Posílám oba dva logy. Také se nám dnes v 10:02 stalo, že přišel na mail.ru, kde máme také jednu adresu e-mail, že se někdo přihlásil do e-mailu odjinud a abychom si změnili heslo, což jsem udělal. A když kliknu na ty doplňky, tak mám na výběr z čeho chci doplněk instalovat a když dám ze souboru a najdu ten instalační, tak to řve, že to není ten správný typ.
Dík za další rady.
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-02-2020
Ran by Admin (14-02-2020 18:02:05)
Running from D:\Aviry
Windows 10 Home Version 1909 18363.657 (X64) (2019-11-20 11:08:16)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Admin (S-1-5-21-722231672-965411127-3486821242-1001 - Administrator - Enabled) => C:\Users\Admin
Administrator (S-1-5-21-722231672-965411127-3486821242-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-722231672-965411127-3486821242-503 - Limited - Disabled)
Guest (S-1-5-21-722231672-965411127-3486821242-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-722231672-965411127-3486821242-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Antivirus (Enabled - Up to date) {88AE6B46-DC3C-455A-A21B-085F285A3546}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ZoneAlarm Free Firewall Firewall (Enabled) {8D637332-9C08-995E-98D7-8237936B0E9F}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden
ABBYY PDF Transformer+ (HKLM\...\{FA400000-0001-6400-0000-074957833700}) (Version: 4.2.186 - ABBYY Production LLC)
Adobe Acrobat 5.0 (HKLM-x32\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.)
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 20.006.20034 - Adobe Systems Incorporated)
Adobe PageMaker 7.0 (HKLM-x32\...\Adobe PageMaker 7.0) (Version: 7.0 - Adobe Systems, Inc.)
Adobe Photoshop Elements 10 (HKLM-x32\...\Adobe Photoshop Elements 10) (Version: 10.0 - Adobe Systems Incorporated)
Avira (HKLM-x32\...\{59bab6b1-f615-42c3-9614-8dc338ac8ed4}) (Version: 1.2.143.109 - Avira Operations GmbH & Co. KG)
Avira (HKLM-x32\...\{82B6E5B0-3F76-446B-9FDE-0200B5B36B37}) (Version: 1.2.143.109 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.2001.1707 - Avira Operations GmbH & Co. KG)
BAHN 3.81r1 (HKLM-x32\...\BAHN381r1_is1) (Version: 3.81 - JBSS Chemnitz/Dresden)
BufferChm (HKLM-x32\...\{FA0FF682-CC70-4C57-93CD-E276F3E7537E}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
calibre 64bit (HKLM\...\{C9FD7BFF-6054-449C-BCDB-C2A0B43516A7}) (Version: 4.5.0 - Kovid Goyal)
CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.63 - Piriform)
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Copy (HKLM-x32\...\{9BE466FF-70B7-4DA8-807C-DB4C3610FDAA}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Destinations (HKLM-x32\...\{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (HKLM-x32\...\{1458BB78-1DC5-4BC0-B9A3-2B644F5A8105}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
DJ_AIO_03_F4200_Software_Min (HKLM-x32\...\{CFA33E6D-2D7D-4785-8025-974398E940D1}) (Version: 140.0.425.000 - Hewlett-Packard) Hidden
DocProc (HKLM-x32\...\{9B362566-EC1B-4700-BB9C-EC661BDE2175}) (Version: 140.0.185.000 - Hewlett-Packard) Hidden
doPDF (HKLM\...\{2CBA4673-9199-49C7-831D-79C3206813BD}) (Version: 10.6.122 - Softland) Hidden
doPDF 10 (HKLM-x32\...\{352315dd-a81c-4612-a5d8-508e51fe30ab}) (Version: 10.6.122 - Softland)
doPDF 10 add-in for Microsoft Office (x64) (HKLM\...\{064F8223-4848-4562-B77E-997C3E74E749}) (Version: 10.6.122 - Softland)
doPDF 10 add-in for Microsoft Office (x86) (HKLM-x32\...\{705BC7F6-DE19-4764-A8C2-0162DC824AB9}) (Version: 10.6.122 - Softland)
doPDF 10 Printer Driver (HKLM\...\{1A09B3A6-2622-480B-820B-6E6A3B9BB9CB}) (Version: 10.6.122 - Softland)
Elements 10 Organizer (HKLM-x32\...\{22D3A614-482C-444A-932C-9DA1B8ECDFD2}) (Version: 10.0 - Název společnosti:) Hidden
erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
F4200 (HKLM-x32\...\{C86E1E36-6D30-4834-9C85-5501F31F7BB4}) (Version: 140.0.425.000 - Hewlett-Packard) Hidden
Fotogalerie (HKLM-x32\...\{F37D360D-9308-4BB1-8515-DC6B637B9486}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 80.0.3987.106 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.441 - Google LLC) Hidden
GPBaseService2 (HKLM-x32\...\{BB3447F6-9553-4AA9-960E-0DB5310C5779}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Deskjet F4200 All-In-One Driver Software 14.0 Rel. 6 (HKLM\...\{8C925017-72A8-4C4A-AF21-84901E26638F}) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPPhotoGadget (HKLM-x32\...\{CAE4213F-F797-439D-BD9E-79B71D115BE3}) (Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (HKLM-x32\...\{150B6201-E9E6-4DFB-960E-CCBD53FBDDED}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
HPSSupply (HKLM-x32\...\{AC35A885-0F8F-4857-B7DA-6E8DFB43E6B3}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden
Check Point SBA (HKLM\...\{C8325D51-E514-475B-AFF2-550C3527E563}) (Version: 86.5.9511 - Check Point Software Technologies Ltd.) Hidden
K-Lite Mega Codec Pack 15.2.6 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 15.2.6 - KLCP)
LibreOffice 6.3.3.2 (HKLM\...\{4DACF7A7-C851-4943-A63D-3CAE495C48E0}) (Version: 6.3.3.2 - The Document Foundation)
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.80 - Logitech Inc.)
Malwarebytes version 4.0.4.49 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.0.4.49 - Malwarebytes)
MarketResearch (HKLM-x32\...\{D360FA88-17C8-4F14-B67F-13AAF9607B12}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Language Pack 2010 - Czech/èeština (HKLM-x32\...\Office14.OMUI.cs-cz) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0409-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110405-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.4734.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-722231672-965411127-3486821242-1001\...\OneDriveSetup.exe) (Version: 19.232.1124.0005 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (HKLM-x32\...\{3D2CF65C-B544-4308-B996-700D3E5F6C4C}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 73.0 (x64 cs) (HKLM\...\Mozilla Firefox 73.0 (x64 cs)) (Version: 73.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 73.0 - Mozilla)
NVIDIA Ovladač HD audia 1.3.38.16 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.16 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 432.00 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 432.00 - NVIDIA Corporation)
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
Opera Stable 66.0.3515.72 (HKLM-x32\...\Opera 66.0.3515.72) (Version: 66.0.3515.72 - Opera Software)
Ovládací panel NVIDIA 432.00 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 432.00 - NVIDIA Corporation) Hidden
PDF Architect 7 (HKLM-x32\...\PDF Architect 7) (Version: 7.1.13.1755 - pdfforge GmbH)
PDF Architect 7 Create Module (HKLM\...\{B600CC13-8F68-4D44-8867-93490894FAE5}) (Version: 7.1.14.4969 - pdfforge GmbH) Hidden
PDF Architect 7 Edit Module (HKLM\...\{BA2C2671-B379-4101-A21C-4C549671FC8D}) (Version: 7.1.14.4969 - pdfforge GmbH) Hidden
PDF Architect 7 View Module (HKLM\...\{E947A304-6110-4CFE-98AD-E6909072E87D}) (Version: 7.1.14.4969 - pdfforge GmbH) Hidden
PDF24 Creator 9.0.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
PSE10 STI Installer (HKLM-x32\...\{11D08055-939C-432b-98C3-E072478A0CD7}) (Version: 10.0 - Adobe Systems Incorporated) Hidden
rajče průvodce verze 1.59.45.260 (HKLM-x32\...\rajče.net_is1) (Version: - rajče.net)
Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)
Scan (HKLM-x32\...\{06A1D88C-E102-4527-AF70-29FFD7AF215A}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden
Service Pack 2 for Microsoft Office 2010 Language Pack (KB2687449) 32-Bit Edition (HKLM-x32\...\{90140000-0100-0405-0000-0000000FF1CE}_Office14.OMUI.cs-cz_{1FCBAAF2-0321-4986-8DAE-5F2891EC6E8E}) (Version: - Microsoft)
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype verze 8.56 (HKLM-x32\...\Skype_is1) (Version: 8.56 - Skype Technologies S.A.)
SolutionCenter (HKLM-x32\...\{BC5DD87B-0143-4D14-AAE6-97109614DC6B}) (Version: 140.0.299.000 - Hewlett-Packard) Hidden
Status (HKLM-x32\...\{5B025634-7D5B-4B8D-BE2A-7943C1CF2D5D}) (Version: 140.0.342.000 - Hewlett-Packard) Hidden
Toolbox (HKLM-x32\...\{292F0F52-B62D-4E71-921B-89A682402201}) (Version: 140.0.596.000 - Hewlett-Packard) Hidden
TrayApp (HKLM-x32\...\{CD31E63D-47FD-491C-8117-CF201D0AFAB5}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 3.0.8 - VideoLAN)
VSO Inspector 2.0.2 (HKLM-x32\...\VSO Inspector_is1) (Version: - VSO-Software SARL)
WebReg (HKLM-x32\...\{8EE94FD8-5F52-4463-A340-185D16328158}) (Version: 140.0.297.017 - Hewlett-Packard) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - )
ZoneAlarm Anti-Ransomware (HKLM-x32\...\{0B8C3231-9818-4CB9-8213-4AB839836791}) (Version: 1.002.1006 - Check Point Software) Hidden
ZoneAlarm Firewall (HKLM-x32\...\{18FE6943-D33D-42F5-99D5-0ED22F633E32}) (Version: 15.6.121.18102 - Check Point Software Technologies Ltd.) Hidden
ZoneAlarm Free Firewall (HKLM-x32\...\ZoneAlarm Free Firewall) (Version: 15.6.121.18102 - Check Point)
ZoneAlarm Security (HKLM-x32\...\{881E7A8C-9C4B-4D14-B390-EAFBA278CF45}) (Version: 15.6.121.18102 - Check Point Software Technologies Ltd.) Hidden
Zoner Photo Studio 8 (HKLM-x32\...\Zoner Photo Studio 8_is1) (Version: - ZONER software)
Packages:
=========
ASUS Grid (Beta) -> C:\Program Files\WindowsApps\B9ECED6F.133F79A42C6_1.0.14.0_x64__qmba6cd70vzyy [2019-11-20] (ASUSTeK COMPUTER INC.)
