » 17 říj 2020 13:07

Skuste ich odinstalovat cez CCLEANER:

: Clipboard01.jpg (65.68 KiB) Zobrazeno 827 x

marxx · #22 Příspěvek od **marxx** » 17 říj 2020 20:28

Myslím, že se mi je podařilo odstranit. Vkládám nové logy z FRST.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14-10-2020
Ran by Gabriela Šestáková (administrator) on ADAMEK (Acer Aspire V5-531G) (17-10-2020 20:47:29)
Running from C:\Users\Jarda.cksd\Desktop
Loaded Profiles: Gabriela Šestáková
Platform: Windows 10 Home Version 1903 18362.1139 (X64) Language: Čeština (Česko)
Default browser: "C:\Users\Jarda.cksd\AppData\Roaming\Seznam Browser\Seznam.cz.exe" -surl="%1"
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ABBYY SOLUTIONS LIMITED -> ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Dolby Laboratories, Inc. -> Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(Dritek System Inc. -> Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Dritek System Inc. -> Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Dritek System Inc. -> Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Dritek System Inc. -> Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Dritek System Inc. -> Dritek System INC.) C:\Windows\RfBtnSvc64.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Huawei Technologies Co., Ltd. -> ) [File not signed] C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel® Upgrade Service -> Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Jarda.cksd\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Jarda.cksd\AppData\Local\Microsoft\Teams\current\Teams.exe <6>
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.13228.41011.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2009.7-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2009.7-0\NisSrv.exe
(NTI Corporation -> NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(NTI Corporation -> NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(Seznam.cz, a.s. -> Seznam.cz) C:\Users\Jarda.cksd\AppData\Roaming\Seznam Browser\sznAgent\Seznam.cz.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12936848 2012-07-31] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-07-31] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3242696 2015-10-07] (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.)
HKLM-x32\...\Run: [BakupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [533568 2012-08-23] (NTI Corporation -> NTI Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Dolby PCEE4\pcee4.exe [508256 2020-04-15] (Dolby Laboratories, Inc. -> Dolby Laboratories Inc.)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [976320 2009-12-03] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\...\Run: [EPSON SX420W Series] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIGCE.EXE [224768 2009-09-14] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\...\Run: [sznAgent] => C:\Users\Jarda.cksd\AppData\Roaming\Seznam Browser\sznAgent\Seznam.cz.exe [169536 2020-03-27] (Seznam.cz, a.s. -> Seznam.cz)
HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Jarda.cksd\AppData\Local\Microsoft\Teams\Update.exe [2452664 2020-10-16] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [30870200 2020-09-22] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\...\RunOnce: [Application Restart #0] => C:\Users\Jarda.cksd\AppData\Roaming\Seznam Browser\Seznam.cz.exe [1741312 2020-04-29] (Seznam.cz) [File not signed]
HKLM\...\Print\Monitors\EPSON SX420W Series 64MonitorBE: C:\WINDOWS\system32\E_ILMGCE.DLL [118784 2008-11-12] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\WINDOWS\system32\enppmon.dll [558080 2008-12-01] (SEIKO EPSON CORPORATION) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\86.0.4240.75\Installer\chrmstp.exe [2020-10-14] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\WINDOWS\system32\AthCredentialProvider.dll [2013-01-28] (Qualcomm Atheros -> Qualcomm Atheros Commnucations) [File not signed]
HKLM\Software\...\Authentication\Credential Provider Filters: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\WINDOWS\system32\AthCredentialProvider.dll [2013-01-28] (Qualcomm Atheros -> Qualcomm Atheros Commnucations) [File not signed]
AppInit_DLLs: C:\WINDOWS\system32\DriverStore\FileRepository\nvacwu.inf_amd64_bdd6ea477d4e2fba\nvinitx.dll => C:\WINDOWS\system32\DriverStore\FileRepository\nvacwu.inf_amd64_bdd6ea477d4e2fba\nvinitx.dll [183144 2017-01-17] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\system32\DriverStore\FileRepository\nvacwu.inf_amd64_bdd6ea477d4e2fba\nvinit.dll => C:\WINDOWS\system32\DriverStore\FileRepository\nvacwu.inf_amd64_bdd6ea477d4e2fba\nvinit.dll [161016 2017-01-17] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer Backup Manager Tray.lnk [2012-09-13]
ShortcutTarget: Acer Backup Manager Tray.lnk -> C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (NTI Corporation -> NTI Corporation)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0048947C-3873-4213-90D1-9B8108FD27C2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {068ECAC4-6905-4B3C-A919-75E328E47043} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [1140616 2020-08-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {1B2F2D3A-AEDE-4994-993C-E50D638E7CEB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {269EEBB3-F97A-43E0-ABEB-6FAF3790AF1D} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [972176 2020-05-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {2713E3DF-0817-4015-8414-5530FE5E0F29} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {3273A4A5-4016-4B26-ABB8-5058460038E3} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-09-22] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {501D50EE-E75E-4F04-89A8-B83DC472861A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [25492152 2020-09-22] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {5A3FB241-0B11-4EA5-BC66-0D9F1B406040} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM => {C8367320-6F85-11E0-A1F0-0800200C9A66} C:\WINDOWS\System32\BthTelemetry.dll [32256 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
Task: {8E92FCDE-B5B4-47F3-9DF5-E599B053455E} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [972176 2020-05-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {B9B219F5-7590-45F5-A344-03B823F77281} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe
Task: {C3D93761-FF8B-430F-982B-0BEB58CDB674} - System32\Tasks\BacKGroundAgent => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [65824 2017-09-26] (Acer Incorporated -> Acer Incorporated)
Task: {C415FE0E-DDCB-44E0-A459-B9164B72424B} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{d402ba2b-5f24-427c-a654-9ac5cafb75b4}: [DhcpNameServer] 192.168.0.1

Edge:
======
Edge Profile: C:\Users\Jarda.cksd\AppData\Local\Microsoft\Edge\User Data\Default [2020-10-17]
Edge StartupUrls: Default -> "hxxps://seznam.cz/"

