VIRY.CZ

Zdravím, koukne se někdo na log z FRST? NTB se zasekává a je pomalý. Dnes jsem na něj hodil W10 stejný to bylo i při W8.
Vzhledem k velikosti logu je to vše v RARu.

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Přikládám log:



# AdwCleaner v5.030 - Logfile created 23/01/2016 at 18:31:28
# Updated 17/01/2016 by Xplode
# Database : 2016-01-19.2 [Server]
# Operating system : Windows 10 Home (x64)
# Username : Blein - ONDRA
# Running from : C:\Users\Blein\Desktop\adwcleaner_5.030.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\afterguard

***** [ Files ] *****

[-] File Deleted : C:\Users\Blein\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fbibhpbpkppfpcgopfbkokifpfiacdok
[-] File Deleted : C:\Users\Blein\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mbalnpbcmecdckpghgacibglihkgamkl_0.localstorage
[-] File Deleted : C:\Users\Blein\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mbalnpbcmecdckpghgacibglihkgamkl_0.localstorage-journal
[-] File Deleted : C:\Users\Blein\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mbalnpbcmecdckpghgacibglihkgamkl

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\fc3ea2bd-74e3-8f1a-f784-4ad9199b6fd7
[-] Key Deleted : HKCU\Software\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D14D64BC-A0E4-42E3-BB72-FB41EA43C198}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DD1F043F-ABC8-4643-8B95-D2C5B22BB019}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F3E8F9-F747-4DD6-BA6B-82A6CE1E0860}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ED0B64D4-BF27-4521-AD27-190F49BF5EA7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{023E9EC8-B147-40EB-B0B3-DF90618FB371}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0522D9A4-4D57-437D-978D-E5B3B6C9005D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{07F41522-AF7D-4F26-B394-094F059FDB8A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0C40F472-7407-4467-8914-1DEA7C326972}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{212E6D43-6062-492A-B8CC-144669FF11ED}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{224FE662-1E6D-4BC0-AEBB-9E2FB4057BE9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3A807417-B46D-4D37-8C9A-19AC6DE204F9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3CC60715-D6C5-429D-830E-43FA3F86C61D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4517D94C-19BA-46FA-BE66-2A30CEAC4A85}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{555D7146-94A8-4C94-AE76-C39CDC7F7705}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8120D9D6-785C-4413-9C0C-DF2028C56FAD}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{823AE2EB-E62C-4847-B192-C99B91B92416}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9B4F7CFE-987D-410E-A8E4-20182E0B3C24}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9B9A45F4-18FC-484A-BACA-076D78273D8E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A6D54287-7939-466A-8579-92546D946C8C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A78EDAFB-926F-4D93-AB13-8232D7378EB1}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKCU\Software\WEBAPP
[-] Key Deleted : HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
[-] Key Deleted : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
[-] Key Deleted : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
[-] Key Deleted : HKLM\SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
[-] Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
[-] Key Deleted : HKLM\SOFTWARE\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}

***** [ Web browsers ] *****

[-] [C:\Users\Blein\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : websearch
[-] [C:\Users\Blein\AppData\Local\Comodo\Dragon\User Data\Default\Web Data] [Search Provider] Deleted : WebSearch

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt - [4499 bytes] ##########

Dejte nový log FRST.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:18-01-2016
Ran by Blein (administrator) on ONDRA (23-01-2016 18:39:18)
Running from C:\Users\Blein\Desktop
Loaded Profiles: Blein (Available Profiles: Blein)
Platform: Windows 10 Home Version 1511 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
() C:\Program Files (x86)\Tor\tor.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Dritek System INC.) C:\Windows\RfBtnSvc64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10586.0_none_95e4f9a171a1ad95\TiWorker.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Microsoft Corporation) C:\Windows\SoftwareDistribution\Download\Install\AM_Delta_Patch_1.213.3963.0.exe
(Microsoft Corporation) C:\Windows\System32\MpSigStub.exe
(forum.viry.cz) C:\Users\Blein\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3242696 2015-10-07] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-21] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [LManager] => [X]
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.24.1
Tcpip\..\Interfaces\{410d8c1c-80f7-4575-af6a-2c0cbb0fc1b7}: [DhcpNameServer] 192.168.24.1
Tcpip\..\Interfaces\{c154a3cb-615c-46fc-bedb-082e0ef5b220}: [DhcpNameServer] 192.168.24.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
SearchScopes: HKLM-x32 -> DefaultScope {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll [2016-01-20] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll [2014-02-13] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll [2016-01-20] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll [2014-02-13] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @unity3d.com/UnityPlayer,version=1.0 -> C:\Program Files (x86)\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-08] (Unity Technologies ApS)