Bubble Witch 3 Saga -> C:\Program Files\WindowsApps\king.com.BubbleWitch3Saga_6.5.8.0_x86__kgqvnymyfvs32 [2020-02-08] (king.com)
Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.30.3.0_x86__kgqvnymyfvs32 [2020-02-08] (king.com)
Doplněk multimediálního modulu pro aplikaci Fotografie -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2019-12-25] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-11-26] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-11-26] (Microsoft Corporation) [MS Ad]
Microsoft Mahjong -> C:\Program Files\WindowsApps\Microsoft.MicrosoftMahjong_3.9.12130.0_x64__8wekyb3d8bbwe [2019-12-18] (Microsoft Studios) [MS Ad]
Microsoft News -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.35.20273.0_x64__8wekyb3d8bbwe [2020-02-08] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.5.12061.0_x64__8wekyb3d8bbwe [2019-12-13] (Microsoft Studios) [MS Ad]
Microsoft To Do -> C:\Program Files\WindowsApps\Microsoft.Todos_2.11.3386.0_x64__8wekyb3d8bbwe [2020-02-14] (Microsoft Corporation)
MSN Počasí -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.34.13393.0_x64__8wekyb3d8bbwe [2019-12-19] (Microsoft Corporation) [MS Ad]
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0 [2020-01-31] (Spotify AB) [Startup Task]
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-722231672-965411127-3486821242-1001_Classes\CLSID\{B0EEFB45-D1D5-6100-7B21-7585C295AC69}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Windows -> Microsoft Corporation)
ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [6723984 2010-01-21] (Microsoft Corporation -> Microsoft Corporation)
ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Office14\GROOVEEX.DLL [4222864 2010-01-21] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [PDFArchitect7_ManagerExt] -> {21989F59-B260-4302-90C3-E51740E03639} => C:\Program Files\PDF Architect 7\context-menu.dll [2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
ContextMenuHandlers1: [Transformer4ContextMenu] -> {558BA64F-C7A8-4B96-BCDD-B46E9D00756A} => D:\Programy\ABBYY PDF Transformer+\x64\TRIntegration.x64.dll [2015-01-28] (ABBYY Production LLC -> ABBYY Production LLC.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\Archivace\WinRAR\rarext64.dll [2008-06-20] () [File not signed]
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\Archivace\WinRAR\rarext.dll [2008-08-29] () [File not signed]
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => D:\Aviry\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => D:\Aviry\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd)
ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\Archivace\WinRAR\rarext64.dll [2008-06-20] () [File not signed]
ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\Archivace\WinRAR\rarext.dll [2008-08-29] () [File not signed]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2019-10-02] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => D:\Aviry\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => D:\Aviry\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd)
ContextMenuHandlers6: [Transformer4ContextMenu] -> {558BA64F-C7A8-4B96-BCDD-B46E9D00756A} => D:\Programy\ABBYY PDF Transformer+\x64\TRIntegration.x64.dll [2015-01-28] (ABBYY Production LLC -> ABBYY Production LLC.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\Archivace\WinRAR\rarext64.dll [2008-06-20] () [File not signed]
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\Archivace\WinRAR\rarext.dll [2008-08-29] () [File not signed]
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32: [VIDC.X264] => C:\Windows\system32\x264vfw64.dll [3799552 2017-07-30] (x264vfw project) [File not signed]
HKLM\...\Drivers32: [VIDC.HFYU] => C:\Windows\system32\huffyuv.dll [55296 2005-01-22] () [File not signed]
HKLM\...\Drivers32: [VIDC.LAGS] => C:\Windows\system32\lagarith.dll [148992 2011-12-07] ( ) [File not signed]
HKLM\...\Drivers32: [VIDC.XVID] => C:\Windows\system32\xvidvfw.dll [311296 2018-01-28] () [File not signed]
HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\system32\ac3acm.acm [180736 2012-07-21] (fccHandler) [File not signed]
HKLM\...\Drivers32: [VIDC.X264] => C:\Windows\SysWOW64\x264vfw.dll [3850240 2017-07-30] (x264vfw project) [File not signed]
HKLM\...\Drivers32: [VIDC.HFYU] => C:\Windows\SysWOW64\huffyuv.dll [39936 2004-05-18] (Disappearing Inc.) [File not signed]
HKLM\...\Drivers32: [VIDC.LAGS] => C:\Windows\SysWOW64\lagarith.dll [216064 2011-12-07] ( ) [File not signed]
HKLM\...\Drivers32: [VIDC.XVID] => C:\Windows\SysWOW64\xvidvfw.dll [284672 2018-01-28] () [File not signed]
HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\SysWOW64\ac3acm.acm [122880 2012-07-21] (fccHandler) [File not signed]
HKLM\...\Drivers32: [msacm.lameacm] => C:\Windows\SysWOW64\lameACM.acm [473088 2015-02-25] (hxxp://
www.mp3dev.org/) [File not signed]
HKLM\...\Drivers32: [VIDC.FFDS] => C:\Windows\SysWOW64\ff_vfw.dll [112128 2015-10-24] () [File not signed]
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2019-11-04 15:09 - 2019-11-04 15:09 - 000059392 _____ () [File not signed] C:\Program Files (x86)\CheckPoint\Endpoint Security\Threat Emulation\SA\dict-vectorizer.dll
2019-11-27 00:44 - 2008-06-20 00:41 - 000062464 _____ () [File not signed] D:\Archivace\WinRAR\rarext64.dll
2009-11-17 22:58 - 2009-11-17 22:58 - 000342656 _____ (Hewlett Packard -> Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqmif08.dll
2009-11-17 22:58 - 2009-11-17 22:58 - 000559232 _____ (Hewlett Packard -> Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusg.dll
2012-05-27 16:44 - 2012-05-27 16:44 - 000032256 _____ (Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\HP\Digital Imaging\bin\hpotra08.rsc
2011-04-29 11:34 - 2011-04-29 11:34 - 000934400 _____ (Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqsem08.rsc
2011-04-29 11:34 - 2011-04-29 11:34 - 000012288 _____ (Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqstp08.rsc
2011-04-29 19:08 - 2011-04-29 19:08 - 000048128 _____ (Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.rsc
2010-08-06 11:15 - 2010-08-06 11:15 - 000071680 _____ (Hewlett-Packard) [File not signed] c:\windows\system32\hpzinw12.dll
2010-08-06 11:15 - 2010-08-06 11:15 - 000089600 _____ (Hewlett-Packard) [File not signed] c:\windows\system32\hpzipm12.dll
2010-08-06 11:15 - 2010-08-06 11:15 - 000054784 _____ (Hewlett-Packard) [File not signed] C:\Windows\SYSTEM32\hpzipr12.dll
2019-11-27 11:15 - 2019-11-27 11:15 - 000398336 _____ (Check Point Software Technologies Ltd.) [File not signed] C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider32.dll
2019-11-27 11:18 - 2019-11-27 11:18 - 000513536 _____ (Check Point Software Technologies Ltd.) [File not signed] C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider64.dll
2019-11-27 11:15 - 2019-11-27 11:15 - 000055296 _____ (Check Point Software Technologies Ltd.) [File not signed] C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\cphnt32.dll
2019-11-27 11:18 - 2019-11-27 11:18 - 000067072 _____ (Check Point Software Technologies Ltd.) [File not signed] C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\cphnt64.dll
2019-11-27 11:15 - 2019-11-27 11:15 - 000020480 _____ (Check Point Software Technologies Ltd.) [File not signed] C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\cphusr32.dll
2019-11-27 11:18 - 2019-11-27 11:18 - 000019968 _____ (Check Point Software Technologies Ltd.) [File not signed] C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\cphusr64.dll
2019-07-25 10:52 - 2019-07-25 10:52 - 000986112 _____ (Microsoft Corporation) [File not signed] D:\Aviry\CheckPoint\ZoneAlarm\dbghelp.dll
2019-11-10 11:38 - 2019-11-10 11:38 - 001124352 _____ (Robert Simpson, et al.) [File not signed] C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\SQLite\System.Data.SQLite.dll
2020-01-22 11:06 - 2020-01-22 11:06 - 000018944 _____ (Softland) [File not signed] C:\Windows\System32\novamn10.dll
2018-12-10 10:29 - 2018-12-10 10:29 - 000438272 _____ (The curl library, hxxps://curl.haxx.se/) [File not signed] C:\Program Files\PDF Architect 7\libcurl.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsmon => ""="Service"
==================== Association (Whitelisted) =================
==================== Internet Explorer trusted/restricted ==========
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-722231672-965411127-3486821242-1001\...\localhost -> localhost
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-03-19 05:49 - 2020-02-03 20:01 - 000000027 _____ C:\Windows\system32\drivers\etc\hosts
127.0.0.1 localhost
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-722231672-965411127-3486821242-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Admin\Pictures\Saved Pictures\M104 - Sombrero.bmp
DNS Servers: 213.46.172.36 - 213.46.172.37
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{3F60A5E6-326B-4D15-A51D-52B43BF1ABC4}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{D53AC4E9-924B-48B4-A6E6-95AF36DAFFDE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{B089ECCD-20EB-4D16-B8AF-1D4489D9D0B8}] => (Allow) D:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
FirewallRules: [{1C57980D-0A0C-43A0-986F-014867AF8077}] => (Allow) D:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
FirewallRules: [{927F259B-AC23-45ED-BD19-6C0580DD3502}] => (Allow) D:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
FirewallRules: [{C1710658-90E6-4741-B02E-F5D096497718}] => (Allow) D:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
FirewallRules: [{13FD4DA9-5757-49F9-987F-7641F63CD5D5}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{09D0FD54-F9E5-4E9B-B5EC-8C5985AB222F}] => (Allow) LPort=2869