FireFox:
========
FF ProfilePath: C:\Users\Jarda.cksd\AppData\Roaming\TomTom\HOME\Profiles\gik30qzj.default [2014-04-07]
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google Inc -> Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.211.2 -> C:\Program Files (x86)\Java\jre1.8.0_211\bin\dtplugin\npDeployJava1.dll [2019-05-12] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.211.2 -> C:\Program Files (x86)\Java\jre1.8.0_211\bin\plugin2\npjp2.dll [2019-05-12] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-03-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-09-11] (Adobe Inc. -> Adobe Systems Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Jarda.cksd\AppData\Local\Google\Chrome\User Data\Default [2020-10-17]
CHR Notifications: Default -> hxxps://www.facebook.com
CHR HomePage: Default -> hxxps://www.seznam.cz/?clid=22668
CHR StartupUrls: Default -> "hxxps://www.seznam.cz/?clid=22668"
CHR DefaultSearchURL: Default -> hxxps://search.yahoo.com/search?fr=mcafee_uninternational&type=E210CZ662G0&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR Extension: (Prezentace) - C:\Users\Jarda.cksd\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-11-07]
CHR Extension: (Dokumenty) - C:\Users\Jarda.cksd\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-03-27]
CHR Extension: (Disk Google) - C:\Users\Jarda.cksd\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-06]
CHR Extension: (YouTube) - C:\Users\Jarda.cksd\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-06]
CHR Extension: (Vyhledávání Google) - C:\Users\Jarda.cksd\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-06]
CHR Extension: (Tabulky) - C:\Users\Jarda.cksd\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-11-07]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\Jarda.cksd\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2020-10-16]
CHR Extension: (Dokumenty Google offline) - C:\Users\Jarda.cksd\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-10-16]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Jarda.cksd\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-06]
CHR Extension: (Gmail) - C:\Users\Jarda.cksd\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-05-10]
CHR Extension: (Chrome Media Router) - C:\Users\Jarda.cksd\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-10-16]
CHR HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [eibfgbclmgnmffinenpipoibfdoblond] - C:\Users\Jarda.cksd\AppData\Roaming\Seznam.cz\bin\listicka-chrome-rv-1.5.3.crx [2020-08-04]
CHR HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd]
CHR HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fkfpcckoflkdgjdobdkpclgngaahgbpi] - C:\Users\Jarda.cksd\AppData\Roaming\Seznam.cz\bin\listicka-chrome-email-1.2.0.crx [2020-08-04]
CHR HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ghoooididkjbjjldgojdgceoinbhbjmh] - C:\Users\Jarda.cksd\AppData\Roaming\Seznam.cz\bin\listicka-chrome-slovnik-1.2.0.crx [2020-08-04]
CHR HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lelcohngbjgpiibagnfmncojacafbbpg] - C:\Users\Jarda.cksd\AppData\Roaming\Seznam.cz\bin\Partner-1.0.3.crx [2020-08-04]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY SOLUTIONS LIMITED -> ABBYY)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169544 2020-09-06] (Adobe Inc. -> Adobe Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8473200 2019-05-11] (BattlEye Innovations e.K. -> )
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3051928 2020-05-12] (Microsoft Corporation -> Microsoft Corporation)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [802432 2019-05-11] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [190784 2019-12-27] (Huawei Technologies Co., Ltd. -> ) [File not signed]
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [259136 2012-08-23] (NTI Corporation -> NTI Corporation)
R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [93296 2012-09-13] (Dritek System Inc. -> Dritek System INC.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2009.7-0\NisSrv.exe [2372048 2020-09-30] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2009.7-0\MsMpEng.exe [128376 2020-09-30] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem"