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.111\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.111\ppGoogleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.111\pdf.dll => No File
CHR Plugin: (Norton Confidential) - C:\Users\Blein\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.0.0.72_0\npcoplgn.dll => No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll => No File
CHR Profile: C:\Users\Blein\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Blein\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-23]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-08-21] (Advanced Micro Devices, Inc.) [File not signed]
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
S3 DeviceFastLaneService; C:\Program Files\Packard Bell\Packard Bell Device Fast-lane\DeviceFastLaneSvc.exe [468624 2012-08-23] (Acer Incorporated)
S3 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [658576 2012-08-23] (Acer Incorporated)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [144072 2015-10-07] (ELAN Microelectronics Corp.)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [75064 2015-04-09] ()
R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [93296 2012-09-10] (Dritek System INC.)
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [File not signed]
R2 tor; C:\Program Files (x86)\Tor\tor.exe [3233806 2013-08-29] () [File not signed] <==== ATTENTION
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-05-28] (Advanced Micro Devices)
S3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30352 2015-04-08] (Disc Soft Ltd)
R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2012-09-10] (Dritek System Inc.)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-01-23 18:39 - 2016-01-23 18:40 - 00009396 _____ C:\Users\Blein\Desktop\FRST.txt
2016-01-23 18:27 - 2016-01-23 18:31 - 00000000 ____D C:\AdwCleaner
2016-01-23 18:26 - 2016-01-23 18:27 - 01505280 _____ C:\Users\Blein\Desktop\adwcleaner_5.030.exe
2016-01-23 17:03 - 2016-01-23 17:03 - 00016645 _____ C:\Users\Blein\Desktop\Nový WinRAR archiv.rar
2016-01-23 17:02 - 2016-01-23 17:02 - 00000000 ____D C:\Users\Blein\Desktop\Nová složka
2016-01-23 16:05 - 2016-01-23 18:39 - 00000000 ____D C:\FRST
2016-01-23 16:03 - 2016-01-23 16:05 - 02370560 _____ (Farbar) C:\Users\Blein\Desktop\FRST64.exe
2016-01-23 16:03 - 2016-01-23 16:04 - 00112640 _____ (forum.viry.cz) C:\Users\Blein\Desktop\FRSTLauncher.exe
2016-01-23 15:32 - 2016-01-23 15:32 - 00002438 _____ C:\Users\Blein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-01-23 15:32 - 2016-01-23 15:32 - 00000000 ___RD C:\Users\Blein\OneDrive
2016-01-23 15:30 - 2016-01-23 15:30 - 00000000 ____D C:\ProgramData\ATI
2016-01-23 15:29 - 2016-01-23 15:29 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-01-23 15:25 - 2016-01-23 15:25 - 00000000 ____D C:\Users\Blein\AppData\Local\Publishers
2016-01-23 15:25 - 2016-01-23 15:25 - 00000000 ____D C:\Users\Blein\AppData\Local\ActiveSync
2016-01-23 15:23 - 2016-01-23 15:23 - 00000000 ____D C:\Users\Blein\AppData\Local\TileDataLayer
2016-01-23 15:23 - 2016-01-23 15:23 - 00000000 ____D C:\Users\Blein\AppData\Local\Comms
2016-01-23 15:22 - 2016-01-23 15:22 - 00000020 ___SH C:\Users\Blein\ntuser.ini
2016-01-23 13:33 - 2016-01-23 13:33 - 00000000 ____D C:\ProgramData\USOShared
2016-01-23 13:32 - 2016-01-23 13:32 - 00000000 _SHDL C:\Users\Default\Šablony
2016-01-23 13:32 - 2016-01-23 13:32 - 00000000 _SHDL C:\Users\Default\Soubory cookie
2016-01-23 13:32 - 2016-01-23 13:32 - 00000000 _SHDL C:\Users\Default\Poslední
2016-01-23 13:32 - 2016-01-23 13:32 - 00000000 _SHDL C:\Users\Default\Okolní tiskárny
2016-01-23 13:32 - 2016-01-23 13:32 - 00000000 _SHDL C:\Users\Default\Okolní síť
2016-01-23 13:32 - 2016-01-23 13:32 - 00000000 _SHDL C:\Users\Default\Nabídka Start
2016-01-23 13:32 - 2016-01-23 13:32 - 00000000 _SHDL C:\Users\Default\Dokumenty
2016-01-23 13:32 - 2016-01-23 13:32 - 00000000 _SHDL C:\Users\Default\Documents\Obrázky
2016-01-23 13:32 - 2016-01-23 13:32 - 00000000 _SHDL C:\Users\Default\Documents\Hudba
2016-01-23 13:32 - 2016-01-23 13:32 - 00000000 _SHDL C:\Users\Default\Documents\Filmy
2016-01-23 13:32 - 2016-01-23 13:32 - 00000000 _SHDL C:\Users\Default\Data aplikací
2016-01-23 13:32 - 2016-01-23 13:32 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2016-01-23 13:32 - 2016-01-23 13:32 - 00000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2016-01-23 13:32 - 2016-01-23 13:32 - 00000000 _SHDL C:\Users\Default User\Documents\Obrázky
2016-01-23 13:32 - 2016-01-23 13:32 - 00000000 _SHDL C:\Users\Default User\Documents\Hudba
2016-01-23 13:32 - 2016-01-23 13:32 - 00000000 _SHDL C:\Users\Default User\Documents\Filmy
2016-01-23 13:32 - 2016-01-23 13:32 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2016-01-23 13:32 - 2016-01-23 13:32 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Data aplikací
2016-01-23 13:27 - 2016-01-23 18:32 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-01-23 13:19 - 2016-01-23 18:39 - 01771468 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-23 13:08 - 2016-01-23 13:08 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-01-23 12:58 - 2016-01-23 12:58 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2016-01-23 12:56 - 2016-01-23 15:32 - 00000000 ____D C:\Users\Blein
2016-01-23 12:56 - 2016-01-23 12:56 - 00000000 _SHDL C:\Users\Blein\Šablony
2016-01-23 12:56 - 2016-01-23 12:56 - 00000000 _SHDL C:\Users\Blein\Soubory cookie
2016-01-23 12:56 - 2016-01-23 12:56 - 00000000 _SHDL C:\Users\Blein\Poslední
2016-01-23 12:56 - 2016-01-23 12:56 - 00000000 _SHDL C:\Users\Blein\Okolní tiskárny
2016-01-23 12:56 - 2016-01-23 12:56 - 00000000 _SHDL C:\Users\Blein\Okolní síť
2016-01-23 12:56 - 2016-01-23 12:56 - 00000000 _SHDL C:\Users\Blein\Nabídka Start
2016-01-23 12:56 - 2016-01-23 12:56 - 00000000 _SHDL C:\Users\Blein\Dokumenty
2016-01-23 12:56 - 2016-01-23 12:56 - 00000000 _SHDL C:\Users\Blein\Documents\Obrázky
2016-01-23 12:56 - 2016-01-23 12:56 - 00000000 _SHDL C:\Users\Blein\Documents\Hudba
2016-01-23 12:56 - 2016-01-23 12:56 - 00000000 _SHDL C:\Users\Blein\Documents\Filmy
2016-01-23 12:56 - 2016-01-23 12:56 - 00000000 _SHDL C:\Users\Blein\Data aplikací
2016-01-23 12:56 - 2016-01-23 12:56 - 00000000 _SHDL C:\Users\Blein\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2016-01-23 12:56 - 2016-01-23 12:56 - 00000000 _SHDL C:\Users\Blein\AppData\Local\Data aplikací
2016-01-23 12:51 - 2016-01-23 12:59 - 00000000 ____D C:\ProgramData\AMD
2016-01-23 12:51 - 2016-01-23 12:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2016-01-23 12:51 - 2016-01-23 12:51 - 00000000 ____D C:\ProgramData\Package Cache
2016-01-23 12:51 - 2016-01-23 12:51 - 00000000 ____D C:\Program Files\ATI Technologies
2016-01-23 12:51 - 2016-01-23 12:51 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2016-01-23 12:50 - 2016-01-23 12:50 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2016-01-23 12:50 - 2016-01-23 12:50 - 00000000 ____D C:\Program Files\Realtek
2016-01-23 12:50 - 2016-01-23 12:50 - 00000000 _____ C:\WINDOWS\ativpsrm.bin
2016-01-23 12:49 - 2016-01-23 12:50 - 00000000 ____D C:\Program Files\AMD
2016-01-23 12:49 - 2016-01-23 12:49 - 00000000 ____D C:\Program Files\Elantech
2016-01-23 12:48 - 2015-10-30 08:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2016-01-23 12:44 - 2016-01-23 13:12 - 00365952 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-01-23 12:43 - 2016-01-23 15:22 - 00000000 ___DC C:\WINDOWS\Panther
2016-01-23 12:34 - 2016-01-23 12:34 - 00000000 ____D C:\Windows.old
2016-01-23 12:31 - 2016-01-23 12:31 - 24601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 19339264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 13381120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 07826432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 04894720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2016-01-23 12:31 - 2016-01-23 12:31 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2016-01-23 12:31 - 2016-01-23 12:31 - 02587696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 02180128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 02152800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-01-23 12:31 - 2016-01-23 12:31 - 02126848 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-01-23 12:31 - 2016-01-23 12:31 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-01-23 12:31 - 2016-01-23 12:31 - 01817160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 01540768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL
2016-01-23 12:31 - 2016-01-23 12:31 - 01155944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 01092456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL
2016-01-23 12:31 - 2016-01-23 12:31 - 01065080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 01020096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00983464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00931328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2016-01-23 12:31 - 2016-01-23 12:31 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00898184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00890880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL
2016-01-23 12:31 - 2016-01-23 12:31 - 00884256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2016-01-23 12:31 - 2016-01-23 12:31 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00858952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00848160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00823264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00794888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00786696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL
2016-01-23 12:31 - 2016-01-23 12:31 - 00785088 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00716928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00701384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00695752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL
2016-01-23 12:31 - 2016-01-23 12:31 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00671472 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00670928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00652312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2016-01-23 12:31 - 2016-01-23 12:31 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00536768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00526856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00462760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00450904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00408128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00405048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2016-01-23 12:31 - 2016-01-23 12:31 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2016-01-23 12:31 - 2016-01-23 12:31 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2016-01-23 12:31 - 2016-01-23 12:31 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00337840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2016-01-23 12:31 - 2016-01-23 12:31 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2016-01-23 12:31 - 2016-01-23 12:31 - 00289248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00245840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2016-01-23 12:31 - 2016-01-23 12:31 - 00234504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-01-23 12:31 - 2016-01-23 12:31 - 00208176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00119320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL
2016-01-23 12:31 - 2016-01-23 12:31 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2016-01-23 12:31 - 2016-01-23 12:31 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00100160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL
2016-01-23 12:31 - 2016-01-23 12:31 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMSRoamingSecurity.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll
2016-01-23 12:31 - 2016-01-23 12:31 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2016-01-23 12:30 - 2016-01-23 12:31 - 21125408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 22572632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 16986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 07477600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 03993600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-01-23 12:30 - 2016-01-23 12:30 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 02772584 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 02653816 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 02598400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 02185840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 02121216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 02026736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01995776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01859448 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01804664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01648640 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01594408 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 01505280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-01-23 12:30 - 2016-01-23 12:30 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01371792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-01-23 12:30 - 2016-01-23 12:30 - 01309376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01281376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01141496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01035776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxNetApiSvc.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 01009152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL
2016-01-23 12:30 - 2016-01-23 12:30 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00973664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00900608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00808800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00796352 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00683008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00644096 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-01-23 12:30 - 2016-01-23 12:30 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00558592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2016-01-23 12:30 - 2016-01-23 12:30 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00499432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00472576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00440160 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 00431232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 00412512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00264544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommon.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-01-23 12:30 - 2016-01-23 12:30 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2016-01-23 12:30 - 2016-01-23 12:30 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
2016-01-23 12:30 - 2016-01-23 12:30 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2016-01-23 12:30 - 2016-01-23 12:30 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommon.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
2016-01-23 12:30 - 2016-01-23 12:30 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-01-23 12:30 - 2016-01-23 12:30 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2016-01-23 12:30 - 2016-01-23 12:30 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00051680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundTransferHost.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2016-01-23 12:30 - 2016-01-23 12:30 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usermgrcli.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2016-01-23 12:30 - 2016-01-23 12:30 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2016-01-23 12:30 - 2016-01-23 12:30 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2016-01-23 12:22 - 2016-01-23 12:22 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2016-01-23 12:18 - 2016-01-23 12:18 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2016-01-23 12:18 - 2016-01-23 12:18 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-01-23 12:18 - 2016-01-23 12:18 - 00000000 ____D C:\Program Files\MSBuild
2016-01-23 12:18 - 2016-01-23 12:18 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-01-23 12:18 - 2016-01-23 12:18 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-01-23 12:17 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2016-01-23 12:17 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-01-23 12:17 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2016-01-23 12:17 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-01-23 12:17 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2016-01-23 12:17 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-01-23 11:08 - 2016-01-23 11:08 - 00001160 ____H C:\Users\Blein\Downloads\$$JetTHM$$.cache
2016-01-23 10:54 - 2016-01-23 10:59 - 766353408 _____ C:\Users\Blein\Downloads\Vanocní prazdniny.avi