FirewallRules: [{63FD2332-F2D6-45A0-8793-C7410883EF3D}] => (Allow) LPort=1900
FirewallRules: [{B1066463-F801-44E9-A76F-8650057FE7B9}] => (Allow) C:\Program Files (x86)\Office14\GROOVE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{ABCAB01E-49FE-4C83-A2C7-843DE4194198}] => (Allow) C:\Program Files (x86)\Office14\GROOVE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{87F08FF4-AAB0-4911-9194-EB67A27D0ED3}] => (Allow) C:\Program Files (x86)\Office14\ONENOTE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D33BCFB3-EA54-4BD5-954B-45F544174DFE}] => (Allow) C:\Program Files (x86)\Office14\ONENOTE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CD11C171-19E0-4EFD-9913-9F563B0EE8AF}] => (Allow) C:\Program Files (x86)\Office14\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{98E8879A-38BA-483B-89F0-5514BB3FAC00}] => (Allow) C:\Program Files (x86)\Office14\GROOVE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{EE403C6C-2ED9-4B10-85D1-BDBF155012D1}] => (Allow) C:\Program Files (x86)\Office14\GROOVE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F734B721-4232-451F-A5E9-157E6393D7F1}] => (Allow) C:\Program Files (x86)\Office14\ONENOTE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BB112F68-6520-4872-B8B2-0B0CACB9CA23}] => (Allow) C:\Program Files (x86)\Office14\ONENOTE.EXE (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FD1B87C3-9AF6-4F8F-8F22-1EBBA34B1E98}] => (Allow) C:\Program Files (x86)\Opera\66.0.3515.44\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{200D12C5-6D10-48F2-8B09-BD7BF4C096B1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5F2CB13D-9C1E-46F0-A011-2BBE83644B87}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{06D51213-8937-440D-BD37-5D2DD41F5315}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{809B4C5C-8C64-40AF-8950-58FEC7A1C568}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{04B82AB2-7311-4DFD-97BC-25BB38395148}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{650CCD15-C19B-4AE3-BFD4-71A26EEB4E92}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5CE7F475-C8FD-4A67-AD86-00553CAFF74C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B228C24B-EE1C-45C5-AEA6-71176ADE74DF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{D9603B5C-325E-4237-BC4E-91DCA55B90A1}] => (Allow) LPort=8501
FirewallRules: [{7059C7E5-30C1-4084-A8C6-CA7C0AB13286}] => (Allow) LPort=8501
FirewallRules: [{B26820F8-7E3A-4F39-A371-6F3A9C2E8FD8}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{BDA9BB84-1E8C-453E-A639-D97B8658C723}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{DF0362C6-6D58-45F9-BAAF-2D1CF36ED016}] => (Allow) C:\Program Files (x86)\Opera\66.0.3515.72\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{502698C3-35C7-4859-98AA-A4830FD7BD58}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
==================== Restore Points =========================
03-02-2020 19:59:52 Restore Point Created by FRST
11-02-2020 19:10:49 Installed MSXML 6.0 Parser
11-02-2020 19:12:11 Installed ABBYY PDF Transformer+.
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (02/14/2020 05:41:44 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1020) (User: NT AUTHORITY)
Description: Velikost požadované vyrovnávací paměti je větší než velikost vyrovnávací paměti předané do funkce Collect knihovny DLL rozšiřitelných čítačů C:\Windows\System32\perfts.dll pro službu LSM. Velikost dané vyrovnávací paměti: 24000; požadovaná velikost: 26968.
Error: (02/12/2020 11:35:44 AM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT AUTHORITY)
Description: Systém Windows nemůže načíst knihovnu DLL rozšiřitelných čítačů C:\Windows\system32\sysmain.dll (kód chyby Win32 126).
Error: (02/11/2020 07:23:56 PM) (Source: MsiInstaller) (EventID: 11706) (User: DESKTOP-1U0LM3C)
Description: Produkt: ABBYY PDF Transformer+ -- Chyba 1706. Pro produkt ABBYY PDF Transformer+ nebyl nalezen žádný platný zdroj. Instalační služba systému Windows nemůže pokračovat.
Error: (02/10/2020 10:24:56 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT AUTHORITY)
Description: Systém Windows nemůže načíst knihovnu DLL rozšiřitelných čítačů C:\Windows\system32\sysmain.dll (kód chyby Win32 126).
Error: (02/09/2020 08:09:17 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: PM70.EXE, verze: 0.7.0.0, časové razítko: 0x3b2d4092
Název chybujícího modulu: unknown, verze: 0.0.0.0, časové razítko: 0x00000000
Kód výjimky: 0xc0000005
Posun chyby: 0x0437f027
ID chybujícího procesu: 0x48b4
Čas spuštění chybující aplikace: 0x01d5df7bccb1e354
Cesta k chybující aplikaci: d:\programy\adobe\pagemaker 7.0\PM70.EXE
Cesta k chybujícímu modulu: unknown
ID zprávy: 15623b5c-293a-4f10-b136-aec2aceaa68d
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (02/09/2020 06:51:28 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT AUTHORITY)
Description: Systém Windows nemůže načíst knihovnu DLL rozšiřitelných čítačů C:\Windows\system32\sysmain.dll (kód chyby Win32 126).
Error: (02/07/2020 07:06:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Pm70.exe, verze: 0.7.0.0, časové razítko: 0x3b2d4092
Název chybujícího modulu: ntdll.dll, verze: 10.0.18362.387, časové razítko: 0xa4208572
Kód výjimky: 0xc0000374
Posun chyby: 0x000df94d
ID chybujícího procesu: 0x1018
Čas spuštění chybující aplikace: 0x01d5dddd8c989283
Cesta k chybující aplikaci: D:\Programy\Adobe\PageMaker 7.0\Pm70.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: 1a3451e6-9705-4825-b7d6-3011037a776d
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
Error: (02/06/2020 10:06:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Pm70.exe, verze: 0.7.0.0, časové razítko: 0x3b2d4092
Název chybujícího modulu: ntdll.dll, verze: 10.0.18362.387, časové razítko: 0xa4208572
Kód výjimky: 0xc0000374
Posun chyby: 0x000df94d
ID chybujícího procesu: 0x3194
Čas spuštění chybující aplikace: 0x01d5dd2b99d46f79
Cesta k chybující aplikaci: D:\Programy\Adobe\PageMaker 7.0\Pm70.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: 746c2db6-59e4-4acd-812a-f42618dc221b
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:
System errors:
=============
Error: (02/14/2020 05:28:54 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Služba Malwarebytes Service se po přijetí pokynu pro vypnutí neukončila správně.
Error: (02/14/2020 05:28:38 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Služba AsusUpdateCheck se po přijetí pokynu pro vypnutí neukončila správně.
Error: (02/14/2020 05:28:36 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
Description: Služba DCOM zjistila chybu 1115 při pokusu o spuštění služby wuauserv s argumenty Není k dispozici za účelem spuštění serveru:
{E60687F7-01A1-40AA-86AC-DB1CBF673334}
Error: (02/14/2020 05:28:25 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
Description: Služba DCOM zjistila chybu 1115 při pokusu o spuštění služby wuauserv s argumenty Není k dispozici za účelem spuštění serveru:
{E60687F7-01A1-40AA-86AC-DB1CBF673334}
Error: (02/14/2020 05:28:23 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Instalace se nezdařila: Instalování následující aktualizace se nezdařilo z důvodu chyby (0x8024001e): Security Update for Windows 10 Version 1909 for x64-based Systems (KB4524244).
Error: (02/14/2020 05:28:23 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
Description: Služba DCOM zjistila chybu 1115 při pokusu o spuštění služby TrustedInstaller s argumenty Není k dispozici za účelem spuštění serveru:
{752073A1-23F2-4396-85F0-8FDB879ED0ED}
Error: (02/05/2020 10:42:15 PM) (Source: DCOM) (EventID: 10000) (User: DESKTOP-1U0LM3C)
Description: Nelze spustit server DCOM: {0358B920-0AC7-461F-98F4-58E32CD89148}. Došlo k chybě:
2147942767
při provádění příkazu:
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
Error: (02/04/2020 11:00:32 PM) (Source: DCOM) (EventID: 10000) (User: DESKTOP-1U0LM3C)
Description: Nelze spustit server DCOM: {0358B920-0AC7-461F-98F4-58E32CD89148}. Došlo k chybě:
2147942767
při provádění příkazu:
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
Windows Defender:
===================================
Date: 2019-11-26 20:03:39.567
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.285.74.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15600.4
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.
Date: 2019-11-26 20:03:39.567
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.285.74.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15600.4
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.
Date: 2019-11-26 20:03:39.567
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.285.74.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15600.4
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.
Date: 2019-11-26 20:03:39.558
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.285.74.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15600.4
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.
Date: 2019-11-26 20:03:39.558
Description:
Antivirová ochrana v programu Windows Defender narazil na chybu při pokusu o aktualizaci bezpečnostních informací.
Nová verze bezpečnostních informací:
Předchozí verze bezpečnostních informací: 1.285.74.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ bezpečnostních informací: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.15600.4
Kód chyby: 0x80072ee7
Popis chyby: Nelze rozpoznat název nebo adresu serveru.
CodeIntegrity:
===================================
Date: 2020-02-14 17:59:38.576
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider64.dll that did not meet the Windows signing level requirements.
