VIRY.CZ

Zdravím. Som tu úplne nováčik. Potreboval by som pomôcť s mojím ntb. Predvčerom som si ho nechtiac infikoval rôznymi breberkami, keď som si stiahol a nainštaloval z oficiálnej stránky SW Audiograbber. Až po inštalácii sa mi začal hlásiť Defender vo W10. Vedel som, že už je nedobre. Povyskakovali mi rôzne pop-up okná na ploche, menili sa nastavenia browsera Edge, nainštaloval sa kadejaký SW v čínštine; skoro všetko bolo písané čínsky. Na ploche samé vyskakovacie reklamy. Defender niečo našiel, neskôr som odpojil net a začal som manuálne odinštalovávať čo viem, že by to tam byť nemalo. Neskôr som stiahol ESET online scanner, ten našiel asi 65 potvoriek, neskôr MBAM - niečo cez 70 potvoriek. Dnes mi tiež niečo našiel Defender - nejaky BrowserModifier/Win32:Sasquor a MBAM okolo 10 PUP. Vytvoril som log z RSIT a uvidíme ako poradíte ďalej. Mám keby niečo aj log z toho ESET online skener.
PS: neviem prečo sa moje konto volá: eduar

Logfile of random's system information tool 1.10 (written by random/random)
Run by eduar at 2016-04-12 08:58:12
Microsoft Windows 10 Pro
System drive C: has 130 GB (76%) free of 171 GB
Total RAM: 7021 MB (76% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:58:15, on 12.04.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Users\eduar\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\trend micro\eduar.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID= ... BC24FCAC37
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID= ... BC24FCAC37
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [apphide] C:\Program Files (x86)\badu\uc.exe
O4 - HKCU\..\Run: [OneDrive] "C:\Users\eduar\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [msiql] c:\programdata\msiql.exe /RUNNING
O4 - HKCU\..\Run: [testLive] c:\programdata\testlive.exe /RUNNING
O4 - HKCU\..\Run: [apphide] C:\Program Files (x86)\badu\uc.exe
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Global Startup: SRS Premium Sound.lnk = ?
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Od&oslať do programu OneNote - res://C:\PROGRA~1\MICROS~1\Office16\ONBttnIE.dll/105
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{3fa29aad-1033-43eb-8048-46878ce844ee}: NameServer = 156.154.70.25,156.154.71.25
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
O23 - Service: ASNB4LDRSvc Service (ASNB4LDRSvc) - ASUS - C:\Program Files (x86)\ASUS\Wireless Console 3\ASNB4LDRSvc.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Elan Service (ETDService) - ELAN Microelectronics Corp. - C:\Program Files\Elantech\ETDService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Update Manager (iumsvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7648 bytes

======Listing Processes======

C:\WINDOWS\system32\lsass.exe
winlogon.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k NetworkService
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
C:\WINDOWS\System32\spoolsv.exe
"C:\Program Files (x86)\ASUS\Wireless Console 3\ASNB4LDRSvc.exe"
C:\WINDOWS\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe"
"C:\Program Files\Elantech\ETDService.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe"
C:\WINDOWS\system32\svchost.exe -k appmodel
C:\WINDOWS\system32\svchost.exe -k imgsvc

dashost.exe {669eecaf-0bf9-45a7-a1d8ed1acd9bf8fd}

"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
sihost.exe
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files\ASUS\P4G\BatteryLife.exe"
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe" /starttray
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Windows\System32\hkcmd.exe"
"C:\Users\eduar\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe" /f=srs_premium_sound_nopreset.zip /h
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files\Windows Defender\MSASCui.exe"
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files\Windows Defender\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey 12610D89-630F-1267-0271-B9856ADB3E43 -Reinvoke
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding

C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\eduar\Desktop\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\WINDOWS\tasks\UCBrowserUpdater.job - C:\Program Files (x86)\UCBrowser\Application\update_task.exe /update