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-01-23 18:39 - 2015-10-30 19:31 - 00751272 _____ C:\WINDOWS\system32\perfh005.dat
2016-01-23 18:39 - 2015-10-30 19:31 - 00150860 _____ C:\WINDOWS\system32\perfc005.dat
2016-01-23 18:39 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2016-01-23 18:36 - 2014-11-08 20:41 - 00004192 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{44B4CEEE-0356-4CCE-B148-4C9992F7D925}
2016-01-23 18:34 - 2015-05-17 01:42 - 00000968 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-23 18:33 - 2015-02-25 13:14 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-01-23 18:32 - 2015-10-30 07:28 - 00000000 ____D C:\Windows
2016-01-23 18:31 - 2015-10-30 07:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-01-23 18:18 - 2015-02-25 13:14 - 00000892 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-01-23 17:43 - 2015-05-17 01:42 - 00000972 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-01-23 17:34 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-01-23 17:34 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-01-23 17:29 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-01-23 15:55 - 2012-12-06 21:32 - 00000000 ____D C:\Users\Blein\AppData\Local\Packages
2016-01-23 15:44 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2016-01-23 15:24 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2016-01-23 15:24 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PrintDialog
2016-01-23 15:24 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\MiracastView
2016-01-23 15:24 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-01-23 15:23 - 2012-12-07 12:26 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-01-23 13:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache
2016-01-23 13:33 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\USOPrivate
2016-01-23 13:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2016-01-23 13:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration
2016-01-23 13:32 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows NT
2016-01-23 13:31 - 2015-10-30 07:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-01-23 13:31 - 2014-11-08 16:35 - 00034293 _____ C:\WINDOWS\diagwrn.xml
2016-01-23 13:31 - 2014-11-08 16:35 - 00034293 _____ C:\WINDOWS\diagerr.xml
2016-01-23 13:27 - 2015-02-25 13:14 - 00003190 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-01-23 13:27 - 2015-02-25 13:14 - 00002982 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-01-23 13:27 - 2015-02-25 13:11 - 00003070 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1424866245
2016-01-23 13:27 - 2015-02-16 16:49 - 00003824 _____ C:\WINDOWS\System32\Tasks\XLBFB
2016-01-23 13:27 - 2014-11-08 17:12 - 00023020 _____ C:\WINDOWS\system32\emptyregdb.dat
2016-01-23 13:27 - 2014-08-29 19:14 - 00002002 _____ C:\WINDOWS\System32\Tasks\{81E09979-8148-4FBF-835C-C8608D9585DF}
2016-01-23 13:27 - 2013-06-17 07:15 - 00002260 _____ C:\WINDOWS\System32\Tasks\AdobeFlashPlayerUpdate
2016-01-23 13:27 - 2013-06-17 07:15 - 00002108 _____ C:\WINDOWS\System32\Tasks\AdobeFlashPlayerUpdate 2
2016-01-23 13:27 - 2013-05-31 07:59 - 00003436 _____ C:\WINDOWS\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1874444352-3692443226-4061859067-1001UA
2016-01-23 13:27 - 2013-05-31 07:59 - 00003194 _____ C:\WINDOWS\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1874444352-3692443226-4061859067-1001Core
2016-01-23 13:27 - 2013-02-10 20:46 - 00002036 _____ C:\WINDOWS\System32\Tasks\{614B69E9-61AE-431A-8AE3-BB39E96DE56D}
2016-01-23 13:27 - 2012-12-06 21:44 - 00003340 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-01-23 13:27 - 2012-12-06 21:44 - 00003112 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-01-23 13:27 - 2012-12-06 21:41 - 00002812 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1874444352-3692443226-4061859067-1001
2016-01-23 13:27 - 2012-09-10 20:29 - 00002838 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1874444352-3692443226-4061859067-500
2016-01-23 13:27 - 2012-08-03 13:31 - 00002172 _____ C:\WINDOWS\System32\Tasks\Power Management
2016-01-23 13:27 - 2012-08-03 13:28 - 00003600 _____ C:\WINDOWS\System32\Tasks\ALUAgent
2016-01-23 13:27 - 2012-08-03 13:28 - 00002874 _____ C:\WINDOWS\System32\Tasks\ALU
2016-01-23 13:18 - 2015-10-30 08:24 - 00000000 __RHD C:\Users\Public\Libraries
2016-01-23 13:11 - 2012-08-03 13:20 - 00000000 ____D C:\WINDOWS\SysWOW64\Atheros_L1e
2016-01-23 13:10 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Help
2016-01-23 13:10 - 2014-10-20 12:57 - 00000000 ____D C:\Users\Blein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ
2016-01-23 13:10 - 2014-09-10 19:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-01-23 13:10 - 2014-06-03 21:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-01-23 13:10 - 2014-01-18 15:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SketchUp 2013
2016-01-23 13:10 - 2013-12-27 01:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alcohol 120%
2016-01-23 13:10 - 2013-05-06 17:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2016-01-23 13:10 - 2013-02-10 10:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PrintMe Internet Printing
2016-01-23 13:10 - 2013-02-10 09:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat 4.0
2016-01-23 13:10 - 2013-02-03 12:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2016-01-23 13:10 - 2013-02-03 12:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kodek CZ
2016-01-23 13:10 - 2012-12-23 22:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\jetAudio
2016-01-23 13:10 - 2012-12-13 15:23 - 00000000 ____D C:\Users\Blein\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-01-23 13:10 - 2012-12-13 15:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-01-23 13:10 - 2012-12-06 21:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2016-01-23 13:10 - 2012-08-03 13:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Packard Bell