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18944 2019-12-27] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2019-12-27] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R3 Ps2Kb2Hid; C:\WINDOWS\System32\drivers\aPs2Kb2Hid.sys [26736 2012-09-13] (Dritek System Inc. -> Dritek System Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2020-09-30] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [428264 2020-09-30] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [69864 2020-09-30] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-10-17 20:47 - 2020-10-17 20:53 - 000021315 _____ C:\Users\Jarda.cksd\Desktop\FRST.txt
2020-10-17 20:03 - 2020-10-17 20:05 - 000000000 ____D C:\ProgramData\AVG
2020-10-17 20:02 - 2020-10-17 20:02 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2020-10-17 20:02 - 2020-10-17 20:02 - 000002896 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC
2020-10-17 20:02 - 2020-10-17 20:02 - 000000867 _____ C:\Users\Public\Desktop\CCleaner.lnk
2020-10-17 20:02 - 2020-10-17 20:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2020-10-17 19:51 - 2020-10-17 19:53 - 029069888 _____ (Piriform Software Ltd) C:\Users\Jarda.cksd\Downloads\ccsetup572.exe
2020-10-16 23:03 - 2020-10-16 23:03 - 000018424 _____ C:\Users\Jarda.cksd\Desktop\FRST1.zip
2020-10-15 00:28 - 2020-10-06 02:13 - 000835472 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-10-15 00:28 - 2020-10-06 02:13 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-10-15 00:23 - 2020-10-15 00:23 - 000003472 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2020-10-15 00:23 - 2020-10-15 00:23 - 000003348 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2020-10-14 22:25 - 2020-10-14 22:25 - 011630080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2020-10-14 22:25 - 2020-10-14 22:25 - 009728512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2020-10-14 22:25 - 2020-10-14 22:25 - 005507072 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2020-10-14 22:25 - 2020-10-14 22:25 - 004310016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2020-10-14 22:25 - 2020-10-14 22:25 - 000943616 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2020-10-14 22:25 - 2020-10-14 22:25 - 000839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2020-10-14 22:25 - 2020-10-14 22:25 - 000800576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2020-10-14 22:25 - 2020-10-14 22:25 - 000724992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll
2020-10-14 22:25 - 2020-10-14 22:25 - 000711168 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2020-10-14 22:25 - 2020-10-14 22:25 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2020-10-14 22:25 - 2020-10-14 22:25 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
2020-10-14 22:25 - 2020-10-14 22:25 - 000339456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapibase.dll
2020-10-14 22:25 - 2020-10-14 22:25 - 000333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
2020-10-14 22:25 - 2020-10-14 22:25 - 000093112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys
2020-10-14 22:24 - 2020-10-14 22:24 - 032928928 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecsRaw.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 031599448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecsRaw.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 025445888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 019812864 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 007012864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 006307840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 005008896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 004547072 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 004129416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 003635712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 003525600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 003507200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 003365376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2020-10-14 22:24 - 2020-10-14 22:24 - 003243080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 002950264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 002588688 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2020-10-14 22:24 - 2020-10-14 22:24 - 002495248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 002422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2020-10-14 22:24 - 2020-10-14 22:24 - 002315984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 002259192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2020-10-14 22:24 - 2020-10-14 22:24 - 002230224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 002138264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL
2020-10-14 22:24 - 2020-10-14 22:24 - 001869696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 001783984 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 001615360 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 001506112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 001298752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 001272160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 001249792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2020-10-14 22:24 - 2020-10-14 22:24 - 001151816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 001099608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 001098728 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 001012784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 000891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 000748384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 000609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 000498176 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicRuntimes.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 000376320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe
2020-10-14 22:24 - 2020-10-14 22:24 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 000294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AnalogShell.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logman.exe
2020-10-14 22:24 - 2020-10-14 22:24 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\relog.exe
2020-10-14 22:24 - 2020-10-14 22:24 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\typeperf.exe
2020-10-14 22:24 - 2020-10-14 22:24 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2020-10-14 22:24 - 2020-10-14 22:24 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\diskperf.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 022646784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 019852288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 018035200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 014818304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 008010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 007289344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 006525952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 005768256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 005112320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 004608512 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 004348928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 002799616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2020-10-14 22:23 - 2020-10-14 22:23 - 002740736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directml.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 002585024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 002491032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 002262784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 002227512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 002133312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001958072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001789752 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001751040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001686016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001672552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001665728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001617088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001593344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001564984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001523712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 001521664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001477120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001459712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001436032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvbvm60.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001421392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001397568 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 001335608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdrecordcpu.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001327616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001285120 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001265152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001218048 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 001214464 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001182744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001139200 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 001077056 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 001000960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000992256 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2fs.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000910336 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000907072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000894024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000877056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000868352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2fs.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000864768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoconv.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000844088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000834560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autofmt.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000833344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000807424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000784000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000776704 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000775480 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000741696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DismApi.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000693128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000692224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000682736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000675024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000632320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000629248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000628416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000599864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000593416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000563712 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpedit.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResourceMapper.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000515584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpedit.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000513848 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000501000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp_win.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000498176 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000491008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmdial32.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000488568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000477696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000474432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000468944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000453944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000422000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000405936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000350208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountWAMExtension.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\es.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-10-14 22:23 - 2020-10-14 22:23 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000300704 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000285560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000284504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdwriter.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000272384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppLockerCSP.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2020-10-14 22:23 - 2020-10-14 22:23 - 000224568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Dism.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000211256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000199992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000193592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000188224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ifsutil.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2020-10-14 22:23 - 2020-10-14 22:23 - 000186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000166936 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000164352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000164352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BitLockerCsp.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000150328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000149304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ulib.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srpapi.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupcln.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinHvEmulation.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000117208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\logman.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000111536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdSSDP.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\provmigrate.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GraphicsCapture.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000093512 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000089336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdSSDP.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000084280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2020-10-14 22:23 - 2020-10-14 22:23 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptext.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000054720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidapi.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000054272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerUI.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\relog.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000051632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel.appcore.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\typeperf.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpupdate.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpupdate.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\diskperf.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000021312 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdbinst.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidtel.exe