Date: 2020-02-14 17:59:38.564
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Aviry\Avira\Antivirus\avirasecuritycenteragent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider32.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-02-14 17:59:38.560
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Aviry\Avira\Antivirus\avirasecuritycenteragent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider32.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-02-14 17:59:38.556
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Aviry\Avira\Antivirus\avirasecuritycenteragent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider32.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-02-14 17:59:38.550
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Aviry\Avira\Antivirus\avirasecuritycenteragent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider32.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-02-14 17:49:38.011
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider64.dll that did not meet the Windows signing level requirements.
Date: 2020-02-14 17:49:37.998
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Aviry\Avira\Antivirus\avirasecuritycenteragent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider32.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-02-14 17:49:37.995
Description:
Code Integrity determined that a process (\Device\HarddiskVolume6\Aviry\Avira\Antivirus\avirasecuritycenteragent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\CheckPoint\Endpoint Security\EFR\CP_AmsiProvider32.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. 2901 10/16/2019
Motherboard: ASUSTeK COMPUTER INC. ROG STRIX B450-F GAMING
Processor: AMD Ryzen 5 2600 Six-Core Processor
Percentage of memory in use: 39%
Total physical RAM: 8124.13 MB
Available physical RAM: 4887.59 MB
Total Virtual: 9404.13 MB
Available Virtual: 5590.21 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:237.84 GB) (Free:182.18 GB) NTFS
Drive d: (Místní disk) (Fixed) (Total:931.5 GB) (Free:667.85 GB) NTFS
\\?\Volume{d6458fe6-83f6-4935-9c1d-28a7f72e381b}\ (Obnovení) (Fixed) (Total:0.52 GB) (Free:0.09 GB) NTFS
\\?\Volume{b5a6f67e-0283-4ca7-8508-df1d94760cbf}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 1 (Size: 238.5 GB) (Disk ID: 39AE08EB)
Partition: GPT.
==================== End of Addition.txt =======================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-02-2020
Ran by Admin (administrator) on DESKTOP-1U0LM3C (14-02-2020 18:00:38)
Running from D:\Aviry
Loaded Profiles: Admin (Available Profiles: Admin)
Platform: Windows 10 Home Version 1909 18363.657 (X64) Language: Čeština (Česko)
Default browser: FF
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:
http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(ABBYY Production LLC -> ABBYY Production LLC) D:\Programy\ABBYY PDF Transformer+\NetworkLicenseServer.exe
(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Systems Inc.) [File not signed] D:\Programy\Adobe\Adobe Acrobat Distiller 5.0\Distillr\AcroTray.exe
(Adobe Systems Incorporated -> Adobe Systems Incorporated) D:\Fotoeditory\Adobe Photoshop Elements 11\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
(ASUSTeK Computer Inc. -> ) C:\Windows\System32\AsusUpdateCheck.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) D:\Aviry\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) D:\Aviry\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) D:\Aviry\Avira\Antivirus\avshadow.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) D:\Aviry\Avira\Antivirus\protectedservice.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) D:\Aviry\Avira\Antivirus\sched.exe
(Geek Software GmbH -> Geek Software GmbH) D:\Programy\PDF24\pdf24.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Hewlett Packard -> Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Check Point Software Technologies Ltd. -> ) C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\SBACipollaSrvHost.exe
(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\EFRService.exe
(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\Endpoint Security\Remediation\RemediationService.exe
(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\Endpoint Security\Threat Emulation\TESvc.exe
(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\ZAARUpdateService.exe
(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ICM\cef\cefsimple.exe
(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ICM\ICM-Service-NET.exe
(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) D:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe
(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) D:\Aviry\CheckPoint\ZoneAlarm\zatray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(pdfforge GmbH -> pdfforge GmbH) C:\Program Files\PDF Architect 7\updater-ws.exe
(pdfforge GmbH -> pdfforge GmbH) C:\Program Files\PDF Architect 7\ws.exe
(Piriform Software Ltd -> Piriform Ltd) D:\Aviry\CCleaner\CCleaner64.exe
(Softland SRL -> Microsoft) C:\Program Files\Softland\novaPDF 10\Server\novapdfs.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [Opera Browser Assistant] => C:\Program Files (x86)\Opera\assistant\browser_assistant.exe [2785304 2020-02-13] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-722231672-965411127-3486821242-1001\...\Run: [CCleaner Smart Cleaning] => D:\Aviry\CCleaner\CCleaner64.exe [24552064 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\80.0.3987.106\Installer\chrmstp.exe [2020-02-13] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{73FA19D0-2D75-11D2-995D-00C04F98BBC9}] ->
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Avira.lnk [2020-02-02]
ShortcutTarget: Avira.lnk -> C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acrobat Assistant.lnk [2020-01-31]
ShortcutTarget: Acrobat Assistant.lnk -> D:\Programy\Adobe\Adobe Acrobat Distiller 5.0\Distillr\AcroTray.exe (Adobe Systems Inc.) [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2019-11-26]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard Co.)
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {1BE40A9B-3D3C-46F1-98D0-2F0443256942} - System32\Tasks\doPDF 10 Telemetry => C:\Program Files\Softland\novaPDF 10\Driver\GoogleAnalytics.exe [51504 2020-01-22] (Softland SRL -> )
Task: {30515FA6-F9ED-44C5-8EFA-8506DAE5A0F2} - System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-1U0LM3C-Admin => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {3E71E1A5-2EFB-4D64-9774-A612A75B9C91} - System32\Tasks\doPDF 10 Update => C:\Program Files\Softland\novaPDF 10\Driver\UpdateApplication.exe [98608 2020-01-22] (Softland SRL -> )
Task: {41F43FA7-7199-4F51-8BB7-6C396C188626} - System32\Tasks\CCleanerSkipUAC => D:\Aviry\CCleaner\CCleaner.exe [18458752 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
Task: {45D3064C-3490-40EA-A308-48CC75246022} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-11-26] (Google Inc -> Google Inc.)
Task: {6D0F4719-6443-4675-A203-79D1F80F2BD1} - System32\Tasks\Avira_Antivirus_Systray => D:\Aviry\Avira\Antivirus\avgnt.exe [2757672 2019-11-15] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {98AED33B-F8AF-4B63-A24A-A0B3C9CC1457} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1240656 2019-09-10] (Adobe Inc. -> Adobe Systems)
Task: {B01B9418-6846-4E2E-A1D2-A7B9F27667D9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-11-26] (Google Inc -> Google Inc.)
Task: {B3F8FF2A-AF7C-41B7-A3DF-C3DD0781737E} - System32\Tasks\CCleaner Update => D:\Aviry\CCleaner\CCUpdate.exe [608384 2019-10-14] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {BB9C4A9E-8903-42A2-9BCF-77E08E69BE01} - System32\Tasks\klcp_update => D:\Prográmky\K-Lite Codec Pack\Tools\CodecTweakTool.exe [1724928 2019-11-16] () [File not signed]
Task: {DE4B2DAB-FDA9-4B67-AC5A-F99A80BE385E} - System32\Tasks\Opera scheduled assistant Autoupdate 1580117963 => C:\Program Files (x86)\Opera\launcher.exe [1351192 2020-02-05] (Opera Software AS -> Opera Software)
Task: {E6390958-A82C-4D6E-A991-678A2D90CD20} - System32\Tasks\Opera scheduled Autoupdate 1574800406 => C:\Program Files (x86)\Opera\launcher.exe [1351192 2020-02-05] (Opera Software AS -> Opera Software)
Task: {E948ECFF-5A89-46DA-AE8D-EFA7EF4E35F1} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {FFDCBDCA-7CFB-4740-B675-7E5A751731CC} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1873288 2019-11-26] (AVAST Software s.r.o. -> AVAST Software)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37
Tcpip\..\Interfaces\{266e809c-ac84-4a9e-b962-f5e47fcf4ea6}: [DhcpNameServer] 213.46.172.36 213.46.172.37
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
BHO: PDF Architect 7 Helper -> {2B035CAB-1F3D-4DE6-A32D-39B9E5F456D0} -> C:\Program Files\PDF Architect 7\creator\plugins\IEAddin\creator-ie-helper.dll [2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation -> Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: PDF Architect 7 Helper -> {2B035CAB-1F3D-4DE6-A32D-39B9E5F456D0} -> C:\Program Files (x86)\PDF Architect 7\creator\plugins\IEAddin\creator-ie-helper.dll [2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation -> Microsoft Corporation)
Toolbar: HKLM - PDF Architect 7 Toolbar - {61E612A7-2382-4570-8D3F-42BC136DDAD7} - C:\Program Files\PDF Architect 7\creator\plugins\IEAddin\creator-ie-plugin.dll [2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
Toolbar: HKLM-x32 - PDF Architect 7 Toolbar - {61E612A7-2382-4570-8D3F-42BC136DDAD7} - C:\Program Files (x86)\PDF Architect 7\creator\plugins\IEAddin\creator-ie-plugin.dll [2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
FireFox:
========
FF DefaultProfile: kc08x7df.default
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\u4mgi7h5.default-release [2020-02-14]
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kc08x7df.default [2020-02-14]
FF Extension: (uBlock Origin) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kc08x7df.default\Extensions\
uBlock0@raymondhill.net.xpi [2020-02-14]
FF HKLM\...\Firefox\Extensions: [
pdf_architect_7_conv_v.2@pdfforge.org] - C:\Program Files\PDF Architect 7\creator\plugins\FirefoxAddin\
pdf_architect_7_conv_v.2@pdfforge.org.xpi
FF Extension: (PDF Architect 7 Creator) - C:\Program Files\PDF Architect 7\creator\plugins\FirefoxAddin\
pdf_architect_7_conv_v.2@pdfforge.org.xpi [2019-10-02]
FF HKLM-x32\...\Firefox\Extensions: [
pdf_architect_7_conv_v.2@pdfforge.org] - C:\Program Files\PDF Architect 7\creator\plugins\FirefoxAddin\
pdf_architect_7_conv_v.2@pdfforge.org.xpi
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> D:\Prográmky\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\Office14\NPSPWRAP.DLL [2010-01-10] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-02-04] (Adobe Inc. -> Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default [2020-02-14]
CHR StartupUrls: Default -> "hxxp://
www.google.com"
CHR Extension: (uBlock Origin) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2020-02-07]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-11-26]
CHR Extension: (Chrome Media Router) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-02-06]
Opera:
=======
OPR Extension: (uBlock Origin) - C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Extensions\kccohkcpppjjkkjppopfnflnebibpida [2019-11-28]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 ABBYY.Licensing.PDFTransformer.Classic.4.0; D:\Programy\ABBYY PDF Transformer+\NetworkLicenseServer.exe [962256 2014-12-02] (ABBYY Production LLC -> ABBYY Production LLC)
R2 AdobeActiveFileMonitor10.0; D:\Fotoeditory\Adobe Photoshop Elements 11\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [169624 2011-09-14] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
S2 AntiVirMailService; D:\Aviry\Avira\Antivirus\avmailc7.exe [1210168 2019-12-06] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntivirProtectedService; D:\Aviry\Avira\Antivirus\ProtectedService.exe [535352 2019-10-30] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; D:\Aviry\Avira\Antivirus\sched.exe [484768 2019-10-30] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirService; D:\Aviry\Avira\Antivirus\avguard.exe [484768 2019-10-30] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; D:\Aviry\Avira\Antivirus\avwebg7.exe [574848 2020-01-21] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AsusUpdateCheck; C:\Windows\System32\AsusUpdateCheck.exe [768408 2020-02-14] (ASUSTeK Computer Inc. -> )
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [617520 2020-01-15] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 CPEFR; C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\EFRService.exe [2825976 2019-11-27] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
R2 CpSbaCipolla; C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\SBACipollaSrvHost.exe [33016 2019-10-29] (Check Point Software Technologies Ltd. -> )
R2 CpSbaUpdater; C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\SBACipollaSrvHost.exe [33016 2019-10-29] (Check Point Software Technologies Ltd. -> )
S3 MBAMService; D:\Aviry\Malwarebytes\Anti-Malware\mbamservice.exe [6960640 2020-01-31] (Malwarebytes Inc -> Malwarebytes)
S3 Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Office14\GROOVE.EXE [30963576 2010-01-21] (Microsoft Corporation -> Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 NovaPdf10Server; C:\Program Files\Softland\novaPDF 10\Server\novapdfs.exe [52528 2020-01-22] (Softland SRL -> Microsoft)
R3 PDF Architect 7; C:\Program Files\PDF Architect 7\ws.exe [2579752 2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
S3 PDF Architect 7 Creator; C:\Program Files\PDF Architect 7\creator\common\creator-ws.exe [692008 2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
R2 PDF Architect 7 Update Service; C:\Program Files\PDF Architect 7\updater-ws.exe [1832232 2019-10-07] (pdfforge GmbH -> pdfforge GmbH)
R2 PDF24; D:\Programy\PDF24\pdf24.exe [487048 2019-10-21] (Geek Software GmbH -> Geek Software GmbH)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 RemediationService; C:\Program Files (x86)\CheckPoint\Endpoint Security\Remediation\RemediationService.exe [18168 2019-11-04] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
R2 TESvc; C:\Program Files (x86)\CheckPoint\Endpoint Security\Threat Emulation\TESvc.exe [301304 2019-11-04] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
R2 vsmon; D:\Aviry\CheckPoint\ZoneAlarm\vsmon.exe [4501544 2019-07-25] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\NisSrv.exe [3201616 2019-11-26] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MsMpEng.exe [103168 2019-11-26] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 ZA NET ICM Service; C:\Program Files (x86)\CheckPoint\ICM\ICM-Service-NET.exe [40304 2019-02-07] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