2016-01-23 13:09 - 2013-08-22 14:36 - 00000000 ____D C:\Users\Default.migrated
2016-01-23 13:03 - 2015-10-30 19:31 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2016-01-23 13:03 - 2015-10-30 19:31 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2016-01-23 13:03 - 2015-10-30 19:31 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2016-01-23 13:03 - 2015-10-30 19:31 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2016-01-23 13:03 - 2015-10-30 19:31 - 00000000 ____D C:\WINDOWS\system32\winrm
2016-01-23 13:03 - 2015-10-30 19:31 - 00000000 ____D C:\WINDOWS\system32\WCN
2016-01-23 13:03 - 2015-10-30 19:31 - 00000000 ____D C:\WINDOWS\system32\slmgr
2016-01-23 13:03 - 2015-10-30 19:31 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2016-01-23 13:03 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2016-01-23 13:03 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2016-01-23 13:03 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2016-01-23 13:03 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2016-01-23 13:03 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE
2016-01-23 13:03 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2016-01-23 13:03 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-01-23 13:03 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\spool
2016-01-23 13:03 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-01-23 13:03 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2016-01-23 13:03 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2016-01-23 13:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-01-23 13:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2016-01-23 13:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2016-01-23 13:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2016-01-23 13:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\IME
2016-01-23 13:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\et-EE
2016-01-23 13:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\en-GB
2016-01-23 13:00 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\ShellNew
2016-01-23 13:00 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files
2016-01-23 13:00 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-01-23 13:00 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\InputMethod
2016-01-23 13:00 - 2014-10-29 23:25 - 00000000 ____D C:\WINDOWS\system32\AutoUpdateLicense
2016-01-23 13:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2016-01-23 12:59 - 2015-10-30 19:35 - 00000000 ____D C:\Program Files\Windows Journal
2016-01-23 12:59 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-01-23 12:59 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-01-23 12:59 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-01-23 12:59 - 2015-02-16 17:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Softendo.com
2016-01-23 12:59 - 2014-09-24 20:02 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Embedded Lockdown Manager
2016-01-23 12:59 - 2013-10-13 10:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes
2016-01-23 12:59 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\ADFS
2016-01-23 12:59 - 2013-03-23 18:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hasbro Interactive
2016-01-23 12:59 - 2013-02-18 22:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Return to Castle Wolfenstein
2016-01-23 12:59 - 2012-09-10 19:43 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2016-01-23 12:59 - 2012-08-03 13:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2016-01-23 12:59 - 2012-08-03 13:24 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-01-23 12:59 - 2012-08-03 13:19 - 00000000 ____D C:\ProgramData\PRICache
2016-01-23 12:54 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-01-23 12:50 - 2014-11-08 16:18 - 00000000 ____D C:\AMD
2016-01-23 12:45 - 2015-10-30 19:41 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2016-01-23 12:43 - 2015-10-30 08:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2016-01-23 12:33 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-01-23 12:33 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2016-01-23 12:33 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-01-23 12:33 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-01-23 12:33 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-01-23 12:18 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2016-01-23 12:18 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\MUI
2016-01-23 11:42 - 2015-10-30 20:11 - 00000000 ___HD C:\$WINDOWS.~BT
2016-01-22 21:00 - 2015-02-06 09:00 - 00000000 ____D C:\Users\Blein\AppData\Local\PokerStars.EU
2016-01-22 20:58 - 2012-08-03 13:20 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-01-22 20:56 - 2015-07-13 16:17 - 00000000 ____D C:\Users\Blein\AppData\Roaming\21Dukes
2016-01-22 19:43 - 2012-12-07 15:00 - 04793856 ___SH C:\Users\Blein\Downloads\Thumbs.db
2016-01-22 19:41 - 2014-01-09 22:59 - 00000000 ____D C:\Users\Blein\Downloads\south park
2016-01-22 19:39 - 2012-12-13 18:59 - 04060160 ___SH C:\Users\Blein\Desktop\Thumbs.db
2016-01-20 23:23 - 2013-12-01 16:54 - 00059392 _____ C:\Users\Blein\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-01-14 22:13 - 2014-04-07 15:13 - 00002308 ____H C:\Users\Blein\Desktop\$$JetTHM$$.cache
2016-01-13 13:21 - 2013-08-04 00:19 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-01-13 13:12 - 2012-12-28 16:20 - 143671360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-01-09 11:40 - 2013-05-06 17:30 - 00137104 _____ C:\Users\Blein\AppData\Local\GDIPFONTCACHEV1.DAT
2016-01-03 02:40 - 2015-10-30 08:26 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-01-03 02:40 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======