2020-10-14 22:23 - 2020-10-14 22:23 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shimeng.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3r.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-10-14 22:22 - 2020-10-14 22:22 - 009924928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 007604576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 007271752 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 006437376 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 004565248 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 004140544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 004050944 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 003805696 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 003748352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 003728384 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-10-14 22:22 - 2020-10-14 22:22 - 003545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 003371168 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 003232064 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 002986288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2020-10-14 22:22 - 2020-10-14 22:22 - 002777184 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 002775688 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 002737664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 002696512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2020-10-14 22:22 - 2020-10-14 22:22 - 002092328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 002007360 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001999440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001947688 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001918976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001916752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001856000 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001845912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001833272 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001756592 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2020-10-14 22:22 - 2020-10-14 22:22 - 001743688 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001705472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001698816 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001664688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001656904 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001653800 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001614848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001512840 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 001408512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001393952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001375744 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001366136 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2020-10-14 22:22 - 2020-10-14 22:22 - 001285120 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001271808 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001259720 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001246208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001182248 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 001170960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001154440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001053120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001047040 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2020-10-14 22:22 - 2020-10-14 22:22 - 001024656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 001004872 _____ (Microsoft Corporation) C:\WINDOWS\system32\DismApi.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000974336 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000961024 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000950272 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000933288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000893624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000890432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000878080 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2020-10-14 22:22 - 2020-10-14 22:22 - 000871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000860160 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2020-10-14 22:22 - 2020-10-14 22:22 - 000852280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000845312 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000837120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000835672 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000797456 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000782656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000777216 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000767984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000761672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000742720 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BTAGService.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000676864 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000672064 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000639392 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000636856 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxs.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000628032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000614912 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000604992 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000602424 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000598336 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000586560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2020-10-14 22:22 - 2020-10-14 22:22 - 000586048 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmdial32.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000554496 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000551624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxs.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-10-14 22:22 - 2020-10-14 22:22 - 000546968 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000525824 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000522688 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000519496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000518456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000492032 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2020-10-14 22:22 - 2020-10-14 22:22 - 000467952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000467456 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2020-10-14 22:22 - 2020-10-14 22:22 - 000455680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2020-10-14 22:22 - 2020-10-14 22:22 - 000452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\slui.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000437568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2020-10-14 22:22 - 2020-10-14 22:22 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\es.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000399360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000389440 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppLockerCSP.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000375504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000362296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000353752 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2020-10-14 22:22 - 2020-10-14 22:22 - 000328704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsku.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000326656 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000287232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcomapi.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000280888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dism.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
2020-10-14 22:22 - 2020-10-14 22:22 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000234992 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabSvc.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000222008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000214840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ifsutil.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000213784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeManagerObj.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000205632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2020-10-14 22:22 - 2020-10-14 22:22 - 000204104 _____ (Microsoft Corporation) C:\WINDOWS\system32\unattend.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000192176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbrand.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000188208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionQueue.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\spopk.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000180544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2020-10-14 22:22 - 2020-10-14 22:22 - 000180032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ulib.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000176440 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxlib.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeHelper.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000165840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000160064 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000146432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spopk.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcln.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000141632 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000141520 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000130112 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000127064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000108856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\MuiUnattend.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000102720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2020-10-14 22:22 - 2020-10-14 22:22 - 000089920 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidsvc.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\djoin.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000072824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerUI.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptext.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000068416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceReactivation.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000067656 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000063296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\PnPUnattend.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000057664 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxstrace.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000035840 _____ C:\WINDOWS\system32\deploymentcsphelper.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
2020-10-14 22:22 - 2020-10-14 22:22 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnscacheugc.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiougc.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxstrace.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys
2020-10-14 22:22 - 2020-10-14 22:22 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\netbtugc.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtClient.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidtel.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdbinst.exe
2020-10-14 22:22 - 2020-10-14 22:22 - 000020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\EsdSip.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\applockerfltr.sys
2020-10-14 22:22 - 2020-10-14 22:22 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d8thk.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaevts.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\shimeng.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCertResources.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tier2punctuations.dll
2020-10-14 22:22 - 2020-10-14 22:22 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3r.dll
2020-10-14 22:21 - 2020-10-14 22:22 - 001014784 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 017790976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 003725824 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 003581248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-10-14 22:21 - 2020-10-14 22:21 - 003327776 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 003143168 _____ (Microsoft Corporation) C:\WINDOWS\system32\directml.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 002712064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-10-14 22:21 - 2020-10-14 22:21 - 002556224 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 002485248 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 002455928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 002296832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 002260832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 002125392 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 002074624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 001967104 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 001942016 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 001751552 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 001618704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdrecordcpu.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 001499136 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 001487360 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 001413712 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 001187840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 001182720 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 001150264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2020-10-14 22:21 - 2020-10-14 22:21 - 001092608 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 001086784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 001083704 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 001077248 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 001029952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2020-10-14 22:21 - 2020-10-14 22:21 - 001026800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 001008960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000916760 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000875400 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000874304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-10-14 22:21 - 2020-10-14 22:21 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000805184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2020-10-14 22:21 - 2020-10-14 22:21 - 000804672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2020-10-14 22:21 - 2020-10-14 22:21 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000722080 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000589392 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2020-10-14 22:21 - 2020-10-14 22:21 - 000495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountWAMExtension.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-10-14 22:21 - 2020-10-14 22:21 - 000437056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2020-10-14 22:21 - 2020-10-14 22:21 - 000422712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2020-10-14 22:21 - 2020-10-14 22:21 - 000415816 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000381656 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialEnrollmentManager.exe
2020-10-14 22:21 - 2020-10-14 22:21 - 000363112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000343416 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdwriter.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000338432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000301568 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\PushToInstall.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2020-10-14 22:21 - 2020-10-14 22:21 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2020-10-14 22:21 - 2020-10-14 22:21 - 000222528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ataport.sys
2020-10-14 22:21 - 2020-10-14 22:21 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000183616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2020-10-14 22:21 - 2020-10-14 22:21 - 000174400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2020-10-14 22:21 - 2020-10-14 22:21 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe
2020-10-14 22:21 - 2020-10-14 22:21 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\GraphicsCapture.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSAssessment.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000141632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2020-10-14 22:21 - 2020-10-14 22:21 - 000089928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2020-10-14 22:21 - 2020-10-14 22:21 - 000088360 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe
2020-10-14 22:21 - 2020-10-14 22:21 - 000076952 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialEnrollmentManagerForUser.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000073728 _____ (Microsoft Corporation) C:\WINDOWS\bfsvc.exe
2020-10-14 22:21 - 2020-10-14 22:21 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\watchdog.sys
2020-10-14 22:21 - 2020-10-14 22:21 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidspi.sys
2020-10-14 22:21 - 2020-10-14 22:21 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2020-10-14 22:21 - 2020-10-14 22:21 - 000058888 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel.appcore.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000056640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pciidex.sys
2020-10-14 22:21 - 2020-10-14 22:21 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.Common.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe
2020-10-14 22:21 - 2020-10-14 22:21 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
2020-10-14 22:21 - 2020-10-14 22:21 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\FaxPrinterInstaller.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000030016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\atapi.sys
2020-10-14 22:21 - 2020-10-14 22:21 - 000019768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelide.sys
2020-10-14 22:21 - 2020-10-14 22:21 - 000016704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pciide.sys
2020-10-14 22:21 - 2020-10-14 22:21 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCertResources.dll
2020-10-14 22:21 - 2020-10-14 22:21 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll
2020-10-14 21:52 - 2020-09-10 06:14 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-10-14 21:52 - 2020-09-10 06:12 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-10-11 11:27 - 2020-10-16 22:22 - 000000000 ____D C:\Users\Jarda.cksd\Desktop\FRST-OlderVersion
2020-10-09 20:07 - 2020-10-09 20:15 - 000000000 ____D C:\AdwCleaner
2020-10-09 19:48 - 2020-10-09 19:48 - 008447152 _____ (Malwarebytes) C:\Users\Jarda.cksd\Downloads\adwcleaner_8.0.8.exe
2020-10-09 18:33 - 2020-10-17 20:50 - 000000000 ____D C:\FRST
2020-10-09 18:30 - 2020-10-16 22:22 - 002299904 _____ (Farbar) C:\Users\Jarda.cksd\Desktop\FRST64.exe
2020-09-27 01:50 - 2020-10-01 00:30 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2020-09-27 01:50 - 2020-09-10 18:14 - 000905528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sedplugins.dll
2020-09-27 01:50 - 2020-09-10 18:14 - 000436536 _____ (Microsoft Corporation) C:\WINDOWS\system32\QualityUpdateAssistant.dll
2020-09-27 01:37 - 2020-09-27 01:37 - 004470272 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2020-09-27 01:37 - 2020-09-27 01:37 - 001491160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2020-09-27 01:37 - 2020-09-27 01:37 - 001247744 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL
2020-09-27 01:37 - 2020-09-27 01:37 - 001108384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2020-09-27 01:37 - 2020-09-27 01:37 - 001039872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL
2020-09-27 01:37 - 2020-09-27 01:37 - 000952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2020-09-27 01:37 - 2020-09-27 01:37 - 000928768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFS.exe
2020-09-27 01:37 - 2020-09-27 01:37 - 000744240 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOE.DLL
2020-09-27 01:37 - 2020-09-27 01:37 - 000738072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL
2020-09-27 01:37 - 2020-09-27 01:37 - 000682752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOE.DLL
2020-09-27 01:37 - 2020-09-27 01:37 - 000669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFSR.dll
2020-09-27 01:37 - 2020-09-27 01:37 - 000666288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL
2020-09-27 01:37 - 2020-09-27 01:37 - 000588800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh264enc.dll
2020-09-27 01:37 - 2020-09-27 01:37 - 000574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh264enc.dll
2020-09-27 01:37 - 2020-09-27 01:37 - 000537608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2020-09-27 01:37 - 2020-09-27 01:37 - 000522752 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
2020-09-27 01:37 - 2020-09-27 01:37 - 000420168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2020-09-27 01:37 - 2020-09-27 01:37 - 000415232 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMPOSE.dll
2020-09-27 01:37 - 2020-09-27 01:37 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOVER.exe
2020-09-27 01:37 - 2020-09-27 01:37 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSUTILITY.dll
2020-09-27 01:37 - 2020-09-27 01:37 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModelOOBE.exe
2020-09-27 01:37 - 2020-09-27 01:37 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMPOSERES.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 007761408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 005907456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 004859904 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 004538368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 003822592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 001313792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 001218424 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2020-09-27 01:36 - 2020-09-27 01:36 - 000706560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000671560 _____ (Microsoft Corporation) C:\WINDOWS\system32\computecore.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000528896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddraw.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnphost.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnphost.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000299072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2020-09-27 01:36 - 2020-09-27 01:36 - 000272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstext40.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFMCP.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\FileHistory.exe
2020-09-27 01:36 - 2020-09-27 01:36 - 000245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000240128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssdpsrv.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\P2P.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scecli.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnscmmc.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000124416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnscmmc.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000090936 _____ (Microsoft Corporation) C:\WINDOWS\system32\vid.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhuxgraphics.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\udhisapi.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssdpapi.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\udhisapi.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndiscap.sys
2020-09-27 01:36 - 2020-09-27 01:36 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\tar.exe
2020-09-27 01:36 - 2020-09-27 01:36 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\NAPCRYPT.DLL
2020-09-27 01:36 - 2020-09-27 01:36 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edpnotify.exe
2020-09-27 01:36 - 2020-09-27 01:36 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NAPCRYPT.DLL
2020-09-27 01:36 - 2020-09-27 01:36 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tar.exe
2020-09-27 01:36 - 2020-09-27 01:36 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnpcont.exe
2020-09-27 01:36 - 2020-09-27 01:36 - 000037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wslapi.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnpcont.exe
2020-09-27 01:36 - 2020-09-27 01:36 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDJPN.DLL
2020-09-27 01:36 - 2020-09-27 01:36 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDKOR.DLL
2020-09-27 01:36 - 2020-09-27 01:36 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd106n.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd106.dll
2020-09-27 01:36 - 2020-09-27 01:36 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd101.DLL
2020-09-27 01:35 - 2020-09-27 01:35 - 006069360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 005848848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 005041152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 005003832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 003740456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 002576896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 002565120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 002306048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 001688064 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 001512960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdprt.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 001369088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 001307464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 001141048 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 001124864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 001009200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000892728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2020-09-27 01:35 - 2020-09-27 01:35 - 000775768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000670720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2020-09-27 01:35 - 2020-09-27 01:35 - 000667312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000652800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000600064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000593480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000578048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddraw.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000572208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000564480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StateRepository.Core.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000553664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000424448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Payments.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000365056 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2020-09-27 01:35 - 2020-09-27 01:35 - 000332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2020-09-27 01:35 - 2020-09-27 01:35 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000294728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000292864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Lights.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2020-09-27 01:35 - 2020-09-27 01:35 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\scecli.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000224064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
2020-09-27 01:35 - 2020-09-27 01:35 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000165184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000146640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptcatsvc.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000120832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mapistub.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000120832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mapi32.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000090944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe
2020-09-27 01:35 - 2020-09-27 01:35 - 000076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\edpnotify.exe
2020-09-27 01:35 - 2020-09-27 01:35 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfctrs.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfproc.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfctrs.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfdisk.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfos.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfproc.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfdisk.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfos.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryCore.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfnet.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfnet.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fixmapi.exe
2020-09-27 01:35 - 2020-09-27 01:35 - 000015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDJPN.DLL
2020-09-27 01:35 - 2020-09-27 01:35 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbd106.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbd106n.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbd101.dll
2020-09-27 01:35 - 2020-09-27 01:35 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimg32.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 007910152 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 007582768 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 006170624 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 005284328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 004005888 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 003265024 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 003084800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 002870784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 001930752 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 001885184 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 001670144 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 001522176 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowManagement.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 001486848 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2020-09-27 01:34 - 2020-09-27 01:34 - 001485824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 001480520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2020-09-27 01:34 - 2020-09-27 01:34 - 001399216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 001274128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryPS.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 001092096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000944680 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000858928 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000851968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2020-09-27 01:34 - 2020-09-27 01:34 - 000842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Language.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000822784 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000716304 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000675840 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000661832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2020-09-27 01:34 - 2020-09-27 01:34 - 000621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2020-09-27 01:34 - 2020-09-27 01:34 - 000602112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Payments.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000561464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2020-09-27 01:34 - 2020-09-27 01:34 - 000544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2020-09-27 01:34 - 2020-09-27 01:34 - 000516608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000510792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000460192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2020-09-27 01:34 - 2020-09-27 01:34 - 000457016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2020-09-27 01:34 - 2020-09-27 01:34 - 000419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Lights.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2020-09-27 01:34 - 2020-09-27 01:34 - 000400696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2020-09-27 01:34 - 2020-09-27 01:34 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000372536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2020-09-27 01:34 - 2020-09-27 01:34 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000260408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2020-09-27 01:34 - 2020-09-27 01:34 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnservice.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000254776 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2020-09-27 01:34 - 2020-09-27 01:34 - 000213824 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000209216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000179512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2020-09-27 01:34 - 2020-09-27 01:34 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidpolicyconverter.exe
2020-09-27 01:34 - 2020-09-27 01:34 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000146248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2020-09-27 01:34 - 2020-09-27 01:34 - 000132408 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000131896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mup.sys
2020-09-27 01:34 - 2020-09-27 01:34 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000104248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000066872 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.exe
2020-09-27 01:34 - 2020-09-27 01:34 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000059392 _____ C:\WINDOWS\system32\runexehelper.exe
2020-09-27 01:34 - 2020-09-27 01:34 - 000057888 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2020-09-27 01:34 - 2020-09-27 01:34 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll
2020-09-27 01:34 - 2020-09-27 01:34 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidcertstorecheck.exe
2020-09-27 01:34 - 2020-09-27 01:34 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimg32.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 007845080 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 006233080 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 003136000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 002060288 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdprt.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 001784832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 001767424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 001746232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000981320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2020-09-27 01:33 - 2020-09-27 01:33 - 000978232 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000841216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000817152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PEAuth.sys
2020-09-27 01:33 - 2020-09-27 01:33 - 000750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000648192 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000555320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Vid.sys
2020-09-27 01:33 - 2020-09-27 01:33 - 000521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000434176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountExtension.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000379904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000375096 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\smbwmiv2.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000273208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000250680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2020-09-27 01:33 - 2020-09-27 01:33 - 000233472 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000224072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys
2020-09-27 01:33 - 2020-09-27 01:33 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000208712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys
2020-09-27 01:33 - 2020-09-27 01:33 - 000201544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys
2020-09-27 01:33 - 2020-09-27 01:33 - 000200008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys
2020-09-27 01:33 - 2020-09-27 01:33 - 000160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapistub.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapi32.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcDecoderHost.exe
2020-09-27 01:33 - 2020-09-27 01:33 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2020-09-27 01:33 - 2020-09-27 01:33 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000047008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2020-09-27 01:33 - 2020-09-27 01:33 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2020-09-27 01:33 - 2020-09-27 01:33 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\KNetPwrDepBroker.sys
2020-09-27 01:33 - 2020-09-27 01:33 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdiagnostics.dll
2020-09-27 01:33 - 2020-09-27 01:33 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\fixmapi.exe