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_77\bin\ssv.dll [2016-03-24 553024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_77\bin\jp2ssv.dll [2016-03-24 214080]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2010-06-10 649608]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2012-11-27 168480]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2012-11-27 393760]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2010-06-10 649608]
"cpuminer"=C:\Users\eduar\AppData\Roaming\cpuminer\cpm.exe [2016-03-31 1417216]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\eduar\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-03-22 551104]
"msiql"=c:\programdata\msiql.exe /RUNNING []
"testLive"=c:\programdata\testlive.exe /RUNNING []
"apphide"=C:\Program Files (x86)\badu\uc.exe []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-03-21 595992]
"apphide"=C:\Program Files (x86)\badu\uc.exe []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
SRS Premium Sound.lnk - C:\WINDOWS\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2012-11-27 390144]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\QQPCRTP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vga.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\QQPCRTP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vga.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vgasave.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2016-04-10 20:21:32 ----D---- C:\Counter-Strike 1.6
2016-04-10 16:02:56 ----A---- C:\~ccetmp.dat
2016-04-10 13:17:18 ----D---- C:\Program Files\trend micro
2016-04-10 13:17:17 ----D---- C:\rsit
2016-04-10 12:15:22 ----D---- C:\Program Files\Microsoft Silverlight
2016-04-10 12:15:22 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2016-04-10 11:54:24 ----A---- C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
2016-04-10 11:54:07 ----D---- C:\ProgramData\Malwarebytes
2016-04-10 11:54:07 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-04-10 11:54:07 ----A---- C:\WINDOWS\system32\drivers\mwac.sys
2016-04-10 11:54:07 ----A---- C:\WINDOWS\system32\drivers\mbamchameleon.sys
2016-04-10 11:54:07 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2016-04-10 11:05:35 ----A---- C:\Users\eduar\AppData\Roaming\GiftBag.db
2016-04-10 11:05:32 ----A---- C:\WINDOWS\system32\drivers\TAOKernelEx64.sys
2016-04-10 11:05:10 ----D---- C:\ProgramData\TXQMPC
2016-04-10 11:05:10 ----D---- C:\Program Files\Common Files\Tencent
2016-04-10 11:04:51 ----A---- C:\WINDOWS\system32\drivers\TFsFltX64.sys
2016-04-10 11:04:48 ----D---- C:\ProgramData\Application Data
2016-04-10 11:02:35 ----D---- C:\Users\eduar\AppData\Roaming\Tencent
2016-04-10 11:02:32 ----D---- C:\ProgramData\Tencent
2016-04-10 10:44:34 ----A---- C:\WINDOWS\system32\drivers\ucguard.sys
2016-04-10 10:40:53 ----D---- C:\ProgramData\Windows Update
2016-04-10 10:40:46 ----A---- C:\ProgramData\hp.exe
2016-04-10 10:39:58 ----D---- C:\Users\eduar\AppData\Roaming\gplyra
2016-04-10 10:39:52 ----D---- C:\Users\eduar\AppData\Roaming\cpuminer
2016-04-10 10:36:07 ----D---- C:\Program Files (x86)\WinSvces
2016-04-10 10:36:06 ----D---- C:\Program Files (x86)\WinTsks
2016-04-10 10:33:51 ----D---- C:\Users\eduar\AppData\Roaming\dlg
2016-03-31 21:06:38 ----AD---- C:\Program Files\LibreOffice 5
2016-03-31 17:29:26 ----D---- C:\WINDOWS\system32\appmgmt
2016-03-31 17:23:46 ----D---- C:\ProgramData\Microsoft Toolkit
2016-03-31 17:09:01 ----D---- C:\ProgramData\Microsoft Help
2016-03-31 17:09:01 ----AD---- C:\Program Files\Microsoft Office
2016-03-30 18:04:54 ----D---- C:\WINDOWS\pss
2016-03-25 10:45:46 ----D---- C:\Users\eduar\AppData\Roaming\Skype
2016-03-25 10:45:37 ----RD---- C:\Program Files (x86)\Skype
2016-03-25 10:45:31 ----D---- C:\ProgramData\Skype
2016-03-24 10:23:05 ----D---- C:\Users\eduar\AppData\Roaming\Sun
2016-03-24 10:23:02 ----A---- C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2016-03-24 10:22:47 ----D---- C:\ProgramData\Oracle
2016-03-24 10:22:45 ----D---- C:\Program Files\Java
2016-03-23 10:37:26 ----D---- C:\WINDOWS\system32\SleepStudy
2016-03-22 22:35:51 ----D---- C:\Users\eduar\AppData\Roaming\MPC-HC
2016-03-22 22:35:23 ----AD---- C:\Program Files\MPC-HC
2016-03-22 18:30:53 ----D---- C:\Users\eduar\AppData\Roaming\Stellarium
2016-03-22 16:55:29 ----D---- C:\Users\eduar\AppData\Roaming\ViberPC
2016-03-22 14:13:52 ----D---- C:\ProgramData\Package Cache
2016-03-22 14:13:15 ----AD---- C:\Program Files\Stellarium
2016-03-22 13:27:53 ----D---- C:\ProgramData\Intel
2016-03-22 13:12:36 ----D---- C:\Users\eduar\AppData\Roaming\LibreOffice
2016-03-22 13:10:47 ----D---- C:\ProgramData\Intel(R) Update Manager
2016-03-22 12:11:02 ----A---- C:\Users\eduar\AppData\Roaming\my_intel.sys
2016-03-22 12:10:37 ----A---- C:\Users\eduar\AppData\Roaming\sp_data.sys
2016-03-22 12:08:01 ----D---- C:\ProgramData\Atheros
2016-03-22 12:05:13 ----D---- C:\Program Files (x86)\ASUS
2016-03-22 11:59:52 ----A---- C:\WINDOWS\SYSWOW64\vsnp2uvc.dll
2016-03-22 11:59:52 ----A---- C:\WINDOWS\system32\vsnp2uvc.dll
2016-03-22 11:59:52 ----A---- C:\WINDOWS\system32\drivers\snp2uvc.sys
2016-03-22 11:59:52 ----A---- C:\WINDOWS\system32\drivers\sncduvc.sys
2016-03-22 11:59:52 ----A---- C:\WINDOWS\system32\csnp2uvc.dll
2016-03-22 11:59:51 ----A---- C:\WINDOWS\snuninst.exe
2016-03-22 11:59:51 ----A---- C:\WINDOWS\snp2uvc.src
2016-03-22 11:59:51 ----A---- C:\WINDOWS\snp2uvc.ini
2016-03-22 11:56:21 ----D---- C:\Program Files\ASUS
2016-03-22 11:56:21 ----AD---- C:\ProgramData\P4G
2016-03-22 11:50:21 ----D---- C:\Program Files\SRS Labs
2016-03-22 11:47:48 ----D---- C:\Program Files (x86)\JMicron
2016-03-22 11:47:40 ----A---- C:\WINDOWS\system32\jmcricon.dll
2016-03-22 11:47:40 ----A---- C:\WINDOWS\system32\drivers\jmcr.sys
2016-03-22 11:37:50 ----D---- C:\WINDOWS\system32\SRSLabs
2016-03-22 11:37:49 ----D---- C:\Program Files\CONEXANT
2016-03-22 11:36:42 ----A---- C:\WINDOWS\system32\UCI64A56.dll
2016-03-22 11:36:41 ----A---- C:\WINDOWS\system32\CX64AP25.dll
2016-03-22 11:36:40 ----A---- C:\WINDOWS\system32\drivers\CHDRT64.sys
2016-03-22 11:35:44 ----A---- C:\WINDOWS\SYSWOW64\CSVer.dll
2016-03-22 11:06:27 ----D---- C:\Users\eduar\AppData\Roaming\Macromedia
2016-03-22 10:59:17 ----A---- C:\WINDOWS\SYSWOW64\wininetlui.dll
2016-03-22 10:59:17 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2016-03-22 10:59:17 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2016-03-22 10:59:17 ----A---- C:\WINDOWS\SYSWOW64\thumbcache.dll
2016-03-22 10:59:17 ----A---- C:\WINDOWS\SYSWOW64\sqmapi.dll
2016-03-22 10:59:17 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2016-03-22 10:59:17 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2016-03-22 10:59:17 ----A---- C:\WINDOWS\SYSWOW64\profext.dll
2016-03-22 10:59:17 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2016-03-22 10:59:17 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2016-03-22 10:59:17 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2016-03-22 10:59:17 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2016-03-22 10:59:17 ----A---- C:\WINDOWS\SYSWOW64\asycfilt.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\WMPDMC.exe
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Logon.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.MediaControl.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Scanners.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\Windows.AccountsControl.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\WiFiDisplay.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\wfapigp.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\werui.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\wermgr.exe
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\wer.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\VCardParser.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\UserDataTypeHelperUtil.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\UserDataPlatformHelperUtil.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\UserDataLanguageUtil.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\UserDataAccountApis.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\POSyncServices.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\PimIndexMaintenanceClient.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\PhoneCallHistoryApis.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\ChatApis.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\fwpolicyiomgr.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\fwbase.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\FirewallAPI.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\ExtrasXmlParser.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\ExSMime.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\EmailApis.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\ContactApis.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\cemapi.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\CallHistoryClient.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2016-03-22 10:59:16 ----A---- C:\WINDOWS\SYSWOW64\AppointmentActivation.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\wmp.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Audio.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\TimeBrokerClient.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\taskschd.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\SyncController.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\SRHInproc.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\PackageStateRoaming.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\NetSetupShim.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\NetSetupEngine.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\netlogon.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\mfsrcsnk.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\MCRecvSrc.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\LaunchWinApp.exe
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\AppointmentApis.dll
2016-03-22 10:59:15 ----A---- C:\WINDOWS\SYSWOW64\ActiveSyncProvider.dll
2016-03-22 10:59:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Core.TextInput.dll
2016-03-22 10:59:14 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2016-03-22 10:59:14 ----A---- C:\WINDOWS\SYSWOW64\TextInputFramework.dll
2016-03-22 10:59:14 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2016-03-22 10:59:14 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2016-03-22 10:59:14 ----A---- C:\WINDOWS\SYSWOW64\MSFlacDecoder.dll
2016-03-22 10:59:14 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2016-03-22 10:59:14 ----A---- C:\WINDOWS\SYSWOW64\InputLocaleManager.dll
2016-03-22 10:59:14 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2016-03-22 10:59:14 ----A---- C:\WINDOWS\SYSWOW64\fontsub.dll
2016-03-22 10:59:14 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2016-03-22 10:59:14 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2016-03-22 10:59:14 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2016-03-22 10:59:14 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2016-03-22 10:59:14 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2016-03-22 10:59:14 ----A---- C:\WINDOWS\SYSWOW64\DisplayManager.dll
2016-03-22 10:59:14 ----A---- C:\WINDOWS\SYSWOW64\deviceaccess.dll
2016-03-22 10:59:14 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2016-03-22 10:59:14 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2016-03-22 10:59:14 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2016-03-22 10:59:14 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2016-03-22 10:59:14 ----A---- C:\WINDOWS\SYSWOW64\AppxSip.dll
2016-03-22 10:59:14 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2016-03-22 10:59:09 ----AD---- C:\Program Files\7-Zip
2016-03-22 10:59:09 ----A---- C:\WINDOWS\system32\XblGameSave.dll
2016-03-22 10:59:09 ----A---- C:\WINDOWS\system32\dssvc.dll
2016-03-22 10:59:09 ----A---- C:\WINDOWS\system32\drivers\xinputhid.sys
2016-03-22 10:59:09 ----A---- C:\WINDOWS\system32\drivers\xboxgip.sys
2016-03-22 10:59:09 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2016-03-22 10:59:09 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2016-03-22 10:59:08 ----A---- C:\WINDOWS\system32\wfapigp.dll
2016-03-22 10:59:08 ----A---- C:\WINDOWS\system32\MPSSVC.dll
2016-03-22 10:59:08 ----A---- C:\WINDOWS\system32\fwpolicyiomgr.dll
2016-03-22 10:59:08 ----A---- C:\WINDOWS\system32\fwbase.dll
2016-03-22 10:59:08 ----A---- C:\WINDOWS\system32\FirewallAPI.dll
2016-03-22 10:59:08 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2016-03-22 10:59:08 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2016-03-22 10:59:07 ----A---- C:\WINDOWS\system32\XblAuthManager.dll
2016-03-22 10:59:07 ----A---- C:\WINDOWS\system32\wwansvc.dll
2016-03-22 10:59:07 ----A---- C:\WINDOWS\system32\WWAHost.exe
2016-03-22 10:59:07 ----A---- C:\WINDOWS\system32\WMPDMC.exe
2016-03-22 10:59:07 ----A---- C:\WINDOWS\system32\wlansvcpal.dll
2016-03-22 10:59:07 ----A---- C:\WINDOWS\system32\wlansvc.dll
2016-03-22 10:59:07 ----A---- C:\WINDOWS\system32\wlansec.dll
2016-03-22 10:59:07 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2016-03-22 10:59:07 ----A---- C:\WINDOWS\system32\wlanapi.dll
2016-03-22 10:59:07 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2016-03-22 10:59:07 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-03-22 10:59:07 ----A---- C:\WINDOWS\system32\win32kfull.sys
2016-03-22 10:59:07 ----A---- C:\WINDOWS\system32\win32kbase.sys
2016-03-22 10:59:07 ----A---- C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-03-22 10:59:07 ----A---- C:\WINDOWS\system32\wifinetworkmanager.dll
2016-03-22 10:59:07 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2016-03-22 10:59:07 ----A---- C:\WINDOWS\system32\WiFiConfigSP.dll
2016-03-22 10:59:07 ----A---- C:\WINDOWS\system32\wfdprov.dll
2016-03-22 10:59:07 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2016-03-22 10:59:07 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\wuuhext.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\wuaueng.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\VCardParser.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\UserDataService.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\UserDataLanguageUtil.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\UserDataAccountApis.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\Unistore.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\twinui.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\TimeBrokerServer.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\TimeBrokerClient.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\thumbcache.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\taskschd.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\schedsvc.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\profext.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\POSyncServices.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\PimIndexMaintenanceClient.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\PimIndexMaintenance.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\msvproc.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\mstscax.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\LaunchWinApp.exe
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\ChatApis.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\ExtrasXmlParser.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\ExSMime.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\EmailApis.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\diagtrack.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\ContactApis.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\cemapi.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\CallHistoryClient.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\AppointmentApis.dll
2016-03-22 10:59:06 ----A---- C:\WINDOWS\system32\AppointmentActivation.dll
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\WSService.dll
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\wsqmcons.exe
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\vaultsvc.dll
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\vaultcli.dll
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\StorSvc.dll
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\SRHInproc.dll
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\SRH.dll
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\sqmapi.dll
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\shell32.dll
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\SettingSync.dll
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\seclogon.dll
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\ngckeyenum.dll
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\netlogon.dll
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\msv1_0.dll
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\AuthHost.exe
2016-03-22 10:59:05 ----A---- C:\WINDOWS\system32\AuthBroker.dll
2016-03-22 10:59:04 ----A---- C:\WINDOWS\system32\wpninprc.dll
2016-03-22 10:59:04 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2016-03-22 10:59:04 ----A---- C:\WINDOWS\system32\usbmon.dll
2016-03-22 10:59:04 ----A---- C:\WINDOWS\system32\storewuauth.dll
2016-03-22 10:59:04 ----A---- C:\WINDOWS\system32\spoolsv.exe
2016-03-22 10:59:04 ----A---- C:\WINDOWS\system32\sharemediacpl.dll
2016-03-22 10:59:04 ----A---- C:\WINDOWS\system32\psmsrv.dll
2016-03-22 10:59:04 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-03-22 10:59:04 ----A---- C:\WINDOWS\system32\provpackageapidll.dll
2016-03-22 10:59:04 ----A---- C:\WINDOWS\system32\PackageStateRoaming.dll
2016-03-22 10:59:04 ----A---- C:\WINDOWS\system32\localspl.dll
2016-03-22 10:59:04 ----A---- C:\WINDOWS\system32\jscript9.dll
2016-03-22 10:59:04 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2016-03-22 10:59:04 ----A---- C:\WINDOWS\system32\Chakra.dll
2016-03-22 10:59:04 ----A---- C:\WINDOWS\system32\drivers\rasl2tp.sys
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\wmp.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\windows.storage.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\SyncController.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\SMSRouter.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\ntdll.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\NetSetupSvc.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\NetSetupShim.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\NetSetupEngine.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\mfsvr.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\mfsrcsnk.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\mfds.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\mfcore.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\MDMAppInstaller.exe
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\MCRecvSrc.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\MBMediaManager.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\KernelBase.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\drivers\bridge.sys
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\asycfilt.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-03-22 10:59:03 ----A---- C:\WINDOWS\system32\accountaccessor.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\wininetlui.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\wininet.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\werui.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\wermgr.exe
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\wer.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\urlmon.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\TextInputFramework.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\mshtml.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\MSFlacDecoder.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\MDEServer.exe
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\jsproxy.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\irmon.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\InputService.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\InputLocaleManager.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\iertutil.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\ieframe.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\fontsub.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\flvprophandler.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\edgehtml.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\dxgi.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\dwmcore.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\dosvc.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\DisplayManager.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\DeviceEnroller.exe
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\deviceaccess.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\d3d11.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\atmlib.dll
2016-03-22 10:59:02 ----A---- C:\WINDOWS\system32\atmfd.dll
2016-03-22 10:59:01 ----A---- C:\WINDOWS\system32\winresume.exe
2016-03-22 10:59:01 ----A---- C:\WINDOWS\system32\winload.exe
2016-03-22 10:59:01 ----A---- C:\WINDOWS\system32\uDWM.dll
2016-03-22 10:59:01 ----A---- C:\WINDOWS\system32\SmsRouterSvc.dll
2016-03-22 10:59:01 ----A---- C:\WINDOWS\system32\scapi.dll
2016-03-22 10:59:01 ----A---- C:\WINDOWS\system32\ole32.dll
2016-03-22 10:59:01 ----A---- C:\WINDOWS\system32\generaltel.dll
2016-03-22 10:59:01 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2016-03-22 10:59:01 ----A---- C:\WINDOWS\system32\domgmt.dll
2016-03-22 10:59:01 ----A---- C:\WINDOWS\system32\dafBth.dll
2016-03-22 10:59:01 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2016-03-22 10:59:01 ----A---- C:\WINDOWS\system32\configurationclient.dll
2016-03-22 10:59:01 ----A---- C:\WINDOWS\system32\bisrv.dll
2016-03-22 10:59:01 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2016-03-22 10:59:00 ----A---- C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-03-22 10:59:00 ----A---- C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-03-22 10:59:00 ----A---- C:\WINDOWS\system32\srpapi.dll
2016-03-22 10:59:00 ----A---- C:\WINDOWS\system32\QuickActionsDataModel.dll
2016-03-22 10:59:00 ----A---- C:\WINDOWS\system32\invagent.dll
2016-03-22 10:59:00 ----A---- C:\WINDOWS\system32\drivers\appid.sys
2016-03-22 10:59:00 ----A---- C:\WINDOWS\system32\devinv.dll
2016-03-22 10:59:00 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2016-03-22 10:59:00 ----A---- C:\WINDOWS\system32\audiosrv.dll
2016-03-22 10:59:00 ----A---- C:\WINDOWS\system32\AudioSes.dll
2016-03-22 10:59:00 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2016-03-22 10:59:00 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-03-22 10:59:00 ----A---- C:\WINDOWS\system32\audiodg.exe
2016-03-22 10:59:00 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2016-03-22 10:59:00 ----A---- C:\WINDOWS\system32\AppxSip.dll
2016-03-22 10:59:00 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-03-22 10:59:00 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-03-22 10:59:00 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-03-22 10:59:00 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2016-03-22 10:59:00 ----A---- C:\WINDOWS\system32\AppCapture.dll
2016-03-22 10:59:00 ----A---- C:\WINDOWS\system32\aeinv.dll
2016-03-22 10:58:59 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2016-03-22 10:58:58 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2016-03-22 10:56:35 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2016-03-22 10:55:30 ----D---- C:\WINDOWS\system32\MRT
2016-03-22 10:55:29 ----A---- C:\WINDOWS\system32\MRT.exe
2016-03-22 10:45:03 ----A---- C:\WINDOWS\system32\perfh01B.dat
2016-03-22 10:45:03 ----A---- C:\WINDOWS\system32\perfc01B.dat
2016-03-22 10:44:54 ----D---- C:\Program Files\Reference Assemblies
2016-03-22 10:44:54 ----D---- C:\Program Files\MSBuild
2016-03-22 10:44:54 ----D---- C:\Program Files (x86)\Reference Assemblies
2016-03-22 10:44:54 ----D---- C:\Program Files (x86)\MSBuild
2016-03-22 10:44:26 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2016-03-22 10:44:26 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2016-03-22 10:44:26 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-03-22 10:44:24 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2016-03-22 10:44:24 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-03-22 10:44:24 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-03-22 10:23:19 ----D---- C:\Program Files (x86)\Intel
2016-03-22 10:13:46 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-22 10:12:28 ----D---- C:\Program Files\Elantech
2016-03-22 10:10:31 ----D---- C:\Users\eduar\AppData\Roaming\Adobe
2016-03-22 10:09:45 ----SD---- C:\Users\eduar\AppData\Roaming\Microsoft
2016-03-22 10:07:14 ----D---- C:\WINDOWS\CSC
2016-03-22 10:04:15 ----D---- C:\WINDOWS\Prefetch
2016-03-22 10:03:23 ----SHD---- C:\Recovery
2016-03-22 10:03:23 ----DC---- C:\WINDOWS\Panther
2016-03-21 23:08:14 ----HD---- C:\$Windows.~WS
2016-03-21 10:54:37 ----ASH---- C:\hiberfil.sys