2015-01-25 17:12 - 2015-01-25 17:12 - 0001248 _____ () C:\Users\Blein\AppData\Roaming\XLBFB
2013-12-01 16:54 - 2016-01-20 23:23 - 0059392 _____ () C:\Users\Blein\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-02-15 15:36 - 2013-02-15 15:36 - 0000017 _____ () C:\Users\Blein\AppData\Local\resmon.resmoncfg

Some files in TEMP:
====================
C:\Users\Blein\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_20_0_0_286_pepper.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Blein\Desktop" je 4 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite
"C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDVCPL
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [x]


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]


==================== End Of Log ==============================

addition:


Additional scan result of Farbar Recovery Scan Tool (x64) Version:18-01-2016
Ran by Blein (2016-01-23 18:42:34)
Running from C:\Users\Blein\Desktop
Windows 10 Home (X64) (2016-01-23 14:22:16)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1874444352-3692443226-4061859067-500 - Administrator - Disabled)
Blein (S-1-5-21-1874444352-3692443226-4061859067-1001 - Administrator - Enabled) => C:\Users\Blein
DefaultAccount (S-1-5-21-1874444352-3692443226-4061859067-503 - Limited - Disabled)
Guest (S-1-5-21-1874444352-3692443226-4061859067-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1874444352-3692443226-4061859067-1006 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat 4.0 (HKLM-x32\...\Adobe Acrobat 4.0) (Version: 4.0 - Adobe Systems, Inc.)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.286 - Adobe Systems Incorporated)
Adobe Flash Player 20 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 20.0.0.286 - Adobe Systems Incorporated)
Adobe Reader 6.0 CE (HKLM-x32\...\{AC76BA86-7AD7-1029-7646-CE0000000001}) (Version: 6.0 - Adobe Systems Incorporated)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
AMD Catalyst Install Manager (HKLM\...\{DDC218E1-E342-62E5-EDE9-4838A6574085}) (Version: 8.0.881.0 - Advanced Micro Devices, Inc.)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.6 - Atheros Communications Inc.)
Call of Duty(R) 2 Patch 1.3 (x32 Version: 1.3 - ) Hidden
ELAN Touchpad 11.15.0.18_X64 (HKLM\...\Elantech) (Version: 11.15.0.18 - ELAN Microelectronic Corp.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.111 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3004 - Packard Bell)
jetAudio Basic VX (HKLM-x32\...\{DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}) (Version: 8.0.16 - COWON)
K-Lite Mega Codec Pack 9.7.0 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 9.7.0 - )
Kodek 0.16 CZ (HKLM-x32\...\{6C28B15F-B09D-407E-BE92-AC928E1CE4E2}_is1) (Version: 0.16 - Pinky.cz)
Launch Manager (HKLM-x32\...\LManager) (Version: 7.0.4 - Packard Bell)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3003 - Packard Bell)
Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110405-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.5614.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Nero 12 Essentials OEM.a01 (HKLM-x32\...\{9BF0D9FE-9893-4647-81B9-17B7BEA4E6FD}) (Version: 12.5.00000 - Nero AG)
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{B2B0EC73-AD4A-4716-A3DE-CEA8440B309B}) (Version: 12.5.00000 - Nero AG)
NetBet Poker (HKU\S-1-5-21-1874444352-3692443226-4061859067-1001\...\Netbet Poker) (Version: - )
Ogg Vorbis ACM Codec (HKLM-x32\...\VorbisCodec) (Version: - )
Packard Bell Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3007 - Packard Bell)
Packard Bell Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3006 - Packard Bell)
Packard Bell Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3011 - Packard Bell)
Prerequisite installer (x32 Version: 12.0.0002 - Nero AG) Hidden
Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.05 - Qualcomm Atheros)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6657 - Realtek Semiconductor Corp.)
SketchUp 2013 (HKLM-x32\...\{B75BC01B-4586-43F8-9349-D250DB98F26F}) (Version: 13.0.4812 - Trimble Navigation Limited)
Skype™ 6.18 (HKLM-x32\...\{1845470B-EB14-4ABC-835B-E36C693DC07D}) (Version: 6.18.105 - Skype Technologies S.A.)