R2 ZAARUpdateService; C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\ZAARUpdateService.exe [51936 2019-11-27] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
S3 ZAPrivacyService; D:\Aviry\CheckPoint\ZoneAlarm\ZaPrivacyService.exe [114936 2019-07-25] (Check Point Software Technologies Ltd. -> Check Point Software Technologies, Ltd.)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 amdgpio2; C:\Windows\System32\drivers\amdgpio2.sys [45832 2019-10-01] (Advanced Micro Devices INC. -> Advanced Micro Devices, Inc)
R3 amdgpio3; C:\Windows\System32\drivers\amdgpio3.sys [24424 2016-08-12] (AMD PMP-PE CB Code Signer v20160415 -> Advanced Micro Devices, Inc)
S3 amdkmcsp; C:\Windows\system32\DRIVERS\amdkmcsp.sys [101232 2017-06-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc. )
R3 AMDPCIDev; C:\Windows\System32\drivers\AMDPCIDev.sys [31592 2018-04-25] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R0 amdpsp; C:\Windows\System32\DRIVERS\amdpsp.sys [243048 2017-06-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc. )
R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [78936 2019-06-07] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S0 avelam; C:\Windows\System32\drivers\avelam.sys [22336 2019-03-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [207784 2019-12-06] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [197176 2019-09-19] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [46704 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [89736 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [45472 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 cpbak; C:\Windows\System32\DRIVERS\cpbak.sys [66848 2019-11-05] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)
R1 CPEPMon; C:\Windows\System32\DRIVERS\CPEPMon.sys [110880 2019-11-05] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-18] (Hewlett-Packard Company -> Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-18] (Hewlett-Packard Company -> Windows (R) Win 7 DDK provider)
S3 dot4usb; C:\Windows\system32\DRIVERS\dot4usb.sys [49056 2012-10-18] (Hewlett-Packard Company -> Microsoft Corporation)
R1 epnetflt; C:\Windows\system32\drivers\epnetflt.sys [130336 2019-10-06] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)
R1 epregflt; C:\Windows\system32\drivers\epregflt.sys [132176 2019-05-01] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)
R2 ISWKL; C:\Program Files (x86)\CheckPoint\Endpoint Security\Endpoint Common\bin\ISWKL.sys [65264 2019-08-12] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [214496 2020-02-04] (Malwarebytes Inc -> Malwarebytes)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [20936 2020-01-31] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [226448 2020-02-06] (Malwarebytes Inc -> Malwarebytes)
S3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248968 2020-02-06] (Malwarebytes Inc -> Malwarebytes)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_db678424d2641c3d\nvlddmkm.sys [22094728 2019-10-04] (NVIDIA Corporation -> NVIDIA Corporation)
R1 Vsdatant; C:\Windows\System32\drivers\vsdatant.sys [461240 2019-07-25] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [46472 2019-11-26] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [351968 2019-11-26] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [53984 2019-11-26] (Microsoft Windows -> Microsoft Corporation)
U3 iswSvc; no ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ===================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-02-14 18:00 - 2020-02-14 18:00 - 000000000 ____D C:\FRST
2020-02-14 17:27 - 2020-02-14 17:27 - 000000000 ____D C:\ProgramData\ssh
2020-02-14 10:24 - 2020-02-14 10:24 - 005502464 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2020-02-14 10:24 - 2020-02-14 10:24 - 004308480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
2020-02-14 10:24 - 2020-02-14 10:24 - 001541632 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
2020-02-14 10:24 - 2020-02-14 10:24 - 000952416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DolbyDecMFT.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 025900032 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 025444352 _____ (Microsoft Corporation) C:\Windows\system32\Hydrogen.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 022635008 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 019850240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 019813376 _____ (Microsoft Corporation) C:\Windows\system32\HologramWorld.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 018026496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 017787904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 009929016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 008013824 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 007905208 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 007754752 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 007600448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 007263992 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 007259648 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 007017472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 006519752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 006435840 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 006284800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 006231200 _____ (Microsoft Corporation) C:\Windows\system32\StartTileData.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 006167552 _____ (Microsoft Corporation) C:\Windows\system32\twinui.pcshell.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 006083832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 005912064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 005764664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 005112320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 005041664 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 004856832 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 004615376 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 004575232 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 004562896 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 004538880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 004470784 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 004348616 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Mirage.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 004129416 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 004005888 _____ (Microsoft Corporation) C:\Windows\system32\EdgeContent.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 003967888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 003820032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 003792384 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 003728896 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 003703296 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 003590968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 003550208 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 003525592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 003484672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 003372440 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 003263488 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 003243080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Mirage.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 003110400 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 002988552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 002870272 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 002861568 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 002800128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 002773776 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 002766088 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 002755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2020-02-14 10:23 - 2020-02-14 10:23 - 002755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2020-02-14 10:23 - 2020-02-14 10:23 - 002714624 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 002703872 _____ (Microsoft Corporation) C:\Windows\system32\WebRuntimeManager.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 002584008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 002561536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 002493720 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 002314952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 002305536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 002284544 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 002260176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 002230232 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 002225160 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 002125904 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 002084576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 002071552 _____ (Microsoft Corporation) C:\Windows\system32\ISM.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 002032128 _____ C:\Windows\system32\rdpnano.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001999960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001942016 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001916744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001858560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001841152 _____ C:\Windows\system32\TextInputMethodFormatter.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001835128 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001830200 _____ (Microsoft Corporation) C:\Windows\system32\rdpserverbase.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001757096 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2020-02-14 10:23 - 2020-02-14 10:23 - 001748480 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001743680 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001726480 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001693184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001687040 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001664696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001664680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001657856 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001655880 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001610240 _____ (Microsoft Corporation) C:\Windows\system32\HologramCompositor.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001602560 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001562424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpserverbase.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001540096 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001512320 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 001505592 _____ (Microsoft Corporation) C:\Windows\system32\rdpbase.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001489064 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001482040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 001481216 _____ (Microsoft Corporation) C:\Windows\system32\rdpsharercom.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001480192 _____ (Microsoft Corporation) C:\Windows\system32\usocoreworker.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 001417760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001413912 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001412096 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001398584 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 001394168 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001372160 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001366128 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2020-02-14 10:23 - 2020-02-14 10:23 - 001319936 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001300280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 001284096 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001283592 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2020-02-14 10:23 - 2020-02-14 10:23 - 001273856 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001272360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001260544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpsharercom.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001218120 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 001216000 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 001214976 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001213752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpbase.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001195008 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001182232 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 001170960 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001154448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001151816 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001149928 _____ (Microsoft Corporation) C:\Windows\system32\ApplyTrustOffline.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 001105776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001098720 _____ (Microsoft Corporation) C:\Windows\system32\DolbyDecMFT.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001097216 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001084216 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001083904 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001083392 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001077264 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 001060352 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001051448 _____ (Microsoft Corporation) C:\Windows\system32\pidgenx.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001026792 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001009664 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 001000960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Mirage.Internal.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000996352 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000974336 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000949248 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthSSO.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000928120 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthService.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000923136 _____ (Microsoft Corporation) C:\Windows\system32\EdgeManager.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000916480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Core.TextInput.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000913408 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000904504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000895488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000892488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000891736 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000890368 _____ (Microsoft Corporation) C:\Windows\system32\HolographicExtensions.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000882688 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000875448 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000874296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 000864256 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000857088 _____ C:\Windows\system32\MBR2GPT.EXE