======List of files/folders modified in the last 1 month======

2016-04-12 08:53:11 ----D---- C:\WINDOWS\System32
2016-04-12 08:53:11 ----D---- C:\WINDOWS\INF
2016-04-12 08:49:28 ----HD---- C:\OneDriveTemp
2016-04-12 08:49:09 ----D---- C:\WINDOWS\Temp
2016-04-12 08:48:13 ----D---- C:\WINDOWS\system32\drivers
2016-04-12 08:48:13 ----D---- C:\WINDOWS\Logs
2016-04-12 08:48:01 ----D---- C:\WINDOWS\system32\sru
2016-04-12 08:46:43 ----RD---- C:\Program Files (x86)
2016-04-11 20:01:19 ----D---- C:\WINDOWS\system32\Tasks
2016-04-11 17:15:34 ----D---- C:\WINDOWS\system32\NDF
2016-04-11 16:16:09 ----D---- C:\WINDOWS\system32\config
2016-04-11 16:12:59 ----D---- C:\WINDOWS\Microsoft.NET
2016-04-10 17:43:25 ----SHD---- C:\WINDOWS\Installer
2016-04-10 15:32:38 ----D---- C:\WINDOWS\system32\drivers\etc
2016-04-10 13:17:18 ----RD---- C:\Program Files
2016-04-10 13:00:56 ----HD---- C:\ProgramData
2016-04-10 13:00:26 ----D---- C:\WINDOWS\Branding
2016-04-10 12:13:58 ----SHD---- C:\System Volume Information
2016-04-10 11:05:10 ----D---- C:\Program Files\Common Files
2016-04-10 11:04:55 ----RSD---- C:\WINDOWS\Fonts
2016-04-10 11:04:54 ----D---- C:\Program Files (x86)\Common Files
2016-04-10 11:02:49 ----D---- C:\WINDOWS\WinSxS
2016-04-10 10:58:40 ----D---- C:\Windows
2016-04-10 10:44:41 ----D---- C:\WINDOWS\Tasks
2016-04-10 10:40:49 ----D---- C:\WINDOWS\SysWOW64
2016-04-10 10:39:11 ----D---- C:\WINDOWS\system32\WDI
2016-04-10 10:36:24 ----HD---- C:\WINDOWS\system32\GroupPolicy
2016-04-10 10:36:24 ----D---- C:\WINDOWS\SYSWOW64\GroupPolicy
2016-04-10 10:34:09 ----RSD---- C:\WINDOWS\assembly
2016-04-10 10:33:23 ----SD---- C:\ProgramData\Microsoft
2016-04-09 09:21:13 ----D---- C:\WINDOWS\AppReadiness
2016-04-08 09:04:04 ----HD---- C:\Program Files\WindowsApps
2016-03-31 21:04:27 ----AD---- C:\Program Files\Common Files\microsoft shared
2016-03-31 21:04:27 ----AD---- C:\Program Files (x86)\Microsoft.NET
2016-03-31 21:04:15 ----D---- C:\WINDOWS\ShellNew
2016-03-31 21:04:06 ----AD---- C:\ProgramData\regid.1991-06.com.microsoft
2016-03-31 20:55:28 ----D---- C:\Program Files\Common Files\System
2016-03-31 20:55:28 ----A---- C:\WINDOWS\win.ini
2016-03-31 17:13:43 ----D---- C:\WINDOWS\system32\DriverStore
2016-03-31 12:02:15 ----D---- C:\WINDOWS\LiveKernelReports
2016-03-30 17:53:25 ----D---- C:\WINDOWS\debug
2016-03-29 09:06:40 ----D---- C:\WINDOWS\CbsTemp
2016-03-25 12:03:14 ----D---- C:\WINDOWS\rescache
2016-03-23 08:58:48 ----D---- C:\WINDOWS\appcompat
2016-03-22 16:28:14 ----SHD---- C:\$Recycle.Bin
2016-03-22 14:13:43 ----D---- C:\WINDOWS\system32\restore
2016-03-22 12:30:41 ----D---- C:\WINDOWS\system32\drivers\UMDF
2016-03-22 12:00:12 ----D---- C:\WINDOWS\twain_32
2016-03-22 11:53:51 ----D---- C:\WINDOWS\system32\CatRoot
2016-03-22 11:03:04 ----SHD---- C:\Boot
2016-03-22 11:02:01 ----D---- C:\WINDOWS\SYSWOW64\migration
2016-03-22 11:02:01 ----D---- C:\WINDOWS\SYSWOW64\Dism
2016-03-22 11:02:00 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2016-03-22 11:02:00 ----D---- C:\WINDOWS\system32\wbem
2016-03-22 11:02:00 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2016-03-22 11:02:00 ----D---- C:\WINDOWS\system32\migration
2016-03-22 11:02:00 ----D---- C:\WINDOWS\system32\Dism
2016-03-22 11:02:00 ----D---- C:\WINDOWS\system32\Boot
2016-03-22 11:02:00 ----D---- C:\WINDOWS\system32\appraiser
2016-03-22 11:01:59 ----RSD---- C:\WINDOWS\Media
2016-03-22 11:01:59 ----RD---- C:\WINDOWS\PurchaseDialog
2016-03-22 11:01:59 ----D---- C:\WINDOWS\bcastdvr
2016-03-22 11:01:59 ----D---- C:\WINDOWS\AppPatch
2016-03-22 11:01:59 ----D---- C:\Program Files\Windows Portable Devices
2016-03-22 11:01:59 ----D---- C:\Program Files\Windows Multimedia Platform
2016-03-22 11:01:59 ----D---- C:\Program Files\Windows Media Player
2016-03-22 11:01:59 ----D---- C:\Program Files\Windows Journal
2016-03-22 11:01:59 ----D---- C:\Program Files\Internet Explorer
2016-03-22 11:01:59 ----D---- C:\Program Files (x86)\Windows Portable Devices
2016-03-22 11:01:59 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2016-03-22 11:01:59 ----D---- C:\Program Files (x86)\Internet Explorer
2016-03-22 10:44:57 ----D---- C:\WINDOWS\SYSWOW64\en-US
2016-03-22 10:44:57 ----D---- C:\WINDOWS\system32\en-US
2016-03-22 10:44:39 ----D---- C:\WINDOWS\system32\catroot2
2016-03-22 10:27:30 ----RD---- C:\Users
2016-03-22 10:17:00 ----D---- C:\WINDOWS\system32\CodeIntegrity
2016-03-22 10:09:52 ----D---- C:\WINDOWS\system32\WinBioDatabase
2016-03-22 10:07:12 ----D---- C:\WINDOWS\SoftwareDistribution
2016-03-22 10:05:00 ----D---- C:\WINDOWS\system32\Sysprep
2016-03-22 10:02:50 ----D---- C:\WINDOWS\system32\Recovery
2016-03-22 09:57:53 ----RASH---- C:\BOOTSECT.BAK
2016-03-21 16:18:11 ----D---- C:\ESD