Winner Poker (HKU\S-1-5-21-1874444352-3692443226-4061859067-1001\...\winnerpoker) (Version: - )
WinRAR 4.11 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.11.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1874444352-3692443226-4061859067-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Blein\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0CFE2E40-6A97-48C5-9F38-DE82315CF1B0} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {2830CE46-2036-4A2D-B967-12220BDD7A45} - System32\Tasks\{81E09979-8148-4FBF-835C-C8608D9585DF} => pcalua.exe -a E:\AOESETUP.EXE -d E:\ -c /autorun
Task: {29B922BB-C0C2-465B-ABCD-BF0A74018A6D} - System32\Tasks\AdobeFlashPlayerUpdate 2 => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe
Task: {2AA7A3FD-46EC-4A76-AD92-37D53C008AD2} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1874444352-3692443226-4061859067-1001Core => C:\Users\Blein\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: {2AA9ED78-4096-4FD0-8532-CBC6C9C93905} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {43DFED1D-76BD-4D87-92FB-1984C4E7FC51} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_20_0_0_286_pepper.exe [2016-01-20] (Adobe Systems Incorporated)
Task: {49C749C7-616F-4684-99BB-253AD5352329} - System32\Tasks\Power Management => C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [2012-08-23] (Acer Incorporated)
Task: {49ED0D28-0818-43AD-8E04-138401378393} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {56D493E3-0CD7-470E-AA9A-8B88CD079B9E} - System32\Tasks\AdobeFlashPlayerUpdate => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe
Task: {5BEE827C-42EE-4B6A-AC69-611AE9F3BE24} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Packard Bell\Live Updater\liveupdater_agent.exe [2012-06-22] ()
Task: {676246E8-01FD-4BF8-B755-1119AB9A7D4C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {74B160AB-2AAF-4452-B1F9-2205D1845D67} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {7597383B-D019-42A8-A11A-56F491459035} - System32\Tasks\Opera scheduled Autoupdate 1424866245 => C:\Program Files (x86)\Opera\launcher.exe
Task: {768056F7-98A7-4ADA-ACB3-C71A05EBC5B5} - System32\Tasks\ALU => C:\Program Files (x86)\Packard Bell\Live Updater\updater.exe [2012-08-24] ()
Task: {77304B3C-94D5-4624-9078-27035620C1E3} - System32\Tasks\XLBFB => C:\Users\Blein\AppData\Roaming\XLBFB.exe <==== ATTENTION
Task: {7D012BBF-7827-43DF-BC6D-83E778DBC0AB} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {82878150-7CFF-4600-91F0-402C56A47773} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-01-13] (Microsoft Corporation)
Task: {8C1A7107-A289-4315-9F43-41F90EC145D4} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {92A5BDAD-E997-447D-AC4B-BC515A880B78} - System32\Tasks\{614B69E9-61AE-431A-8AE3-BB39E96DE56D} => pcalua.exe -a F:\AutoRun.exe -d F:\
Task: {992AD43D-CE22-42A9-8644-6F5CD74E41AB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {A0C16FA4-2B19-4CD0-B000-C067232A8C37} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {A2BB195D-4792-4BCD-9B99-B40B8BAA8607} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {A3A72341-EC70-49D5-BCED-2905DEDC20EC} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {A5E9CDD9-7F04-481E-B8AE-E422DD7A9446} - \Microsoft\Windows\Setup\GWXTriggers\Logon-URT -> No File <==== ATTENTION
Task: {AB377E3C-933D-4633-B6C3-FCCF8C76BA98} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-20] (Adobe Systems Incorporated)
Task: {C7AFA996-A54D-456E-8C2A-3F3B5F7FB5EA} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {D00CD0B9-7ADA-4BFA-863B-2FA4A0105DE7} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {D27B55DE-8773-435D-AA33-CB75914F2D64} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {DE85E1BA-4020-49AD-8D07-CA162765B1A4} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {E50004E0-C75B-4BEC-A6D1-92126A664AA5} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1874444352-3692443226-4061859067-1001UA => C:\Users\Blein\AppData\Local\Facebook\Update\FacebookUpdate.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_20_0_0_286_pepper.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