2020-02-14 10:23 - 2020-02-14 10:23 - 000852480 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000851968 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000843776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000839680 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000824848 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000804872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 000803840 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000788992 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000784384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000783480 _____ (Microsoft Corporation) C:\Windows\system32\tcblaunch.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000782848 _____ (Microsoft Corporation) C:\Windows\system32\wifinetworkmanager.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000774664 _____ (Microsoft Corporation) C:\Windows\system32\securekernel.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000768488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000758800 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000750080 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000749568 _____ (Microsoft Corporation) C:\Windows\system32\FrameServer.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000747320 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000737280 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Launcher.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000735744 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000732200 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_StorageSense.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000727040 _____ (Microsoft Corporation) C:\Windows\system32\agentactivationruntime.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000716288 _____ (Microsoft Corporation) C:\Windows\system32\agentactivationruntimewindows.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000705536 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000704512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.FileExplorer.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Mirage.Internal.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000685056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000679368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000678928 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000673080 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000670720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000667136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000667136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EdgeManager.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000661816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 000646656 _____ (Microsoft Corporation) C:\Windows\system32\cdpsvc.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000642008 _____ (Microsoft Corporation) C:\Windows\system32\TextInputFramework.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000637968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 000637440 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000629760 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000623104 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000617784 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000610816 _____ (Microsoft Corporation) C:\Windows\system32\netprofmsvc.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000605184 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000599552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000598528 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000597816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000589592 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000587064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupEngine.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000578560 _____ (Microsoft Corporation) C:\Windows\system32\SppExtComObj.Exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000568120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000562176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000558592 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Notifications.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000550400 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 000545432 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.MediaControl.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000542288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000537608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000535552 _____ (Microsoft Corporation) C:\Windows\system32\usosvc.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000530432 _____ (Microsoft Corporation) C:\Windows\system32\sppcext.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000521728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.Launcher.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000518456 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000516648 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000516544 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000516096 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000512000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000510768 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000500736 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2020-02-14 10:23 - 2020-02-14 10:23 - 000497152 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000494080 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000490496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.FileExplorer.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000490496 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000486912 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000486400 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000477496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2020-02-14 10:23 - 2020-02-14 10:23 - 000476672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000475648 _____ (Microsoft Corporation) C:\Windows\system32\DscCore.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000469504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000467952 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000465208 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000464384 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000459896 _____ (Microsoft Corporation) C:\Windows\system32\MusNotifyIcon.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000456192 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000453432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000450560 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000443904 _____ (Microsoft Corporation) C:\Windows\system32\edgeIso.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000441144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 000441072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.MediaControl.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000437776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 000435200 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000430080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000422912 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000422008 _____ (Microsoft Corporation) C:\Windows\system32\SgrmEnclave_secure.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000421376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2020-02-14 10:23 - 2020-02-14 10:23 - 000416056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 000415808 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000407040 _____ (Microsoft Corporation) C:\Windows\system32\DispBroker.Desktop.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000405632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000401408 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000400696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 000399360 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000392192 _____ (Microsoft Corporation) C:\Windows\system32\Search.ProtocolHandler.MAPI2.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000384000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000375504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000370688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000369504 _____ (Microsoft Corporation) C:\Windows\system32\BCP47Langs.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000368128 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000366416 _____ (Microsoft Corporation) C:\Windows\system32\mfsensorgroup.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000355840 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicSvc.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000353280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000350720 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_SpeechPrivacy.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000345088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000336384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000335448 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000327680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgeIso.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000324616 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000324608 _____ (Microsoft Corporation) C:\Windows\system32\FSClient.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32k.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 000324096 _____ (Microsoft Corporation) C:\Windows\system32\rdpviewerax.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000311096 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthAgent.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000309248 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000308736 _____ (Microsoft Corporation) C:\Windows\system32\msIso.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000307712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000300392 _____ (Microsoft Corporation) C:\Windows\system32\skci.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000299520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000296760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\DeviceDirectoryClient.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000285184 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicCapsule.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000283136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000282112 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.AppDefaults.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000281088 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000277504 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_CapabilityAccess.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000274464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BCP47Langs.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpviewerax.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000268800 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000266752 _____ (Microsoft Corporation) C:\Windows\system32\DAFMCP.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000265216 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000259984 _____ (Microsoft Corporation) C:\Windows\system32\logoncli.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000256000 _____ (Microsoft Corporation) C:\Windows\system32\UpdateDeploymentProvider.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tapisrv.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000251904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msIso.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000250880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winnat.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 000249344 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000247856 _____ (Microsoft Corporation) C:\Windows\system32\weretw.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000240640 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000228864 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000227840 _____ (Microsoft Corporation) C:\Windows\system32\IndexedDbLegacy.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000226816 _____ (Microsoft Corporation) C:\Windows\system32\netprofm.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000225792 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000224768 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE
2020-02-14 10:23 - 2020-02-14 10:23 - 000222208 _____ (Microsoft Corporation) C:\Windows\system32\Winlangdb.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000220984 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000217600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msutb.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000214528 _____ (Microsoft Corporation) C:\Windows\system32\rdsdwmdr.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000211968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000210744 _____ (Microsoft Corporation) C:\Windows\system32\tcbloader.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000209920 _____ (Microsoft Corporation) C:\Windows\system32\wuuhosdeployment.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000204800 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000203776 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000201728 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000201728 _____ (Microsoft Corporation) C:\Windows\system32\AppXApplicabilityBlob.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000199480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000197632 _____ (Microsoft Corporation) C:\Windows\system32\Win32CompatibilityAppraiserCSP.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000194560 _____ (Microsoft Corporation) C:\Windows\system32\recdisc.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000194064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 000193800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\weretw.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000190464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\regapi.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000190256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logoncli.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE
2020-02-14 10:23 - 2020-02-14 10:23 - 000186880 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000186672 _____ (Microsoft Corporation) C:\Windows\system32\BCP47mrm.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000184832 _____ (Microsoft Corporation) C:\Windows\system32\AarSvc.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000183808 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngOnline.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000179720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 000175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IndexedDbLegacy.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000169472 _____ (Microsoft Corporation) C:\Windows\system32\SpatialAudioLicenseSrv.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000165832 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000160768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Winlangdb.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000157696 _____ (Microsoft Corporation) C:\Windows\system32\dssvc.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000155648 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_AppExecutionAlias.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000155136 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\fdWSD.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_BackgroundApps.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000150536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000149504 _____ (Microsoft Corporation) C:\Windows\system32\sdrsvc.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000147456 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SpatialAudioLicenseSrv.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000143160 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000139776 _____ (Microsoft Corporation) C:\Windows\system32\Chakrathunk.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000138752 _____ (Microsoft Corporation) C:\Windows\system32\InputLocaleManager.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000135168 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000133464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BCP47mrm.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000132624 _____ (Microsoft Corporation) C:\Windows\system32\offlinelsa.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000130560 _____ (Microsoft Corporation) C:\Windows\system32\globinputhost.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000128528 _____ (Microsoft Corporation) C:\Windows\system32\wifitask.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\usoapi.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000127280 _____ (Microsoft Corporation) C:\Windows\system32\win32u.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdWSD.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000125440 _____ (Microsoft Corporation) C:\Windows\system32\sdshext.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\ApplicationControlCSP.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000123392 _____ (Microsoft Corporation) C:\Windows\system32\wercplsupport.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000119808 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000119296 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000117264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bindflt.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 000117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000113152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000112128 _____ (Microsoft Corporation) C:\Windows\system32\NetDriverInstall.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000108544 _____ (Microsoft Corporation) C:\Windows\system32\fdSSDP.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000107832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupApi.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000107008 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingExperienceMEM.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000106808 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthProxyStub.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000105984 _____ (Microsoft Corporation) C:\Windows\system32\utcutil.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000105472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakrathunk.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000105472 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000099712 _____ (Microsoft Corporation) C:\Windows\system32\FsIso.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000097280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\compstui.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000097080 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\globinputhost.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000095232 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000093496 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000090624 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000090624 _____ (Microsoft Corporation) C:\Windows\system32\keyiso.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000089912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 000089600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfrgui.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000089328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32u.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000089088 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicAgent.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdSSDP.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000088352 _____ (Microsoft Corporation) C:\Windows\system32\remoteaudioendpoint.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000087040 _____ (Microsoft Corporation) C:\Windows\system32\EditBufferTestHook.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000084992 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthSystray.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000084496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hvservice.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 000080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetDriverInstall.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usoapi.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\CustomInstallExec.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000072816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\remoteaudioendpoint.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000071480 _____ (Microsoft Corporation) C:\Windows\system32\win32appinventorycsp.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000069120 _____ (Microsoft Corporation) C:\Windows\system32\UsoClient.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\keyiso.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\findnetprinters.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\iemigplugin.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\printui.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iemigplugin.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000063288 _____ (Microsoft Corporation) C:\Windows\system32\SecurityHealthHost.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000059392 _____ (Microsoft Corporation) C:\Windows\system32\UserLanguageProfileCallback.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000059221 _____ C:\Windows\system32\srms.dat
2020-02-14 10:23 - 2020-02-14 10:23 - 000058880 _____ C:\Windows\system32\runexehelper.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000057856 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000057856 _____ (Microsoft Corporation) C:\Windows\system32\SrTasks.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000057344 _____ (Microsoft Corporation) C:\Windows\system32\audioresourceregistrar.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\findnetprinters.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rtutils.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\mcicda.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000047208 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000046592 _____ (Microsoft Corporation) C:\Windows\system32\Websocket.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000045056 _____ (Microsoft Corporation) C:\Windows\system32\npmproxy.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000044544 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserLanguageProfileCallback.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000042512 _____ (Microsoft Corporation) C:\Windows\system32\SysResetErr.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\WordBreakers.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mcicda.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000037392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wimmount.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 000036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Websocket.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\mciwave.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000032056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2020-02-14 10:23 - 2020-02-14 10:23 - 000030208 _____ (Microsoft Corporation) C:\Windows\system32\mciseq.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\nlmproxy.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\WaaSMedicPS.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000027648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mciwave.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000024064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mciseq.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000021520 _____ (Microsoft Corporation) C:\Windows\system32\kdhvcom.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000020944 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000019768 _____ (Microsoft Corporation) C:\Windows\system32\ResetEngine.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\icsunattend.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\bindflt.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\nlmsprep.dll
2020-02-14 10:23 - 2020-02-14 10:23 - 000015360 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000013824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\dstokenclean.exe
2020-02-14 10:23 - 2020-02-14 10:23 - 000000315 _____ C:\Windows\system32\DrtmAuth9.bin
2020-02-14 10:23 - 2020-02-14 10:23 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2020-02-14 10:23 - 2020-02-14 10:23 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2020-02-14 10:23 - 2020-02-14 10:23 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2020-02-14 10:23 - 2020-02-14 10:23 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2020-02-14 10:23 - 2020-02-14 10:23 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2020-02-14 10:23 - 2020-02-14 10:23 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2020-02-14 10:23 - 2020-02-14 10:23 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2020-02-14 10:23 - 2020-02-14 10:23 - 000000315 _____ C:\Windows\system32\DrtmAuth12.bin
2020-02-14 10:23 - 2020-02-14 10:23 - 000000315 _____ C:\Windows\system32\DrtmAuth11.bin
2020-02-14 10:23 - 2020-02-14 10:23 - 000000315 _____ C:\Windows\system32\DrtmAuth10.bin
2020-02-14 10:23 - 2020-02-14 10:23 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
2020-02-14 10:15 - 2020-01-16 06:07 - 000492544 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2020-02-14 10:15 - 2020-01-16 05:23 - 000390656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2020-02-11 19:12 - 2020-02-11 19:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY PDF Transformer+
2020-02-11 19:12 - 2020-02-11 19:12 - 000001742 _____ C:\Users\Public\Desktop\ABBYY PDF Transformer+.lnk
2020-02-11 19:12 - 2014-11-13 15:40 - 000058936 _____ (Tracker Software Products (Canada) Ltd.) C:\Windows\system32\pxc50pma.dll
2020-02-10 20:43 - 2020-02-10 20:44 - 000026231 _____ C:\Users\Admin\Documents\Dětský karneval v T.J. Sokol Praha Vršovice 9.2.2020.wlmp
2020-02-09 19:44 - 2020-02-09 19:45 - 000000293 _____ C:\DelFix.txt
2020-02-06 08:43 - 2020-02-06 08:43 - 000248968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2020-02-06 08:43 - 2020-02-06 08:43 - 000226448 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2020-02-06 08:41 - 2020-02-06 08:41 - 005999962 _____ C:\Users\Admin\Downloads\Svět je skutečně nádherný.ppsx
2020-02-05 19:20 - 2020-02-14 14:35 - 000000000 ____D C:\Users\Admin\AppData\Roaming\vlc
2020-02-05 19:19 - 2020-02-05 19:19 - 000000789 _____ C:\Users\Public\Desktop\VLC media player.lnk
2020-02-05 19:19 - 2020-02-05 19:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2020-02-05 13:55 - 2020-02-05 13:55 - 000022400 _____ C:\Users\Admin\Downloads\mail.ru.html
2020-02-05 13:55 - 2020-02-05 13:55 - 000000000 ____D C:\Users\Admin\Downloads\mail.ru_soubory
2020-02-04 18:09 - 2020-02-04 18:10 - 007169886 _____ C:\Users\Admin\Downloads\FOND_PRE_AZYL_A_MIGRACIU__ktory_ma_medziinym_posilnovat_legalnu_migraciu__take_nieco_schvalili_europoslanci_v_stredu._Najvyssi_cas__ze_idu_eurovo__by.mp4
2020-02-04 11:44 - 2020-02-04 11:44 - 000214496 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2020-02-02 22:16 - 2020-02-02 22:17 - 000000192 _____ C:\Users\Admin\Desktop\Mail.ru.url
2020-02-02 13:55 - 2020-02-02 13:55 - 000043268 _____ C:\Users\Admin\Documents\Ples ke 150. výročí T.J. Sokol Praha Vršovice 1.2.2020.wlmp
2020-02-02 09:38 - 2020-02-02 09:38 - 000227244 _____ C:\Users\Admin\Downloads\Hluboká pravda z ��st lékaře vojenské nemocnice.pdf
2020-01-31 20:46 - 2020-01-31 20:46 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Softland
2020-01-31 20:45 - 2020-01-31 20:45 - 000003688 _____ C:\Windows\system32\Tasks\doPDF 10 Update
2020-01-31 20:45 - 2020-01-31 20:45 - 000003674 _____ C:\Windows\system32\Tasks\doPDF 10 Telemetry
2020-01-31 20:45 - 2020-01-31 20:45 - 000000000 ____D C:\Users\Admin\AppData\Local\Softland
2020-01-31 20:45 - 2020-01-31 20:45 - 000000000 ____D C:\ProgramData\Softland