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;@oem2.inf,%*PNP0600.DeviceDesc%;Intel AHCI Controller; C:\WINDOWS\System32\drivers\iaStor.sys [2010-06-08 540696]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2015-10-30 87040]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2015-10-30 8192]
R1 mbamchameleon;mbamchameleon; \??\C:\WINDOWS\system32\drivers\mbamchameleon.sys [2016-04-10 140672]
R1 UCGuard;UCGuard; C:\WINDOWS\system32\DRIVERS\ucguard.sys [2016-01-26 89840]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2015-10-30 47616]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2015-10-30 78848]
R3 athr;@netathrx.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\System32\drivers\athwnx.sys [2015-10-30 4207104]
R3 CnxtHdAudService;@oem11.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Conexant UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDRT64.sys [2010-01-18 717368]
R3 ETD;@oem13.inf,%PS2.DeviceDesc%;ELAN PS/2 Port Input Device; C:\WINDOWS\system32\DRIVERS\ETD.sys [2010-09-08 129024]
R3 HECIx64;@oem7.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface; C:\WINDOWS\System32\drivers\HECIx64.sys [2009-09-17 56344]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2012-11-27 12311776]
R3 JMCR;JMCR; C:\WINDOWS\system32\DRIVERS\jmcr.sys [2009-08-19 143472]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys [2016-03-10 27008]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [2016-04-12 192216]
R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\WINDOWS\system32\drivers\mwac.sys [2016-03-10 65408]
R3 MTsensor;@oem15.inf,%ATKACPI.DisplayName%;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATK64AMD.sys [2009-05-13 15928]
R3 NETJME;@netjme.inf,%JME_Service_DispName%;JMicron Ethernet Adapter NDIS6.30 Driver (Amd64 Bits); C:\WINDOWS\System32\drivers\NETJME.sys [2015-10-30 137728]
R3 SNP2UVC;@oem14.inf,%SERVICE_DISPLAY_NAME%;USB2.0 PC Camera (SNP2UVC); C:\WINDOWS\system32\DRIVERS\snp2uvc.sys [2009-08-20 1800192]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2015-10-30 104800]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2015-10-30 99168]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2015-10-30 58208]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2015-10-30 58720]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2015-10-30 34144]
S1 QMUdisk;tencent QMUdisk; \??\C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17339.217\QMUdisk64.sys []
S1 softaal;softaal; \??\C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17339.217\softaal64.sys []
S1 SRepairDrv;SRepairDrv; \??\C:\Program Files (x86)\Tencent\QQPCMGR\Plugins\SRepairDrv []
S2 tsnethlpx64;TsNetHlpX64.sys; \??\C:\Program Files (x86)\Tencent\QQPCMgr\11.4.17339.217\TsNetHlpX64.sys []
S3 bcmfn;@bcmfn.inf,%bcmfn.SVCDESC%;bcmfn Service; C:\WINDOWS\System32\drivers\bcmfn.sys [2015-10-30 9728]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2015-10-30 37376]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2016-02-13 117248]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2015-10-30 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2015-10-30 50016]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2015-10-30 81408]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2015-10-30 165888]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2015-10-30 424800]
S3 IoQos;@%SystemRoot%\system32\drivers\ioqos.sys,-100; C:\WINDOWS\system32\drivers\ioqos.sys [2015-10-30 26624]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2015-10-30 705376]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2015-10-30 76128]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2015-10-30 930656]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2015-10-30 61952]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2015-10-30 46592]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2015-10-30 45056]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2015-10-30 254816]
S3 UfxChipidea;@ufxchipidea.inf,%UfxChipidea.ServiceName%;USB Chipidea Controller; C:\WINDOWS\System32\drivers\UfxChipidea.sys [2015-10-30 94048]
S3 ufxsynopsys;@ufxsynopsys.inf,%ufxsynopsys.ServiceName%;USB Synopsys Controller; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [2015-10-30 131424]
S3 UrsCx01000;USB Role-Switch Support Library; C:\WINDOWS\system32\drivers\urscx01000.sys [2015-10-30 57696]
S3 UrsChipidea;@urschipidea.inf,%UrsChipidea.ServiceName%;Chipidea USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urschipidea.sys [2015-10-30 28512]
S3 UrsSynopsys;@urssynopsys.inf,%UrsSynopsys.ServiceName%;Synopsys USB Role-Switch Driver; C:\WINDOWS\System32\drivers\urssynopsys.sys [2015-10-30 27488]
S3 usbser;@usbser.inf,%UsbSerial.DriverDesc%;Microsoft USB Serial Driver; C:\WINDOWS\System32\drivers\usbser.sys [2016-02-13 67072]
S3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2015-10-30 221184]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe [2014-03-26 115512]
R2 ASNB4LDRSvc;ASNB4LDRSvc Service; C:\Program Files (x86)\ASUS\Wireless Console 3\ASNB4LDRSvc.exe [2014-10-01 33912]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2011-11-21 96896]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R2 ETDService;Elan Service; C:\Program Files\Elantech\ETDService.exe [2015-10-07 144072]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2016-03-10 1136608]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2016-03-10 1514464]
R2 OneSyncSvc_3e25d;Sync Host_3e25d; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 PimIndexMaintenanceSvc_3e25d;Kontaktné údaje_3e25d; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
R3 UnistoreSvc_3e25d;Ukladací priestor používateľských údajov_3e25d; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
R3 UserDataSvc_3e25d;Prístup k používateľským údajom_3e25d; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 OneSyncSvc_44740;Sync Host_44740; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2016-03-23 327808]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DcpSvc;@%SystemRoot%\system32\dcpsvc.dll,-3001; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2015-10-30 31744]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2015-10-23 43696]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 iumsvc;Intel(R) Update Manager; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-10-09 178312]
S3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_3e25d;MessagingService_3e25d; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 MessagingService_44740;MessagingService_44740; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 PimIndexMaintenanceSvc_44740;Kontaktné údaje_44740; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2015-10-30 1297408]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2015-10-30 290304]
S3 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 UnistoreSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-10003; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 UnistoreSvc_44740;Ukladací priestor používateľských údajov_44740; C:\WINDOWS\System32\svchost.exe [2015-10-30 43944]
S3 UserDataSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-14001; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S3 UserDataSvc_44740;Prístup k používateľským údajom_44740; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]
S4 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2015-10-30 43944]

-----------------EOF-----------------

Krasny den Vam preju

Protoze jste si PC infikoval pri instalovani softwaru, doporucuji projit nas navod, jak se tomu pro priste vyvarovat http://forum.viry.cz/viewtopic.php?p=1374442#p1374442

Mohl byste puvodce (instalacni soubor) techto problemu nekam uploadnout?

V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )

ukoncete vsechny programy
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Scan, pote na Cleaning
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner[Cx].txt), jehoz obsah zkopirujte do pristi odpovedi

takže, tu je uplodnutý ten súbor
http://uloz.to/xvMay9tc/download-audiograbber-exe
tu je log z virustotal:
https://virustotal.com/sk/file/0fc81ff7 ... 460531437/
a log z toho adwcleaneru:

# AdwCleaner v5.110 - Logfile created 13/04/2016 at 09:04:38
# Updated 10/04/2016 by Xplode
# Database : 2016-04-11.4 [Server]
# Operating system : Windows 10 Pro (X64)
# Username : eduar - EDVO
# Running from : C:\Users\eduar\Desktop\AdwCleaner.exe
# Option : Clean
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : QMUdisk
[-] Service Deleted : softaal
[-] Service Deleted : SRepairDrv
[-] Service Deleted : tsnethlpx64

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\WinTsks
[-] Folder Deleted : C:\Program Files (x86)\WinSvces
[-] Folder Deleted : C:\Program Files (x86)\Common Files\tencent
[-] Folder Deleted : C:\Program Files\Common Files\tencent
[-] Folder Deleted : C:\ProgramData\tencent
[-] Folder Deleted : C:\ProgramData\TXQMPC
[-] Folder Deleted : C:\ProgramData\Application Data\tencent
[-] Folder Deleted : C:\Users\eduar\AppData\Local\Temp\tencent
[-] Folder Deleted : C:\Users\eduar\AppData\Local\VirtualStore\Program Files (x86)\tencent
[-] Folder Deleted : C:\Users\eduar\AppData\Local\VirtualStore\ProgramData\Application Data\tencent
[-] Folder Deleted : C:\Users\eduar\AppData\Roaming\cpuminer
[-] Folder Deleted : C:\Users\eduar\AppData\Roaming\tencent
[-] Folder Deleted : C:\Users\eduar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件
[-] Folder Deleted : C:\WINDOWS\SysWOW64\config\systemprofile\AppData\Roaming\tencent

***** [ Files ] *****

[-] File Deleted : C:\WINDOWS\SysNative\drivers\TFsFltX64.sys

***** [ DLLs ] *****

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\DownloadProxy.EXE
[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\QQPCRTP
[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\QQPCRTP
[-] Key Deleted : HKLM\SOFTWARE\Classes\metnsd
[-] Key Deleted : HKLM\SOFTWARE\Classes\qmgcfiles
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{51BEE30D-EEC8-4BA3-930B-298B8E759EB1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{70DE12EA-79F4-46BC-9812-86DB50A2FD64}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7270EC6-0113-4A78-B610-E501D0A9E48E}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{29B6CFD5-0064-411A-8C42-9890C83F9921}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E7270EC6-0113-4A78-B610-E501D0A9E48E}
[-] Key Deleted : HKCU\Software\DAILYPCCLEAN
[-] Key Deleted : HKCU\Software\Microsoft\Tinstalls
[-] Key Deleted : HKCU\Software\Tutorials
[-] Key Deleted : HKCU\Software\osTip
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\cpuminer
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{0C4E516B-165B-40F7-A721-935D20B09EEE}]
[-] Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{CBCD7E09-F9EC-4A82-98B9-EDB7557A4E71}]
[-] Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [apphide]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [apphide]
[#] Value Deleted : HKU\S-1-5-21-1488272672-2433312044-1902149314-1001\Software\Microsoft\Windows\CurrentVersion\Run [apphide]
[-] Value Deleted : HKU\S-1-5-21-1488272672-2433312044-1902149314-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [apphide]
[-] Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [cpuminer]

***** [ Web browsers ] *****

*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [3728 bytes] - [13/04/2016 09:04:38]
C:\AdwCleaner\AdwCleaner[S1].txt - [3898 bytes] - [13/04/2016 09:01:46]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [3874 bytes] ##########

Za vzorek dekuji. Spustte MBAM -> zalozka History -> vlevo Application Logs -> tam pohledejte Scan Log -> pokud nejaky takovy bude, dvakrat na nej poklepejte -> Export a ulozte jako .txt

Dejte logy FRST.txt a Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101
Pozn. pri druhem a dalsim spusteni FRST je pro vytvoreni logu Addition.txt nutne tuto volbu explicitne zatrhnout pred zacatkem skenu.

takže jediný log z mbam ktorý niečo obsahoval:
Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 12.04.2016
Čas skenování: 8:31
Protokol: sken.txt
Správce: Ano

Verze: 2.2.1.1043
Databáze malwaru: v2016.04.12.01
Databáze rootkitů: v2016.04.09.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Zapnuto

OS: Windows 10
CPU: x64
Souborový systém: NTFS
Uživatel: eduar

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 326068
Uplynulý čas: 14 min, 28 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 3
PUP.Optional.WinTsks, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{4A197596-2531-4165-B053-4191717245DE}, Smazat při restartu, [07eac4e9fe9bfe386fb2abf8af5537c9],
PUP.Optional.WinTsks, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\WinTsks, Smazat při restartu, [b33e24896c2d0036c75b7033996b9d63],
PUP.Optional.YesSearches, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\BUGREPORTW, Do karantény, [8b667a333d5ca5916bb8475cc044f60a],