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-10-17 20:48 - 2020-08-04 02:19 - 000003584 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2020-10-17 20:48 - 2020-08-04 02:19 - 000003460 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2020-10-17 20:42 - 2014-03-21 19:13 - 000000000 ___RD C:\Users\Jarda.cksd\OneDrive
2020-10-17 20:40 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-10-17 20:38 - 2020-04-15 11:58 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-10-17 20:38 - 2019-03-19 06:37 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2020-10-17 20:38 - 2017-11-07 15:54 - 000053284 _____ C:\WINDOWS\system32\wpbbin.exe
2020-10-17 20:38 - 2016-10-06 08:55 - 000000000 ____D C:\ProgramData\NVIDIA
2020-10-17 20:33 - 2012-08-07 03:30 - 000000000 ____D C:\ProgramData\McAfee
2020-10-17 20:16 - 2013-02-10 14:27 - 000000000 ____D C:\Users\Jarda.cksd\AppData\Local\CrashDumps
2020-10-17 20:14 - 2016-11-10 14:34 - 000000000 ____D C:\Users\Jarda.cksd\AppData\Local\Seznam.cz
2020-10-17 20:06 - 2020-03-05 16:13 - 000053616 _____ () C:\WINDOWS\system32\Drivers\staport.sys
2020-10-17 20:05 - 2019-03-19 06:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-10-17 20:02 - 2016-09-20 13:35 - 000000000 ____D C:\Program Files\CCleaner
2020-10-17 19:53 - 2020-04-15 11:58 - 000004220 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{C5D3AFAC-E698-4D5F-A4DC-D186AABA6AFC}
2020-10-17 19:49 - 2020-04-15 11:15 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-10-16 23:37 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-10-16 23:37 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-10-16 22:05 - 2020-04-15 11:39 - 001693640 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-10-16 22:05 - 2019-03-19 13:55 - 000718198 _____ C:\WINDOWS\system32\perfh005.dat
2020-10-16 22:05 - 2019-03-19 13:55 - 000145242 _____ C:\WINDOWS\system32\perfc005.dat
2020-10-16 22:05 - 2019-03-19 06:50 - 000000000 ____D C:\WINDOWS\INF
2020-10-16 21:51 - 2020-04-01 18:53 - 000002433 _____ C:\Users\Jarda.cksd\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams.lnk
2020-10-16 21:51 - 2020-04-01 18:53 - 000002425 _____ C:\Users\Jarda.cksd\Desktop\Microsoft Teams.lnk
2020-10-16 21:01 - 2019-05-11 16:06 - 000000000 ____D C:\Users\Jarda.cksd\AppData\Local\D3DSCache
2020-10-16 19:32 - 2020-08-04 02:20 - 000002440 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-10-16 19:32 - 2020-08-04 02:20 - 000002278 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2020-10-15 11:20 - 2019-02-12 14:55 - 000000000 ____D C:\Users\Jarda.cksd\AppData\Local\PlaceholderTileLogoFolder
2020-10-15 00:29 - 2019-02-11 14:06 - 000000000 ___RD C:\Users\Jarda.cksd\3D Objects
2020-10-15 00:29 - 2016-02-13 15:12 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-10-15 00:27 - 2020-04-15 11:14 - 000462056 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-10-15 00:24 - 2019-03-19 06:52 - 000000000 ___RD C:\WINDOWS\PrintDialog
2020-10-15 00:24 - 2019-03-19 06:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2020-10-15 00:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2020-10-15 00:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-10-15 00:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SystemResources
2020-10-15 00:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2020-10-15 00:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2020-10-15 00:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2020-10-15 00:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2020-10-15 00:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-10-15 00:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\es-MX
2020-10-15 00:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-10-15 00:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\appraiser
2020-10-15 00:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-10-15 00:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\Provisioning
2020-10-15 00:24 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-10-14 22:38 - 2019-03-19 06:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-10-14 13:47 - 2013-02-04 12:32 - 000002305 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-10-14 13:47 - 2013-02-04 12:32 - 000002264 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-10-12 15:55 - 2016-10-06 13:03 - 000000000 ____D C:\Users\Jarda.cksd\AppData\Local\ConnectedDevicesPlatform
2020-10-11 17:28 - 2020-05-04 11:58 - 000000000 ____D C:\Users\Jarda.cksd\AppData\Roaming\Seznam Browser
2020-10-11 17:28 - 2020-03-24 17:35 - 000000000 ____D C:\Users\Jarda.cksd\Desktop\písničky
2020-10-09 20:27 - 2013-02-05 18:35 - 000000000 ____D C:\Users\Jarda.cksd\AppData\Roaming\Seznam.cz
2020-10-09 20:15 - 2012-09-13 17:58 - 000000000 ____D C:\Program Files\Acer
2020-10-09 20:15 - 2012-08-07 04:17 - 000000000 ____D C:\Program Files (x86)\Acer
2020-10-06 14:29 - 2020-04-15 11:58 - 000003388 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2753391590-2437761739-2040745174-1002
2020-10-06 14:28 - 2020-04-15 11:24 - 000002420 _____ C:\Users\Jarda.cksd\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-09-30 02:46 - 2019-02-11 07:35 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2020-09-27 02:30 - 2019-03-19 06:52 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2020-09-27 02:30 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\migwiz
2020-09-27 02:01 - 2013-08-05 10:14 - 000000000 ____D C:\WINDOWS\system32\MRT
2020-09-27 01:52 - 2013-02-06 14:32 - 129170736 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2020-09-27 01:33 - 2020-04-15 11:20 - 002876416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2020-09-27 00:03 - 2020-04-07 20:14 - 000002140 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-09-26 14:25 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\LiveKernelReports