2020-01-31 20:45 - 2020-01-31 20:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\doPDF 10
2020-01-31 20:45 - 2020-01-31 20:45 - 000000000 ____D C:\Program Files\Softland
2020-01-31 20:45 - 2020-01-31 20:45 - 000000000 ____D C:\Program Files (x86)\Softland
2020-01-31 20:03 - 2020-01-31 20:06 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Wondershare
2020-01-31 20:03 - 2020-01-31 20:03 - 000000000 ____D C:\Users\Admin\AppData\Local\Wondershare
2020-01-31 20:02 - 2020-01-31 20:06 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2020-01-31 19:10 - 2020-01-31 19:10 - 000000000 ____D C:\Users\Admin\AppData\Roaming\PrimoPDF
2020-01-31 19:08 - 2020-01-31 19:10 - 000000000 ____D C:\Program Files (x86)\Nitro PDF
2020-01-31 19:08 - 2015-09-01 14:41 - 000095008 _____ C:\Windows\system32\Primomonnt.dll
2020-01-31 19:01 - 2020-01-31 19:01 - 000000000 ____D C:\Users\Admin\AppData\Roaming\inst
2020-01-31 18:52 - 2020-01-31 18:52 - 002326656 _____ C:\Windows\cadkasdeinst01.exe
2020-01-31 18:52 - 2020-01-31 18:52 - 000000000 ____D C:\Users\Admin\AppData\Roaming\CAD-KAS
2020-01-31 16:58 - 2020-01-31 16:59 - 000153312 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2020-01-31 16:58 - 2020-01-31 16:59 - 000020936 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamElam.sys
2020-01-31 16:58 - 2020-01-31 16:59 - 000000927 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2020-01-31 16:58 - 2020-01-31 16:58 - 000000000 ____D C:\Users\Admin\AppData\Local\mbamtray
2020-01-31 16:58 - 2020-01-31 16:58 - 000000000 ____D C:\Users\Admin\AppData\Local\mbam
2020-01-31 16:58 - 2020-01-31 16:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2020-01-31 16:58 - 2020-01-31 16:58 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-01-30 09:19 - 2020-01-30 09:19 - 001363429 _____ C:\Users\Admin\Downloads\VID-20170114-WA0003.mp4
2020-01-28 00:17 - 2020-02-03 20:00 - 000000000 ____D C:\Users\Admin\AppData\LocalLow\Temp
2020-01-27 23:49 - 2020-01-31 21:17 - 000000000 ____D C:\Users\Admin\AppData\Roaming\view
2020-01-27 23:49 - 2020-01-27 23:49 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\view
2020-01-27 23:48 - 2020-02-02 19:08 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Lavasoft
2020-01-27 23:48 - 2020-02-02 19:08 - 000000000 ____D C:\Users\Admin\AppData\Local\Lavasoft
2020-01-27 23:48 - 2020-02-02 19:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2020-01-27 23:48 - 2020-02-02 19:08 - 000000000 ____D C:\ProgramData\Lavasoft
2020-01-27 23:48 - 2020-02-02 19:08 - 000000000 ____D C:\Program Files (x86)\Lavasoft
2020-01-27 23:48 - 2020-01-27 23:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\vso
2020-01-27 23:48 - 2020-01-27 23:48 - 000000000 ____D C:\Program Files (x86)\vso
2020-01-27 22:42 - 2020-01-27 22:42 - 000000000 ____D C:\Users\Admin\AppData\Roaming\PDF Producer
2020-01-27 21:43 - 2020-01-27 21:43 - 000001189 _____ C:\Users\Public\Desktop\Avira.lnk
2020-01-27 10:39 - 2020-02-13 16:47 - 000004194 _____ C:\Windows\system32\Tasks\Opera scheduled assistant Autoupdate 1580117963
2020-01-22 11:06 - 2020-01-22 11:06 - 000018944 _____ (Softland) C:\Windows\system32\novamn10.dll
2020-01-22 11:06 - 2020-01-22 11:06 - 000015872 _____ (Softland) C:\Windows\system32\novami10.dll
2020-01-20 22:28 - 2020-02-13 18:00 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2020-01-17 14:56 - 2020-01-17 14:56 - 012381996 _____ C:\Users\Admin\Downloads\getfvid_10000000_2196253103999578_8666084806774988589_n11 (1).mp4
2020-01-15 21:19 - 2020-01-15 21:19 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Real
2020-01-15 21:19 - 2020-01-15 21:19 - 000000000 ____D C:\Users\Admin\AppData\Local\Real
2020-01-15 21:19 - 2020-01-15 21:19 - 000000000 ____D C:\ProgramData\Real
2020-01-15 19:20 - 2020-01-15 19:20 - 002473976 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001985928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001835008 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001697280 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001458688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001330952 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001106944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 001020032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000921600 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000896512 _____ (Microsoft Corporation) C:\Windows\system32\MdmDiagnostics.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000852480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000673792 _____ (Microsoft Corporation) C:\Windows\system32\wiaaut.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000671232 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000571392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wiaaut.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000432256 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000379392 _____ (Microsoft Corporation) C:\Windows\system32\provengine.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000363840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000329216 _____ (Microsoft Corporation) C:\Windows\system32\DiagnosticLogCSP.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000321536 _____ (Microsoft Corporation) C:\Windows\system32\sti.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000317440 _____ (Microsoft Corporation) C:\Windows\system32\ConhostV1.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000294400 _____ (Microsoft Corporation) C:\Windows\system32\provops.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000271872 _____ (Microsoft Corporation) C:\Windows\system32\provhandlers.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000233472 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCore.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000232448 _____ (Microsoft Corporation) C:\Windows\system32\provisioningcsp.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sti.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000206336 _____ (Microsoft Corporation) C:\Windows\system32\sti_ci.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000162696 _____ (Microsoft Corporation) C:\Windows\system32\dmcmnutils.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000148992 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 000145920 _____ (Microsoft Corporation) C:\Windows\system32\wiadss.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000127520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmcmnutils.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\cryptcatsvc.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000120320 _____ (Microsoft Corporation) C:\Windows\system32\KnobsCsp.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000119808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wiadss.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000102400 _____ (Microsoft Corporation) C:\Windows\system32\NFCProvisioningPlugin.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000097280 _____ (Microsoft Corporation) C:\Windows\system32\provdatastore.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\ProvPluginEng.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000088576 _____ (Microsoft Corporation) C:\Windows\system32\BarcodeProvisioningPlugin.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000084480 _____ (Microsoft Corporation) C:\Windows\system32\enterpriseresourcemanager.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000083968 _____ (Microsoft Corporation) C:\Windows\system32\wiarpc.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000083456 _____ (Microsoft Corporation) C:\Windows\system32\provtool.exe
2020-01-15 19:20 - 2020-01-15 19:20 - 000083456 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\enterpriseresourcemanager.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000066048 _____ (Microsoft Corporation) C:\Windows\system32\RemovableMediaProvisioningPlugin.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2020-01-15 19:20 - 2020-01-15 19:20 - 000033792 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Management.Provisioning.ProxyStub.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000018432 _____ (Microsoft Corporation) C:\Windows\system32\wiatrace.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wiatrace.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000010752 _____ (Microsoft Corporation) C:\Windows\system32\DMAlertListener.ProxyStub.dll
2020-01-15 19:20 - 2020-01-15 19:20 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DMAlertListener.ProxyStub.dll
2020-01-15 17:59 - 2020-01-15 17:59 - 000000305 _____ C:\Users\Admin\Downloads\Část_připojené_zprávy
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-02-14 17:34 - 2019-11-20 12:13 - 001693640 _____ C:\Windows\system32\PerfStringBackup.INI
2020-02-14 17:34 - 2019-03-19 12:55 - 000716944 _____ C:\Windows\system32\perfh005.dat
2020-02-14 17:34 - 2019-03-19 12:55 - 000145024 _____ C:\Windows\system32\perfc005.dat
2020-02-14 17:34 - 2019-03-19 05:50 - 000000000 ____D C:\Windows\INF
2020-02-14 17:31 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-02-14 17:29 - 2019-11-26 21:34 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-02-14 17:29 - 2019-11-26 21:33 - 000000000 ____D C:\Program Files (x86)\Opera
2020-02-14 17:29 - 2019-11-20 19:04 - 000807280 _____ C:\Windows\system32\wpbbin.exe
2020-02-14 17:29 - 2019-11-20 19:04 - 000768408 _____ C:\Windows\system32\AsusUpdateCheck.exe
2020-02-14 17:29 - 2019-11-20 19:04 - 000738920 _____ C:\Windows\system32\FNTCACHE.DAT
2020-02-14 17:29 - 2019-11-20 19:04 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-02-14 17:29 - 2019-11-20 12:16 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-02-14 17:29 - 2019-11-20 12:16 - 000000000 ___RD C:\Users\Admin\3D Objects
2020-02-14 17:29 - 2019-11-20 12:12 - 000000000 ____D C:\ProgramData\NVIDIA
2020-02-14 17:28 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\SysWOW64\oobe
2020-02-14 17:28 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\SysWOW64\Dism
2020-02-14 17:28 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\SystemResources
2020-02-14 17:28 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2020-02-14 17:28 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
2020-02-14 17:28 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\PerceptionSimulation
2020-02-14 17:28 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\oobe
2020-02-14 17:28 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\Dism
2020-02-14 17:28 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\AppReadiness
2020-02-14 17:28 - 2019-03-19 05:37 - 000524288 _____ C:\Windows\system32\config\BBI
2020-02-14 17:27 - 2019-03-19 05:52 - 000000000 ___RD C:\Windows\PrintDialog
2020-02-14 17:27 - 2019-03-19 05:52 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2020-02-14 17:27 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\ShellExperiences
2020-02-14 17:27 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\bcastdvr
2020-02-14 17:27 - 2019-03-19 05:37 - 000000000 ____D C:\Windows\servicing
2020-02-14 17:12 - 2019-11-20 12:18 - 000000000 ____D C:\Users\Admin\AppData\Local\PlaceholderTileLogoFolder
2020-02-14 17:12 - 2019-11-20 12:16 - 000000000 ____D C:\Users\Admin\AppData\Local\Packages
2020-02-14 17:12 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-02-14 17:11 - 2019-11-27 01:56 - 000000000 ____D C:\Users\Admin\AppData\LocalLow\Mozilla
2020-02-14 17:00 - 2019-11-20 19:04 - 000000000 ____D C:\Windows\system32\SleepStudy
2020-02-14 11:36 - 2019-03-19 05:37 - 000000000 ____D C:\Windows\CbsTemp
2020-02-14 11:35 - 2019-11-26 20:09 - 000000000 ____D C:\Windows\system32\MRT
2020-02-14 11:33 - 2019-11-26 20:09 - 120407888 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2020-02-13 22:19 - 2019-11-26 21:30 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-02-13 22:19 - 2019-11-26 21:30 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-02-13 18:00 - 2019-11-26 21:34 - 000001228 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-02-13 18:00 - 2019-11-26 21:34 - 000001216 _____ C:\Users\Public\Desktop\Firefox.lnk
2020-02-13 09:38 - 2019-11-26 21:49 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-02-09 22:55 - 2019-11-27 01:03 - 000000000 ____D C:\Users\Admin\AppData\Local\CrashDumps
2020-02-08 09:18 - 2019-11-20 12:18 - 000003376 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-722231672-965411127-3486821242-1001
2020-02-08 09:18 - 2019-11-20 12:18 - 000000000 ___RD C:\Users\Admin\OneDrive
2020-02-08 09:18 - 2019-11-20 12:15 - 000002361 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-02-07 11:44 - 2019-11-26 21:33 - 000003970 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1574800406
2020-02-07 11:44 - 2019-11-26 21:33 - 000001149 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prohlížeč Opera.lnk
2020-02-04 19:12 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\PolicyDefinitions
2020-02-04 09:55 - 2019-11-26 23:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2020-02-04 08:32 - 2019-11-26 21:30 - 000003474 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2020-02-04 08:32 - 2019-11-26 21:30 - 000003350 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2020-02-03 21:56 - 2019-03-19 05:56 - 000835688 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2020-02-03 21:56 - 2019-03-19 05:56 - 000179608 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2020-01-31 20:45 - 2019-11-26 20:17 - 000000000 ____D C:\ProgramData\Package Cache
2020-01-31 20:17 - 2020-01-09 17:21 - 000000000 ____D C:\Program Files (x86)\Office14
2020-01-31 20:17 - 2019-11-27 00:21 - 000001173 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Distiller 5.0.lnk
2020-01-31 19:47 - 2019-11-26 21:49 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2020-01-31 19:47 - 2019-11-26 21:49 - 000002124 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2020-01-31 19:28 - 2019-11-26 21:55 - 000000000 ____D C:\ProgramData\ABBYY
2020-01-31 16:59 - 2019-12-09 20:03 - 000000000 ____D C:\Users\Admin\AppData\Local\cache
2020-01-31 16:58 - 2019-03-19 05:52 - 000000000 ___HD C:\Windows\ELAMBKUP
2020-01-30 09:17 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\NDF
2020-01-27 21:43 - 2019-11-26 20:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2020-01-23 18:17 - 2019-03-19 05:52 - 000000000 ____D C:\Windows\system32\FxsTmp
2020-01-19 17:23 - 2019-11-27 00:25 - 000057378 _____ C:\Windows\ATMREG.ATM
2020-01-18 20:55 - 2019-11-20 12:15 - 000000000 ____D C:\Users\Admin
2020-01-15 19:39 - 2019-03-19 05:52 - 000000000 ___SD C:\Windows\system32\UNP
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================