Hodnoty registru: 2
PUP.Optional.WinTsks, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{4A197596-2531-4165-B053-4191717245DE}|Path, \WinTsks, Smazat při restartu, [07eac4e9fe9bfe386fb2abf8af5537c9]
PUP.Optional.YesSearches, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\BugreportW|ImagePath, "C:\Program Files (x86)\SpeedSearchesbnd\Bugreportauclt.exe" {154DFF63-3402-4815-941A-AAD63AE8B428}, Do karantény, [8b667a333d5ca5916bb8475cc044f60a]

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 3
PUP.Optional.YesSearches, C:\Program Files (x86)\SpeedSearchesbnd, Do karantény, [757cdcd1bedb4cea86bf1616a65dd62a],
PUP.Optional.YesSearches, C:\Program Files (x86)\SpeedSearchesbnd\dmp, Do karantény, [757cdcd1bedb4cea86bf1616a65dd62a],
PUP.Optional.YesSearches, C:\Program Files (x86)\SpeedSearchesbnd\dmp\WinTsks.exe, Do karantény, [757cdcd1bedb4cea86bf1616a65dd62a],

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)

(end)

a log z farbiar či čo to je:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-04-2016
Ran by eduar (administrator) on EDVO (13-04-2016 16:32:22)
Running from C:\Users\eduar\Desktop
Loaded Profiles: eduar (Available Profiles: eduar)
Platform: Windows 10 Pro Version 1511 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\Wireless Console 3\ASNB4LDRSvc.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_2016.29.13.0_x64__8wekyb3d8bbwe\WinStore.Mobile.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.325.12390.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40791.0_x64__8wekyb3d8bbwe\HxMail.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40791.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Corporation) C:\Windows\System32\LockAppHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
() C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
(Microsoft Corporation) C:\Windows\System32\wuapihost.exe
(forum.viry.cz) C:\Users\eduar\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [649608 2010-06-10] (ELAN Microelectronic Corp.)
HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [649608 2010-06-10] (ELAN Microelectronic Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595992 2016-03-21] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1488272672-2433312044-1902149314-1001\...\Run: [msiql] => c:\programdata\msiql.exe /RUNNING
HKU\S-1-5-21-1488272672-2433312044-1902149314-1001\...\Run: [testLive] => c:\programdata\testlive.exe /RUNNING
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRS Premium Sound.lnk [2016-04-12]
ShortcutTarget: SRS Premium Sound.lnk -> C:\Windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe (Acresso Software Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 01 C:\WINDOWS\SysWOW64\napinsp.dll [55808 2015-10-30] (Microsoft Corporation)ATTENTION: LibraryPath should be "%SystemRoot%\system32\napinsp.dll"
Winsock: Catalog5 02 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70656 2015-10-30] (Microsoft Corporation)ATTENTION: LibraryPath should be "%SystemRoot%\system32\pnrpnsp.dll"
Winsock: Catalog5 03 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70656 2015-10-30] (Microsoft Corporation)ATTENTION: LibraryPath should be "%SystemRoot%\system32\pnrpnsp.dll"
Winsock: Catalog5 04 C:\WINDOWS\SysWOW64\NLAapi.dll [65024 2015-10-30] (Microsoft Corporation)ATTENTION: LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5 05 C:\WINDOWS\SysWOW64\mswsock.dll [312160 2015-10-30] (Microsoft Corporation)ATTENTION: LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
Winsock: Catalog5 06 C:\WINDOWS\SysWOW64\winrnr.dll [23552 2015-10-30] (Microsoft Corporation)ATTENTION: LibraryPath should be "%SystemRoot%\System32\winrnr.dll"
Hosts: 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
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{3fa29aad-1033-43eb-8048-46878ce844ee}: [NameServer] 156.154.70.25,156.154.71.25
Tcpip\..\Interfaces\{3fa29aad-1033-43eb-8048-46878ce844ee}: [DhcpNameServer] 8.8.8.8 8.8.4.4

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131048712800606928&GUID=00D8EE5A-172A-4603-9F2B-72BC24FCAC37
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131048712800623633&GUID=00D8EE5A-172A-4603-9F2B-72BC24FCAC37
HKU\S-1-5-21-1488272672-2433312044-1902149314-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131048712800635979&GUID=00D8EE5A-172A-4603-9F2B-72BC24FCAC37
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_77\bin\ssv.dll [2016-03-24] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_77\bin\jp2ssv.dll [2016-03-24] (Oracle Corporation)

Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-1488272672-2433312044-1902149314-1001 -> hxxps://www.bing.com/