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Addition.zip: (13.06 KiB) Staženo 54 x

#23 Příspěvek od **Diallix** » 18 říj 2020 03:51

Vyborne.

Odinstalujte Google Toolbar helper este a vykonajte este docistenie:

Do poznamkoveho bloku skopirujte obsah dole:

Kód: Vybrat vše

C:\Program Files\Common Files\AV\avast! Antivirus
File: C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\...\Run: [sznAgent] => C:\Users\Jarda.cksd\AppData\Roaming\Seznam Browser\sznAgent\Seznam.cz.exe [169536 2020-03-27] (Seznam.cz, a.s. -> Seznam.cz)
HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\...\RunOnce: [Application Restart #0] => C:\Users\Jarda.cksd\AppData\Roaming\Seznam Browser\Seznam.cz.exe [1741312 2020-04-29] (Seznam.cz) [File not signed]
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {0048947C-3873-4213-90D1-9B8108FD27C2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {1B2F2D3A-AEDE-4994-993C-E50D638E7CEB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {2713E3DF-0817-4015-8414-5530FE5E0F29} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {8E92FCDE-B5B4-47F3-9DF5-E599B053455E} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [972176 2020-05-12] (Microsoft Corporation -> Microsoft Corporation)
CHR DefaultSearchURL: Default -> hxxps://search.yahoo.com/search?fr=mcafee_uninternational&type=E210CZ662G0&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [eibfgbclmgnmffinenpipoibfdoblond] - C:\Users\Jarda.cksd\AppData\Roaming\Seznam.cz\bin\listicka-chrome-rv-1.5.3.crx [2020-08-04]
CHR HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd]
CHR HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fkfpcckoflkdgjdobdkpclgngaahgbpi] - C:\Users\Jarda.cksd\AppData\Roaming\Seznam.cz\bin\listicka-chrome-email-1.2.0.crx [2020-08-04]
CHR HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ghoooididkjbjjldgojdgceoinbhbjmh] - C:\Users\Jarda.cksd\AppData\Roaming\Seznam.cz\bin\listicka-chrome-slovnik-1.2.0.crx [2020-08-04]
CHR HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lelcohngbjgpiibagnfmncojacafbbpg] - C:\Users\Jarda.cksd\AppData\Roaming\Seznam.cz\bin\Partner-1.0.3.crx [2020-08-04]
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-10-17 20:14 - 2016-11-10 14:34 - 000000000 ____D C:\Users\Jarda.cksd\AppData\Local\Seznam.cz
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ShortcutWithArgument: C:\Users\Jarda.cksd\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\b38c8a402571e3e7\Seznam.cz.lnk -> C:\Users\Jarda.cksd\AppData\Roaming\Seznam Browser\Seznam.cz.exe (Seznam.cz) -> --user-data-dir="C:\Users\Jarda.cksd\AppData\Local\Seznam.cz\User Data" --profile-directory=Default --app-id=ckjpageadhfekbilpnlbcjgbflimllbk
SearchScopes: HKU\S-1-5-21-2753391590-2437761739-2040745174-1002 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKU\S-1-5-21-2753391590-2437761739-2040745174-1002 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={9DB66DC4-EE19-4589-A0EC-7BE0D9171D17}&mid=a007e6f0a0b647d39dc6f123cc3c0e00-2e5f61ce55776d302306b0da3e43af198dfca2f1&lang=cs&ds=AVG&pr=pr&d=2013-09-20 08:45:39&v=15.4.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms}
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)

EmptyTemp:

Poznamkovy blok ulozte pod nazvom fixlist.txt do umiestnenia kde je FRST.
Spustite FRST a odkliknite tlacidlo: Fix
Vykona sa funkcionalita po ktorej sa pocitac rebootuje. Po reboote sem vlozte obsah logu: fixlog.txt ulozeneho v umiestneni FRST.

marxx · #24 Příspěvek od **marxx** » 18 říj 2020 10:37

Fix result of Farbar Recovery Scan Tool (x64) Version: 14-10-2020
Ran by Gabriela Šestáková (18-10-2020 11:14:55) Run:2
Running from C:\Users\Jarda.cksd\Desktop
Loaded Profiles: Gabriela Šestáková
Boot Mode: Normal
==============================================

fixlist content:
*****************
C:\Program Files\Common Files\AV\avast! Antivirus
File: C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\...\Run: [sznAgent] => C:\Users\Jarda.cksd\AppData\Roaming\Seznam Browser\sznAgent\Seznam.cz.exe [169536 2020-03-27] (Seznam.cz, a.s. -> Seznam.cz)
HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\...\RunOnce: [Application Restart #0] => C:\Users\Jarda.cksd\AppData\Roaming\Seznam Browser\Seznam.cz.exe [1741312 2020-04-29] (Seznam.cz) [File not signed]
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {0048947C-3873-4213-90D1-9B8108FD27C2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {1B2F2D3A-AEDE-4994-993C-E50D638E7CEB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {2713E3DF-0817-4015-8414-5530FE5E0F29} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {8E92FCDE-B5B4-47F3-9DF5-E599B053455E} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [972176 2020-05-12] (Microsoft Corporation -> Microsoft Corporation)
CHR DefaultSearchURL: Default -> hxxps://search.yahoo.com/search?fr=mcafee_uninternational&type=E210CZ662G0&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [eibfgbclmgnmffinenpipoibfdoblond] - C:\Users\Jarda.cksd\AppData\Roaming\Seznam.cz\bin\listicka-chrome-rv-1.5.3.crx [2020-08-04]
CHR HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd]
CHR HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fkfpcckoflkdgjdobdkpclgngaahgbpi] - C:\Users\Jarda.cksd\AppData\Roaming\Seznam.cz\bin\listicka-chrome-email-1.2.0.crx [2020-08-04]
CHR HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ghoooididkjbjjldgojdgceoinbhbjmh] - C:\Users\Jarda.cksd\AppData\Roaming\Seznam.cz\bin\listicka-chrome-slovnik-1.2.0.crx [2020-08-04]
CHR HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lelcohngbjgpiibagnfmncojacafbbpg] - C:\Users\Jarda.cksd\AppData\Roaming\Seznam.cz\bin\Partner-1.0.3.crx [2020-08-04]
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-10-14 22:23 - 2020-10-14 22:23 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-10-17 20:14 - 2016-11-10 14:34 - 000000000 ____D C:\Users\Jarda.cksd\AppData\Local\Seznam.cz
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShortcutWithArgument: C:\Users\Jarda.cksd\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\b38c8a402571e3e7\Seznam.cz.lnk -> C:\Users\Jarda.cksd\AppData\Roaming\Seznam Browser\Seznam.cz.exe (Seznam.cz) -> --user-data-dir="C:\Users\Jarda.cksd\AppData\Local\Seznam.cz\User Data" --profile-directory=Default --app-id=ckjpageadhfekbilpnlbcjgbflimllbk
SearchScopes: HKU\S-1-5-21-2753391590-2437761739-2040745174-1002 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKU\S-1-5-21-2753391590-2437761739-2040745174-1002 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={9DB66DC4-EE19-4589-A0EC-7BE0D9171D17}&mid=a007e6f0a0b647d39dc6f123cc3c0e00-2e5f61ce55776d302306b0da3e43af198dfca2f1&lang=cs&ds=AVG&pr=pr&d=2013-09-20 08:45:39&v=15.4.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms}
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)