Otevřte poznámkový blok a zkopírujte do něj:

Start
Task: {2AA9ED78-4096-4FD0-8532-CBC6C9C93905} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {49ED0D28-0818-43AD-8E04-138401378393} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {74B160AB-2AAF-4452-B1F9-2205D1845D67} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {77304B3C-94D5-4624-9078-27035620C1E3} - System32\Tasks\XLBFB => C:\Users\Blein\AppData\Roaming\XLBFB.exe <==== ATTENTION
Task: {7D012BBF-7827-43DF-BC6D-83E778DBC0AB} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {8C1A7107-A289-4315-9F43-41F90EC145D4} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {A0C16FA4-2B19-4CD0-B000-C067232A8C37} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {A2BB195D-4792-4BCD-9B99-B40B8BAA8607} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {A3A72341-EC70-49D5-BCED-2905DEDC20EC} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {A5E9CDD9-7F04-481E-B8AE-E422DD7A9446} - \Microsoft\Windows\Setup\GWXTriggers\Logon-URT -> No File <==== ATTENTION
Task: {C7AFA996-A54D-456E-8C2A-3F3B5F7FB5EA} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {D00CD0B9-7ADA-4BFA-863B-2FA4A0105DE7} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {D27B55DE-8773-435D-AA33-CB75914F2D64} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {DE85E1BA-4020-49AD-8D07-CA162765B1A4} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {E50004E0-C75B-4BEC-A6D1-92126A664AA5} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1874444352-3692443226-4061859067-1001UA => C:\Users\Blein\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
HKLM-x32\...\Run: [LManager] => [X]
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
SearchScopes: HKLM-x32 -> DefaultScope {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.111\ppGoogleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.111\pdf.dll => No File
CHR Plugin: (Norton Confidential) - C:\Users\Blein\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.0.0.72_0\npcoplgn.dll => No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll => No File
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\Blein\AppData\Roaming\XLBFB
C:\Users\Blein\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
C:\Users\Blein\AppData\Local\Temp
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version:18-01-2016
Ran by Blein (2016-01-23 20:51:47) Run:1
Running from C:\Users\Blein\Desktop
Loaded Profiles: Blein (Available Profiles: Blein)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
Task: {2AA9ED78-4096-4FD0-8532-CBC6C9C93905} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {49ED0D28-0818-43AD-8E04-138401378393} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {74B160AB-2AAF-4452-B1F9-2205D1845D67} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {77304B3C-94D5-4624-9078-27035620C1E3} - System32\Tasks\XLBFB => C:\Users\Blein\AppData\Roaming\XLBFB.exe <==== ATTENTION
Task: {7D012BBF-7827-43DF-BC6D-83E778DBC0AB} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {8C1A7107-A289-4315-9F43-41F90EC145D4} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {A0C16FA4-2B19-4CD0-B000-C067232A8C37} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {A2BB195D-4792-4BCD-9B99-B40B8BAA8607} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {A3A72341-EC70-49D5-BCED-2905DEDC20EC} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {A5E9CDD9-7F04-481E-B8AE-E422DD7A9446} - \Microsoft\Windows\Setup\GWXTriggers\Logon-URT -> No File <==== ATTENTION
Task: {C7AFA996-A54D-456E-8C2A-3F3B5F7FB5EA} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {D00CD0B9-7ADA-4BFA-863B-2FA4A0105DE7} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {D27B55DE-8773-435D-AA33-CB75914F2D64} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {DE85E1BA-4020-49AD-8D07-CA162765B1A4} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {E50004E0-C75B-4BEC-A6D1-92126A664AA5} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1874444352-3692443226-4061859067-1001UA => C:\Users\Blein\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
HKLM-x32\...\Run: [LManager] => [X]
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
SearchScopes: HKLM-x32 -> DefaultScope {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.111\ppGoogleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.111\pdf.dll => No File
CHR Plugin: (Norton Confidential) - C:\Users\Blein\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.0.0.72_0\npcoplgn.dll => No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll => No File
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\Blein\AppData\Roaming\XLBFB
C:\Users\Blein\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
C:\Users\Blein\AppData\Local\Temp
End
*****************

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2AA9ED78-4096-4FD0-8532-CBC6C9C93905}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2AA9ED78-4096-4FD0-8532-CBC6C9C93905}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{49ED0D28-0818-43AD-8E04-138401378393}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49ED0D28-0818-43AD-8E04-138401378393}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{74B160AB-2AAF-4452-B1F9-2205D1845D67}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{74B160AB-2AAF-4452-B1F9-2205D1845D67}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{77304B3C-94D5-4624-9078-27035620C1E3}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{77304B3C-94D5-4624-9078-27035620C1E3}" => key removed successfully
C:\WINDOWS\System32\Tasks\XLBFB => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\XLBFB" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7D012BBF-7827-43DF-BC6D-83E778DBC0AB}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7D012BBF-7827-43DF-BC6D-83E778DBC0AB}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8C1A7107-A289-4315-9F43-41F90EC145D4}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8C1A7107-A289-4315-9F43-41F90EC145D4}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A0C16FA4-2B19-4CD0-B000-C067232A8C37}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A0C16FA4-2B19-4CD0-B000-C067232A8C37}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A2BB195D-4792-4BCD-9B99-B40B8BAA8607}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A2BB195D-4792-4BCD-9B99-B40B8BAA8607}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A3A72341-EC70-49D5-BCED-2905DEDC20EC}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A3A72341-EC70-49D5-BCED-2905DEDC20EC}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A5E9CDD9-7F04-481E-B8AE-E422DD7A9446}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A5E9CDD9-7F04-481E-B8AE-E422DD7A9446}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-URT" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C7AFA996-A54D-456E-8C2A-3F3B5F7FB5EA}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C7AFA996-A54D-456E-8C2A-3F3B5F7FB5EA}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D00CD0B9-7ADA-4BFA-863B-2FA4A0105DE7}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D00CD0B9-7ADA-4BFA-863B-2FA4A0105DE7}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D27B55DE-8773-435D-AA33-CB75914F2D64}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D27B55DE-8773-435D-AA33-CB75914F2D64}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DE85E1BA-4020-49AD-8D07-CA162765B1A4}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DE85E1BA-4020-49AD-8D07-CA162765B1A4}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E50004E0-C75B-4BEC-A6D1-92126A664AA5}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E50004E0-C75B-4BEC-A6D1-92126A664AA5}" => key removed successfully
C:\WINDOWS\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1874444352-3692443226-4061859067-1001UA => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FacebookUpdateTaskUserS-1-5-21-1874444352-3692443226-4061859067-1001UA" => key removed successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\LManager => value removed successfully
"HKLM\SOFTWARE\Policies\Google" => key removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
CHR dev: Chrome dev build detected! <======= ATTENTION => Error: No automatic fix found for this entry.
C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.111\ppGoogleNaClPluginChrome.dll => not found.
C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.111\pdf.dll => not found.
C:\Users\Blein\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.0.0.72_0\npcoplgn.dll => not found.
C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll => not found.
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
C:\Users\Blein\AppData\Roaming\XLBFB => moved successfully
C:\Users\Blein\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully
C:\Users\Blein\AppData\Local\Temp => moved successfully

==== End of Fixlog 20:51:52 ====

Smazáno. Nastala nějaká změna?