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.77.2 -> C:\Program Files\Java\jre1.8.0_77\bin\dtplugin\npDeployJava1.dll [2016-03-24] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.77.2 -> C:\Program Files\Java\jre1.8.0_77\bin\plugin2\npjp2.dll [2016-03-24] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ASNB4LDRSvc; C:\Program Files (x86)\ASUS\Wireless Console 3\ASNB4LDRSvc.exe [33912 2014-10-01] (ASUS)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [144072 2015-10-07] (ELAN Microelectronics Corp.)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [178312 2015-10-09] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\System32\drivers\athwnx.sys [4207104 2015-10-30] (Qualcomm Atheros Communications, Inc.)
R1 mbamchameleon; C:\WINDOWS\system32\drivers\mbamchameleon.sys [140672 2016-04-10] (Malwarebytes)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-04-13] (Malwarebytes)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
R3 NETJME; C:\Windows\System32\drivers\NETJME.sys [137728 2015-10-30] (JMicron Technology Corp.)
R3 SNP2UVC; C:\Windows\system32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] ()
R1 UCGuard; C:\Windows\System32\DRIVERS\ucguard.sys [89840 2016-01-26] (Huorong Borui (Beijing) Technology Co., Ltd.)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-13 16:32 - 2016-04-13 16:32 - 00011772 _____ C:\Users\eduar\Desktop\FRST.txt
2016-04-13 16:32 - 2016-04-13 16:32 - 00000000 ____D C:\FRST
2016-04-13 16:29 - 2016-04-13 16:31 - 00112640 _____ (forum.viry.cz) C:\Users\eduar\Desktop\FRSTLauncher.exe
2016-04-13 16:28 - 2016-04-13 16:28 - 02375168 _____ (Farbar) C:\Users\eduar\Desktop\FRST64.exe
2016-04-13 14:59 - 2016-04-13 14:59 - 00002336 _____ C:\Users\eduar\Desktop\sken.txt
2016-04-13 09:01 - 2016-04-13 09:04 - 00000000 ____D C:\AdwCleaner
2016-04-13 08:59 - 2016-04-13 09:01 - 03465280 _____ C:\Users\eduar\Desktop\AdwCleaner.exe
2016-04-13 08:51 - 2016-04-13 08:51 - 00570920 _____ C:\Users\eduar\Downloads\download-audiograbber.exe
2016-04-12 22:50 - 2016-03-29 12:20 - 07474016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-04-12 22:50 - 2016-03-29 12:20 - 02656952 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-04-12 22:50 - 2016-03-29 12:18 - 02152280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-04-12 22:50 - 2016-03-29 11:37 - 01862008 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-04-12 22:50 - 2016-03-29 10:41 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-04-12 22:50 - 2016-03-29 10:06 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-04-12 22:50 - 2016-03-29 10:01 - 00541304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-04-12 22:50 - 2016-03-29 09:58 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2016-04-12 22:50 - 2016-03-29 09:58 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2016-04-12 22:50 - 2016-03-29 09:46 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-04-12 22:50 - 2016-03-29 09:36 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2016-04-12 22:50 - 2016-03-29 09:19 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-04-12 22:50 - 2016-03-29 09:15 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-04-12 22:50 - 2016-03-29 09:12 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2016-04-12 22:50 - 2016-03-29 09:12 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2016-04-12 22:50 - 2016-03-29 09:10 - 01388544 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-04-12 22:50 - 2016-03-29 09:07 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-04-12 22:50 - 2016-03-29 09:02 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-04-12 22:50 - 2016-03-29 08:42 - 03592704 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-04-12 22:50 - 2016-03-29 08:37 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-04-12 22:50 - 2016-03-29 08:32 - 01731584 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-04-12 22:50 - 2016-03-29 08:31 - 02275328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-04-12 22:50 - 2016-03-29 08:26 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-04-12 22:50 - 2016-03-29 08:05 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-04-12 22:50 - 2016-03-29 08:05 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-04-12 22:50 - 2016-03-29 08:02 - 02229760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-04-12 22:50 - 2016-03-29 07:51 - 22378496 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-04-12 22:50 - 2016-03-29 07:41 - 24602112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-04-12 22:50 - 2016-03-29 07:41 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-04-12 22:50 - 2016-03-29 07:39 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-04-12 22:50 - 2016-03-29 07:38 - 18673664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-04-12 22:50 - 2016-03-29 07:37 - 19340800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-04-12 22:49 - 2016-04-02 06:13 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2016-04-12 22:49 - 2016-04-02 06:10 - 00770640 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll
2016-04-12 22:49 - 2016-04-02 06:10 - 00730344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2016-04-12 22:49 - 2016-04-02 06:10 - 00374008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-04-12 22:49 - 2016-04-02 05:30 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2016-04-12 22:49 - 2016-04-02 05:29 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
2016-04-12 22:49 - 2016-04-02 05:29 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll
2016-04-12 22:49 - 2016-04-02 05:26 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2016-04-12 22:49 - 2016-04-02 05:25 - 00278528 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll
2016-04-12 22:49 - 2016-04-02 05:25 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NotificationObjFactory.dll
2016-04-12 22:49 - 2016-04-02 05:23 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2016-04-12 22:49 - 2016-04-02 05:23 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2016-04-12 22:49 - 2016-04-02 05:21 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2016-04-12 22:49 - 2016-04-02 05:19 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-04-12 22:49 - 2016-04-02 05:18 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-04-12 22:49 - 2016-04-02 05:15 - 01090048 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-04-12 22:49 - 2016-04-02 05:14 - 03994624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-04-12 22:49 - 2016-04-02 05:09 - 01832448 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-04-12 22:49 - 2016-04-02 05:08 - 02193408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2016-04-12 22:49 - 2016-04-02 05:07 - 03575296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-04-12 22:49 - 2016-04-02 05:07 - 02158592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-04-12 22:49 - 2016-04-02 05:03 - 04774912 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2016-04-12 22:49 - 2016-04-02 05:00 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-04-12 22:49 - 2016-03-29 12:23 - 00277856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2016-04-12 22:49 - 2016-03-29 12:22 - 01030416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-04-12 22:49 - 2016-03-29 12:22 - 00874968 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-04-12 22:49 - 2016-03-29 12:20 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-04-12 22:49 - 2016-03-29 12:20 - 01141504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-04-12 22:49 - 2016-03-29 12:15 - 00100232 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll
2016-04-12 22:49 - 2016-03-29 12:11 - 00686976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2016-04-12 22:49 - 2016-03-29 12:05 - 01152864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2016-04-12 22:49 - 2016-03-29 12:02 - 00989536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2016-04-12 22:49 - 2016-03-29 12:02 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2016-04-12 22:49 - 2016-03-29 11:56 - 01297752 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2016-04-12 22:49 - 2016-03-29 11:28 - 00696664 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-04-12 22:49 - 2016-03-29 11:28 - 00535080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2016-04-12 22:49 - 2016-03-29 11:28 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-04-12 22:49 - 2016-03-29 11:25 - 00258912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufx01000.sys
2016-04-12 22:49 - 2016-03-29 11:25 - 00058400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2016-04-12 22:49 - 2016-03-29 11:19 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2016-04-12 22:49 - 2016-03-29 11:18 - 00185184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2016-04-12 22:49 - 2016-03-29 11:17 - 00300104 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-04-12 22:49 - 2016-03-29 11:13 - 00986976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2016-04-12 22:49 - 2016-03-29 11:11 - 00605440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-04-12 22:49 - 2016-03-29 11:11 - 00074424 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe
2016-04-12 22:49 - 2016-03-29 11:10 - 00110584 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvcli.dll
2016-04-12 22:49 - 2016-03-29 11:09 - 00078040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkscli.dll
2016-04-12 22:49 - 2016-03-29 11:08 - 00358752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-04-12 22:49 - 2016-03-29 11:08 - 00261376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
2016-04-12 22:49 - 2016-03-29 11:07 - 00081144 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi32.dll
2016-04-12 22:49 - 2016-03-29 10:44 - 00502104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-04-12 22:49 - 2016-03-29 10:44 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-04-12 22:49 - 2016-03-29 10:41 - 00051128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.dll
2016-04-12 22:49 - 2016-03-29 10:32 - 00253088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-04-12 22:49 - 2016-03-29 10:26 - 02403680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2016-04-12 22:49 - 2016-03-29 10:26 - 01089888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2016-04-12 22:49 - 2016-03-29 10:26 - 00073872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srvcli.dll
2016-04-12 22:49 - 2016-03-29 10:25 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkscli.dll
2016-04-12 22:49 - 2016-03-29 10:24 - 00294752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-04-12 22:49 - 2016-03-29 10:23 - 00069744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netapi32.dll
2016-04-12 22:49 - 2016-03-29 10:21 - 00378208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2016-04-12 22:49 - 2016-03-29 10:17 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-04-12 22:49 - 2016-03-29 10:16 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
2016-04-12 22:49 - 2016-03-29 10:07 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2016-04-12 22:49 - 2016-03-29 10:07 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2016-04-12 22:49 - 2016-03-29 10:07 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2016-04-12 22:49 - 2016-03-29 10:07 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
2016-04-12 22:49 - 2016-03-29 10:07 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsdchngr.dll
2016-04-12 22:49 - 2016-03-29 10:06 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacchooks.dll
2016-04-12 22:49 - 2016-03-29 10:02 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2016-04-12 22:49 - 2016-03-29 10:00 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
2016-04-12 22:49 - 2016-03-29 10:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveskybackup.dll
2016-04-12 22:49 - 2016-03-29 10:00 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-04-12 22:49 - 2016-03-29 09:59 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe
2016-04-12 22:49 - 2016-03-29 09:57 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-04-12 22:49 - 2016-03-29 09:57 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2016-04-12 22:49 - 2016-03-29 09:57 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-04-12 22:49 - 2016-03-29 09:57 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\browcli.dll
2016-04-12 22:49 - 2016-03-29 09:55 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-04-12 22:49 - 2016-03-29 09:55 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\serial.sys
2016-04-12 22:49 - 2016-03-29 09:55 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
2016-04-12 22:49 - 2016-03-29 09:54 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
2016-04-12 22:49 - 2016-03-29 09:53 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll
2016-04-12 22:49 - 2016-03-29 09:52 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
2016-04-12 22:49 - 2016-03-29 09:51 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2016-04-12 22:49 - 2016-03-29 09:51 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2016-04-12 22:49 - 2016-03-29 09:50 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeHdCfgLib.dll
2016-04-12 22:49 - 2016-03-29 09:50 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2016-04-12 22:49 - 2016-03-29 09:50 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-04-12 22:49 - 2016-03-29 09:50 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll
2016-04-12 22:49 - 2016-03-29 09:50 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll
2016-04-12 22:49 - 2016-03-29 09:49 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2016-04-12 22:49 - 2016-03-29 09:48 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
2016-04-12 22:49 - 2016-03-29 09:48 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-04-12 22:49 - 2016-03-29 09:46 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser.dll
2016-04-12 22:49 - 2016-03-29 09:44 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll
2016-04-12 22:49 - 2016-03-29 09:42 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-04-12 22:49 - 2016-03-29 09:39 - 00550912 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-04-12 22:49 - 2016-03-29 09:38 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-04-12 22:49 - 2016-03-29 09:37 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-04-12 22:49 - 2016-03-29 09:36 - 00530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2016-04-12 22:49 - 2016-03-29 09:35 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacc.dll
2016-04-12 22:49 - 2016-03-29 09:35 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll
2016-04-12 22:49 - 2016-03-29 09:34 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2016-04-12 22:49 - 2016-03-29 09:34 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-04-12 22:49 - 2016-03-29 09:34 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2016-04-12 22:49 - 2016-03-29 09:34 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2016-04-12 22:49 - 2016-03-29 09:33 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2016-04-12 22:49 - 2016-03-29 09:32 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-04-12 22:49 - 2016-03-29 09:32 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-04-12 22:49 - 2016-03-29 09:30 - 00328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2016-04-12 22:49 - 2016-03-29 09:30 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll
2016-04-12 22:49 - 2016-03-29 09:28 - 00460288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-04-12 22:49 - 2016-03-29 09:27 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2016-04-12 22:49 - 2016-03-29 09:26 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2016-04-12 22:49 - 2016-03-29 09:23 - 00694784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2016-04-12 22:49 - 2016-03-29 09:23 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2016-04-12 22:49 - 2016-03-29 09:23 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-04-12 22:49 - 2016-03-29 09:22 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll
2016-04-12 22:49 - 2016-03-29 09:21 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-04-12 22:49 - 2016-03-29 09:20 - 00948736 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-04-12 22:49 - 2016-03-29 09:20 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
2016-04-12 22:49 - 2016-03-29 09:20 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.V2.dll
2016-04-12 22:49 - 2016-03-29 09:20 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsdchngr.dll
2016-04-12 22:49 - 2016-03-29 09:19 - 00556032 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-04-12 22:49 - 2016-03-29 09:19 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacchooks.dll
2016-04-12 22:49 - 2016-03-29 09:18 - 00676352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
2016-04-12 22:49 - 2016-03-29 09:17 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-04-12 22:49 - 2016-03-29 09:17 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2016-04-12 22:49 - 2016-03-29 09:17 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-04-12 22:49 - 2016-03-29 09:16 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-04-12 22:49 - 2016-03-29 09:16 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2016-04-12 22:49 - 2016-03-29 09:15 - 01714688 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2016-04-12 22:49 - 2016-03-29 09:14 - 00965632 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2016-04-12 22:49 - 2016-03-29 09:14 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-04-12 22:49 - 2016-03-29 09:13 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-04-12 22:49 - 2016-03-29 09:12 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2016-04-12 22:49 - 2016-03-29 09:11 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-04-12 22:49 - 2016-03-29 09:11 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2016-04-12 22:49 - 2016-03-29 09:11 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-04-12 22:49 - 2016-03-29 09:11 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
2016-04-12 22:49 - 2016-03-29 09:11 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-04-12 22:49 - 2016-03-29 09:11 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\browcli.dll
2016-04-12 22:49 - 2016-03-29 09:10 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-04-12 22:49 - 2016-03-29 09:09 - 01239552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2016-04-12 22:49 - 2016-03-29 09:09 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-04-12 22:49 - 2016-03-29 09:09 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
2016-04-12 22:49 - 2016-03-29 09:08 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2016-04-12 22:49 - 2016-03-29 09:08 - 00841216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2016-04-12 22:49 - 2016-03-29 09:08 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll
2016-04-12 22:49 - 2016-03-29 09:07 - 01902592 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2016-04-12 22:49 - 2016-03-29 09:06 - 01575936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-04-12 22:49 - 2016-03-29 09:06 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2016-04-12 22:49 - 2016-03-29 09:06 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
2016-04-12 22:49 - 2016-03-29 09:05 - 01395712 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2016-04-12 22:49 - 2016-03-29 09:05 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OnDemandConnRouteHelper.dll
2016-04-12 22:49 - 2016-03-29 09:04 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Devices.dll
2016-04-12 22:49 - 2016-03-29 09:03 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2016-04-12 22:49 - 2016-03-29 09:02 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-04-12 22:49 - 2016-03-29 09:02 - 01211904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2016-04-12 22:49 - 2016-03-29 09:00 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2016-04-12 22:49 - 2016-03-29 09:00 - 00235008 _____ C:\WINDOWS\system32\MTF.dll
2016-04-12 22:49 - 2016-03-29 09:00 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-04-12 22:49 - 2016-03-29 09:00 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-04-12 22:49 - 2016-03-29 08:59 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2016-04-12 22:49 - 2016-03-29 08:59 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2016-04-12 22:49 - 2016-03-29 08:59 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2016-04-12 22:49 - 2016-03-29 08:56 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2016-04-12 22:49 - 2016-03-29 08:56 - 00415232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-04-12 22:49 - 2016-03-29 08:55 - 01052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2016-04-12 22:49 - 2016-03-29 08:53 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll
2016-04-12 22:49 - 2016-03-29 08:53 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
2016-04-12 22:49 - 2016-03-29 08:52 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2016-04-12 22:49 - 2016-03-29 08:52 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll
2016-04-12 22:49 - 2016-03-29 08:49 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
2016-04-12 22:49 - 2016-03-29 08:48 - 00346624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-04-12 22:49 - 2016-03-29 08:44 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2016-04-12 22:49 - 2016-03-29 08:43 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AccountsRt.dll
2016-04-12 22:49 - 2016-03-29 08:42 - 01410560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2016-04-12 22:49 - 2016-03-29 08:42 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-04-12 22:49 - 2016-03-29 08:41 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
2016-04-12 22:49 - 2016-03-29 08:40 - 00787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2016-04-12 22:49 - 2016-03-29 08:39 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll
2016-04-12 22:49 - 2016-03-29 08:39 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2016-04-12 22:49 - 2016-03-29 08:39 - 00350720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-04-12 22:49 - 2016-03-29 08:38 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-04-12 22:49 - 2016-03-29 08:37 - 01444352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2016-04-12 22:49 - 2016-03-29 08:37 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2016-04-12 22:49 - 2016-03-29 08:36 - 03351040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2016-04-12 22:49 - 2016-03-29 08:36 - 00649728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2016-04-12 22:49 - 2016-03-29 08:35 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2016-04-12 22:49 - 2016-03-29 08:34 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-04-12 22:49 - 2016-03-29 08:34 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-04-12 22:49 - 2016-03-29 08:34 - 00682496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2016-04-12 22:49 - 2016-03-29 08:34 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2016-04-12 22:49 - 2016-03-29 08:32 - 01588224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2016-04-12 22:49 - 2016-03-29 08:32 - 01098240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2016-04-12 22:49 - 2016-03-29 08:32 - 00854528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2016-04-12 22:49 - 2016-03-29 08:32 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2016-04-12 22:49 - 2016-03-29 08:32 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2016-04-12 22:49 - 2016-03-29 08:32 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2016-04-12 22:49 - 2016-03-29 08:32 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll
2016-04-12 22:49 - 2016-03-29 08:31 - 01946112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-04-12 22:49 - 2016-03-29 08:31 - 01117184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2016-04-12 22:49 - 2016-03-29 08:31 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2016-04-12 22:49 - 2016-03-29 08:30 - 01139712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2016-04-12 22:49 - 2016-03-29 08:29 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
2016-04-12 22:49 - 2016-03-29 08:29 - 00256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll
2016-04-12 22:49 - 2016-03-29 08:28 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-04-12 22:49 - 2016-03-29 08:28 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2016-04-12 22:49 - 2016-03-29 08:27 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-04-12 22:49 - 2016-03-29 08:27 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2016-04-12 22:49 - 2016-03-29 08:27 - 00162816 _____ C:\WINDOWS\SysWOW64\MTF.dll
2016-04-12 22:49 - 2016-03-29 08:27 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2016-04-12 22:49 - 2016-03-29 08:27 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2016-04-12 22:49 - 2016-03-29 08:23 - 00777728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2016-04-12 22:49 - 2016-03-29 08:22 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2016-04-12 22:49 - 2016-03-29 08:19 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-04-12 22:49 - 2016-03-29 08:17 - 00765952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2016-04-12 22:49 - 2016-03-29 08:14 - 01072128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2016-04-12 22:49 - 2016-03-29 08:13 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2016-04-12 22:49 - 2016-03-29 08:10 - 03671040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2016-04-12 22:49 - 2016-03-29 08:06 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2016-04-12 22:49 - 2016-03-29 08:05 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-04-12 22:49 - 2016-03-29 08:05 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-04-12 22:49 - 2016-03-29 08:05 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll
2016-04-12 22:49 - 2016-03-29 08:05 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2016-04-12 22:49 - 2016-03-29 08:04 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2016-04-12 22:49 - 2016-03-29 08:04 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2016-04-12 22:49 - 2016-03-29 08:01 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-04-12 22:49 - 2016-03-29 08:01 - 00957952 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2016-04-12 22:49 - 2016-03-29 08:00 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-04-12 22:49 - 2016-03-29 07:58 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-04-12 22:49 - 2016-03-29 07:56 - 16985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-04-12 22:49 - 2016-03-29 07:52 - 11545600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-04-12 22:49 - 2016-03-29 07:51 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-04-12 22:49 - 2016-03-29 07:49 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-04-12 22:49 - 2016-03-29 07:45 - 03078144 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2016-04-12 22:49 - 2016-03-29 07:45 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll
2016-04-12 22:49 - 2016-03-29 07:43 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-04-12 22:49 - 2016-03-29 07:43 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2016-04-12 22:49 - 2016-03-29 07:38 - 02798080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-04-12 22:49 - 2016-03-29 07:36 - 02722816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2016-04-12 22:49 - 2016-03-29 07:35 - 00821248 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2016-04-12 22:49 - 2016-03-29 07:28 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
2016-04-12 22:49 - 2016-03-29 07:27 - 07836160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-04-12 22:49 - 2016-03-29 07:27 - 05662208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-04-12 22:49 - 2016-03-29 07:27 - 00794112 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2016-04-12 22:49 - 2016-03-29 07:26 - 00958976 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2016-04-12 22:49 - 2016-03-29 07:26 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2016-04-12 22:49 - 2016-03-29 07:25 - 00712704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll
2016-04-12 22:49 - 2016-03-29 07:25 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2016-04-12 22:49 - 2016-03-29 07:21 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\basesrv.dll
2016-04-11 18:42 - 2016-04-11 18:42 - 00000000 ____D C:\Users\eduar\AppData\Local\Apps\2.0
2016-04-10 20:23 - 2016-04-10 20:23 - 00000000 ____D C:\Users\eduar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6
2016-04-10 20:21 - 2016-04-13 11:32 - 00000000 ____D C:\Counter-Strike 1.6
2016-04-10 20:01 - 2016-04-10 20:20 - 216257094 _____ (Valve ) C:\Users\eduar\Downloads\cs16full_v43g_cskocz.exe
2016-04-10 17:43 - 2016-04-10 17:43 - 00003646 _____ C:\WINDOWS\System32\Tasks\ATK Package 36D18D69AFC3
2016-04-10 16:02 - 2016-04-10 16:02 - 00066560 _____ C:\~ccetmp.dat
2016-04-10 15:32 - 2016-04-10 10:30 - 00001006 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ccebak
2016-04-10 13:17 - 2016-04-12 08:58 - 00000000 ____D C:\Program Files\trend micro
2016-04-10 13:17 - 2016-04-10 13:17 - 00000000 ____D C:\rsit