EmptyTemp:
*****************

C:\Program Files\Common Files\AV\avast! Antivirus => moved successfully

========================= File: C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe ========================

"C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe" => not found
====== End of File: ======

"HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\Software\Microsoft\Windows\CurrentVersion\Run\\sznAgent" => removed successfully
"HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Application Restart #0" => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0048947C-3873-4213-90D1-9B8108FD27C2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0048947C-3873-4213-90D1-9B8108FD27C2}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1B2F2D3A-AEDE-4994-993C-E50D638E7CEB}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1B2F2D3A-AEDE-4994-993C-E50D638E7CEB}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{2713E3DF-0817-4015-8414-5530FE5E0F29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2713E3DF-0817-4015-8414-5530FE5E0F29}" => removed successfully
C:\WINDOWS\System32\Tasks\AVAST Software\Avast settings backup => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AVAST Software\Avast settings backup" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{8E92FCDE-B5B4-47F3-9DF5-E599B053455E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8E92FCDE-B5B4-47F3-9DF5-E599B053455E}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Office\Office Automatic Updates => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Office\Office Automatic Updates" => removed successfully
"Chrome DefaultSearchURL" => removed successfully
"Chrome DefaultSearchKeyword" => removed successfully
HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\SOFTWARE\Google\Chrome\Extensions\eibfgbclmgnmffinenpipoibfdoblond => removed successfully
C:\Users\Jarda.cksd\AppData\Roaming\Seznam.cz\bin\listicka-chrome-rv-1.5.3.crx => moved successfully
HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\SOFTWARE\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd => removed successfully
HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\SOFTWARE\Google\Chrome\Extensions\fkfpcckoflkdgjdobdkpclgngaahgbpi => removed successfully
C:\Users\Jarda.cksd\AppData\Roaming\Seznam.cz\bin\listicka-chrome-email-1.2.0.crx => moved successfully
HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\SOFTWARE\Google\Chrome\Extensions\ghoooididkjbjjldgojdgceoinbhbjmh => removed successfully
C:\Users\Jarda.cksd\AppData\Roaming\Seznam.cz\bin\listicka-chrome-slovnik-1.2.0.crx => moved successfully
HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\SOFTWARE\Google\Chrome\Extensions\lelcohngbjgpiibagnfmncojacafbbpg => removed successfully
C:\Users\Jarda.cksd\AppData\Roaming\Seznam.cz\bin\Partner-1.0.3.crx => moved successfully
C:\WINDOWS\system32\DrtmAuth9.bin => moved successfully
C:\WINDOWS\system32\DrtmAuth8.bin => moved successfully
C:\WINDOWS\system32\DrtmAuth7.bin => moved successfully
C:\WINDOWS\system32\DrtmAuth6.bin => moved successfully
C:\WINDOWS\system32\DrtmAuth5.bin => moved successfully
C:\WINDOWS\system32\DrtmAuth4.bin => moved successfully
C:\WINDOWS\system32\DrtmAuth3.bin => moved successfully
C:\WINDOWS\system32\DrtmAuth2.bin => moved successfully
C:\WINDOWS\system32\DrtmAuth12.bin => moved successfully
C:\WINDOWS\system32\DrtmAuth11.bin => moved successfully
C:\WINDOWS\system32\DrtmAuth10.bin => moved successfully
C:\WINDOWS\system32\DrtmAuth1.bin => moved successfully
C:\Users\Jarda.cksd\AppData\Local\Seznam.cz => moved successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avg => removed successfully
C:\Users\Jarda.cksd\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\b38c8a402571e3e7\Seznam.cz.lnk => Shortcut argument removed successfully
HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => removed successfully
HKU\S-1-5-21-2753391590-2437761739-2040745174-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} => removed successfully
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File) => Error: No automatic fix found for this entry.

=========== EmptyTemp: ==========

BITS transfer queue => 9461760 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 162380256 B
Java, Flash, Steam htmlcache => 564 B
Windows/system/drivers => 4814529 B
Edge => 4246778 B
Chrome => 162513496 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 7456 B
NetworkService => 289835688 B
Jarda.cksd => 442795376 B

RecycleBin => 2756674529 B
EmptyTemp: => 3.6 GB temporary data Removed.

================================

The system needed a reboot.

==== End of Fixlog 11:18:03 ====

#25 Příspěvek od **Diallix** » 18 říj 2020 12:40

Ako je na tom pocitac?

marxx · #26 Příspěvek od **marxx** » 18 říj 2020 15:14

Je to znatelně lepší. Nechám to už tak. Je to kamarádky starší počítač pro syna na online výuku. Snažil jsem se jim ho trochu rozhýbat. Na to teď už bude v pohodě stačit.
Velmi děkuji za pomoc a ochotu.

#27 Příspěvek od **Diallix** » 18 říj 2020 17:12

V pohodicke :]]

Aj nabuduce.

VIRY.CZ

Velmi zpomalený Ntb

Re: Velmi zpomalený Ntb

Re: Velmi zpomalený Ntb

Re: Velmi zpomalený Ntb

Re: Velmi zpomalený Ntb

Re: Velmi zpomalený Ntb

Re: Velmi zpomalený Ntb

Re: Velmi zpomalený Ntb

Re: Velmi zpomalený Ntb

Re: Velmi zpomalený Ntb

Re: Velmi zpomalený Ntb

Re: Velmi zpomalený Ntb

Re: Velmi zpomalený Ntb