2016-04-10 12:52 - 2016-04-10 12:59 - 222776824 _____ (COMODO) C:\Users\eduar\Downloads\cispremium_installer.exe
2016-04-10 12:46 - 2016-04-10 13:16 - 01222144 _____ C:\Users\eduar\Desktop\RSITx64.exe
2016-04-10 12:17 - 2016-04-10 12:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-04-10 12:15 - 2016-04-10 12:15 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-04-10 12:15 - 2016-04-10 12:15 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-04-10 11:54 - 2016-04-13 16:25 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-04-10 11:54 - 2016-04-10 13:02 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-04-10 11:54 - 2016-04-10 11:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-04-10 11:54 - 2016-04-10 11:54 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-04-10 11:54 - 2016-04-10 11:54 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-04-10 11:54 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-04-10 11:54 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-04-10 11:49 - 2016-04-10 15:30 - 00000000 ____D C:\Users\eduar\Desktop\cce_2.5.242177.201_x64
2016-04-10 11:41 - 2016-04-10 11:41 - 00016812 _____ C:\Users\eduar\Desktop\breberky.txt
2016-04-10 11:05 - 2016-04-10 11:05 - 00005120 _____ C:\Users\eduar\AppData\Roaming\GiftBag.db
2016-04-10 11:05 - 2016-04-10 11:04 - 00132344 _____ (Tencent Technology(Shenzhen) Company Limited) C:\WINDOWS\system32\Drivers\TAOKernelEx64.sys
2016-04-10 10:45 - 2016-04-10 10:45 - 00000000 ____D C:\Users\eduar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UC浏览器
2016-04-10 10:44 - 2016-04-13 11:36 - 00000466 _____ C:\WINDOWS\Tasks\UCBrowserUpdater.job
2016-04-10 10:44 - 2016-04-10 10:44 - 00003484 _____ C:\WINDOWS\System32\Tasks\UCBrowserUpdater
2016-04-10 10:44 - 2016-04-10 10:44 - 00000000 ____D C:\Users\eduar\AppData\Local\UCBrowser
2016-04-10 10:44 - 2016-01-26 06:38 - 00089840 _____ (Huorong Borui (Beijing) Technology Co., Ltd.) C:\WINDOWS\system32\Drivers\ucguard.sys
2016-04-10 10:43 - 2016-04-10 10:58 - 00000000 ____D C:\Users\eduar\AppData\Local\app
2016-04-10 10:40 - 2016-04-10 10:40 - 00016815 _____ C:\ProgramData\webad.xml
2016-04-10 10:40 - 2016-04-10 10:40 - 00000000 ____D C:\ProgramData\Windows Update
2016-04-10 10:40 - 2016-04-06 00:37 - 00114176 _____ C:\ProgramData\hp.exe
2016-04-10 10:39 - 2016-04-10 10:40 - 00000000 ____D C:\Users\eduar\AppData\Roaming\gplyra
2016-04-10 10:36 - 2016-04-10 13:00 - 00000290 __RSH C:\ProgramData\ntuser.pol
2016-04-10 10:35 - 2016-04-10 10:36 - 00000000 ____D C:\Users\Public\Documents\dmp
2016-04-10 10:33 - 2016-04-10 10:33 - 00000000 ____D C:\Users\eduar\AppData\Roaming\dlg
2016-04-10 10:31 - 2016-04-10 10:30 - 00001006 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
2016-04-08 23:02 - 2016-04-12 08:49 - 00001033 _____ C:\Users\eduar\AppData\Roaming\Microsoft\Windows\Start Menu\Viber.lnk
2016-04-08 23:02 - 2016-04-08 23:02 - 00000000 ____D C:\Users\eduar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Viber
2016-04-08 23:02 - 2016-04-08 23:02 - 00000000 ____D C:\Users\eduar\AppData\Local\Viber
2016-04-06 22:23 - 2016-04-06 22:23 - 00597304 _____ C:\Users\eduar\Downloads\flux-setup.exe
2016-04-01 20:19 - 2016-04-01 20:19 - 00000379 _____ C:\Users\eduar\Downloads\smil.xml
2016-03-31 21:23 - 2016-03-31 21:23 - 00302011 _____ C:\Users\eduar\Downloads\WindowsUpdateDiagnostic.diagcab
2016-03-31 21:07 - 2016-03-31 21:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 5.0
2016-03-31 21:06 - 2016-03-31 21:07 - 00000000 ____D C:\Program Files\LibreOffice 5
2016-03-31 18:37 - 2016-03-31 18:37 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2016-03-31 18:37 - 2016-03-31 18:37 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2016-03-31 17:34 - 2016-03-31 17:34 - 00000000 ____D C:\Users\eduar\Documents\Poznámkové bloky programu OneNote
2016-03-31 17:29 - 2016-04-10 17:39 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2016-03-31 17:23 - 2016-03-31 17:24 - 00000000 ____D C:\ProgramData\Microsoft Toolkit
2016-03-31 17:09 - 2016-03-31 21:04 - 00000000 ____D C:\Program Files\Microsoft Office
2016-03-31 17:09 - 2016-03-31 17:09 - 00000000 ____D C:\Users\eduar\AppData\Local\Microsoft Help
2016-03-30 18:04 - 2016-03-30 18:04 - 00000000 ____D C:\WINDOWS\pss
2016-03-26 16:56 - 2016-03-26 16:56 - 00000000 ____D C:\Users\eduar\Desktop\Temný-případ---True-Detective-E01-08S01-TV-seriál-2014,-CZ
2016-03-25 10:46 - 2016-03-25 10:46 - 00000000 ____D C:\Users\eduar\Tracing
2016-03-25 10:45 - 2016-04-09 23:13 - 00000000 ____D C:\Users\eduar\AppData\Roaming\Skype
2016-03-25 10:45 - 2016-04-05 18:57 - 00000000 ____D C:\ProgramData\Skype
2016-03-25 10:45 - 2016-03-25 10:55 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-03-25 10:45 - 2016-03-25 10:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-03-25 10:39 - 2016-03-25 10:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS Utility
2016-03-25 08:57 - 2016-03-29 10:40 - 00000000 ____D C:\Users\eduar\AppData\Local\Google
2016-03-24 21:31 - 2016-03-25 10:38 - 00003834 _____ C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2016-03-24 21:31 - 2016-03-24 21:31 - 00003604 _____ C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon
2016-03-24 10:23 - 2016-03-24 10:23 - 00000000 ____D C:\Users\eduar\AppData\Roaming\Sun
2016-03-24 10:23 - 2016-03-24 10:23 - 00000000 ____D C:\Users\eduar\AppData\LocalLow\Sun
2016-03-24 10:23 - 2016-03-24 10:23 - 00000000 ____D C:\Users\eduar\.oracle_jre_usage
2016-03-24 10:23 - 2016-03-24 10:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-03-24 10:23 - 2016-03-24 10:22 - 00110144 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2016-03-24 10:22 - 2016-03-24 10:23 - 00000000 ____D C:\ProgramData\Oracle
2016-03-24 10:22 - 2016-03-24 10:22 - 00000000 ____D C:\Users\eduar\AppData\LocalLow\Oracle
2016-03-24 10:22 - 2016-03-24 10:22 - 00000000 ____D C:\Program Files\Java
2016-03-23 10:37 - 2016-03-23 10:37 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-03-23 10:22 - 2016-04-04 15:50 - 00015167 _____ C:\Users\eduar\Desktop\životopis.odt
2016-03-23 10:22 - 2016-04-04 15:49 - 00017946 _____ C:\Users\eduar\Desktop\žiadosť.odt
2016-03-22 22:35 - 2016-03-22 22:35 - 00000000 ____D C:\Users\eduar\AppData\Roaming\MPC-HC
2016-03-22 22:35 - 2016-03-22 22:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC x64
2016-03-22 22:35 - 2016-03-22 22:35 - 00000000 ____D C:\Program Files\MPC-HC
2016-03-22 18:30 - 2016-03-22 18:31 - 00000000 ____D C:\Users\eduar\AppData\Roaming\Stellarium
2016-03-22 18:30 - 2016-03-22 18:30 - 00000000 ____D C:\Users\eduar\AppData\Local\stellarium
2016-03-22 16:56 - 2016-04-05 09:08 - 00000000 ____D C:\Users\eduar\Documents\ViberDownloads
2016-03-22 16:55 - 2016-04-11 11:04 - 00000000 ____D C:\Users\eduar\AppData\Roaming\ViberPC
2016-03-22 16:55 - 2016-04-08 23:02 - 00000000 ____D C:\Users\eduar\AppData\Local\Package Cache
2016-03-22 14:14 - 2016-03-22 14:14 - 00000000 ____D C:\Users\eduar\AppData\Local\PeerDistRepub
2016-03-22 14:13 - 2016-03-31 18:36 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-22 14:13 - 2016-03-22 14:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stellarium
2016-03-22 14:13 - 2016-03-22 14:13 - 00000000 ____D C:\Program Files\Stellarium
2016-03-22 13:27 - 2016-03-22 13:27 - 00000000 ____D C:\ProgramData\Intel
2016-03-22 13:12 - 2016-03-22 13:12 - 00000000 ____D C:\Users\eduar\AppData\Roaming\LibreOffice
2016-03-22 13:10 - 2016-03-24 21:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2016-03-22 13:10 - 2016-03-22 13:10 - 00000000 ____D C:\ProgramData\Intel(R) Update Manager
2016-03-22 12:30 - 2016-03-22 12:30 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2016-03-22 12:11 - 2016-03-22 12:11 - 00000021 _____ C:\Users\eduar\AppData\Roaming\my_intel.sys
2016-03-22 12:10 - 2016-04-13 16:25 - 00000081 _____ C:\Users\eduar\AppData\Roaming\sp_data.sys
2016-03-22 12:08 - 2016-03-22 12:08 - 00000000 ____D C:\ProgramData\Atheros
2016-03-22 12:07 - 2016-03-22 12:07 - 00003060 _____ C:\WINDOWS\System32\Tasks\ASUS Splendid ACMON
2016-03-22 12:05 - 2016-04-10 17:43 - 00000000 ____D C:\Program Files (x86)\ASUS
2016-03-22 11:59 - 2010-05-11 11:56 - 02401307 _____ (Macrovision Corporation) C:\WINDOWS\snuninst.exe
2016-03-22 11:59 - 2009-08-21 11:55 - 00375808 _____ (Sonix) C:\WINDOWS\system32\vsnp2uvc.dll
2016-03-22 11:59 - 2009-08-21 11:55 - 00306176 _____ (Sonix) C:\WINDOWS\SysWOW64\vsnp2uvc.dll
2016-03-22 11:59 - 2009-08-20 11:41 - 01800192 _____ () C:\WINDOWS\system32\Drivers\snp2uvc.sys
2016-03-22 11:59 - 2009-07-21 13:08 - 00013021 _____ C:\WINDOWS\snp2uvc.src
2016-03-22 11:59 - 2009-02-16 19:33 - 00306176 _____ ( ) C:\WINDOWS\system32\csnp2uvc.dll
2016-03-22 11:59 - 2008-12-29 18:14 - 00035456 _____ C:\WINDOWS\system32\Drivers\sncduvc.sys
2016-03-22 11:59 - 2006-05-19 12:39 - 00015497 _____ C:\WINDOWS\snp2uvc.ini
2016-03-22 11:56 - 2016-04-10 17:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2016-03-22 11:56 - 2016-03-22 11:56 - 00003106 _____ C:\WINDOWS\System32\Tasks\ASUS P4G
2016-03-22 11:56 - 2016-03-22 11:56 - 00000000 ____D C:\Users\eduar\AppData\Local\ASUS
2016-03-22 11:56 - 2016-03-22 11:56 - 00000000 ____D C:\ProgramData\P4G
2016-03-22 11:56 - 2016-03-22 11:56 - 00000000 ____D C:\Program Files\ASUS
2016-03-22 11:53 - 2010-10-12 17:44 - 04674952 _____ (ELAN Microelectronics Corp.) C:\WINDOWS\system32\ETDUI.cpl
2016-03-22 11:50 - 2016-03-22 11:50 - 00000000 ____D C:\Users\eduar\AppData\Local\SRS Labs
2016-03-22 11:50 - 2016-03-22 11:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SRS Labs
2016-03-22 11:50 - 2016-03-22 11:50 - 00000000 ____D C:\Program Files\SRS Labs
2016-03-22 11:47 - 2016-03-22 11:47 - 00000000 ____D C:\Program Files (x86)\JMicron
2016-03-22 11:47 - 2009-08-19 08:23 - 00143472 _____ (JMicron Technology Corporation) C:\WINDOWS\system32\Drivers\jmcr.sys
2016-03-22 11:47 - 2008-05-15 11:53 - 00110080 _____ (JMicron Technology Corporation) C:\WINDOWS\system32\jmcricon.dll
2016-03-22 11:37 - 2016-03-22 11:50 - 00000000 ____D C:\Program Files\CONEXANT
2016-03-22 11:37 - 2016-03-22 11:37 - 00000000 ____D C:\WINDOWS\system32\SRSLabs
2016-03-22 11:36 - 2010-04-07 14:29 - 00443960 _____ (Conexant Systems, Inc.) C:\WINDOWS\system32\UCI64A56.dll
2016-03-22 11:36 - 2010-01-18 18:45 - 00717368 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\Drivers\CHDRT64.sys
2016-03-22 11:36 - 2009-11-18 15:49 - 01787392 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CX64AP25.dll
2016-03-22 11:35 - 2010-02-23 16:34 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\WINDOWS\SysWOW64\CSVer.dll
2016-03-22 11:30 - 2016-04-10 19:59 - 00000000 ____D C:\Users\eduar\AppData\Local\ElevatedDiagnostics
2016-03-22 11:25 - 2016-04-13 16:28 - 00004212 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{50E0791F-D2D8-468D-ABC1-A7870895FE4E}
2016-03-22 11:06 - 2016-03-22 11:06 - 00000000 ____D C:\Users\eduar\AppData\Roaming\Macromedia
2016-03-22 10:59 - 2016-03-22 10:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2016-03-22 10:59 - 2016-03-22 10:59 - 00000000 ____D C:\Program Files\7-Zip
2016-03-22 10:59 - 2016-03-01 07:31 - 00848168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-03-22 10:59 - 2016-03-01 07:22 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-03-22 10:59 - 2016-02-24 11:52 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-03-22 10:59 - 2016-02-24 11:48 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-03-22 10:59 - 2016-02-24 11:47 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-03-22 10:59 - 2016-02-24 11:40 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-03-22 10:59 - 2016-02-24 11:34 - 01613664 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-03-22 10:59 - 2016-02-24 11:28 - 03449168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2016-03-22 10:59 - 2016-02-24 11:15 - 01557768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-03-22 10:59 - 2016-02-24 10:58 - 00794888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2016-03-22 10:59 - 2016-02-24 10:54 - 00127840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2016-03-22 10:59 - 2016-02-24 10:51 - 01322248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-03-22 10:59 - 2016-02-24 10:50 - 00808800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-03-22 10:59 - 2016-02-24 10:46 - 06607080 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-03-22 10:59 - 2016-02-24 10:39 - 00141560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe
2016-03-22 10:59 - 2016-02-24 10:19 - 00670928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2016-03-22 10:59 - 2016-02-24 10:14 - 00216416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2016-03-22 10:59 - 2016-02-24 10:11 - 01997152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-03-22 10:59 - 2016-02-24 10:11 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-03-22 10:59 - 2016-02-24 10:11 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-03-22 10:59 - 2016-02-24 10:11 - 00652392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2016-03-22 10:59 - 2016-02-24 10:11 - 00394080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-03-22 10:59 - 2016-02-24 10:11 - 00258280 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqmapi.dll
2016-03-22 10:59 - 2016-02-24 10:10 - 00576864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-03-22 10:59 - 2016-02-24 10:09 - 00640472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2016-03-22 10:59 - 2016-02-24 10:09 - 00147808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2016-03-22 10:59 - 2016-02-24 10:06 - 05242496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-03-22 10:59 - 2016-02-24 09:39 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
2016-03-22 10:59 - 2016-02-24 09:39 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExtrasXmlParser.dll
2016-03-22 10:59 - 2016-02-24 09:38 - 00187744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2016-03-22 10:59 - 2016-02-24 09:38 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-03-22 10:59 - 2016-02-24 09:37 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataLanguageUtil.dll
2016-03-22 10:59 - 2016-02-24 09:36 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenanceClient.dll
2016-03-22 10:59 - 2016-02-24 09:35 - 00523752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2016-03-22 10:59 - 2016-02-24 09:35 - 00220064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqmapi.dll
2016-03-22 10:59 - 2016-02-24 09:33 - 00538736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2016-03-22 10:59 - 2016-02-24 09:33 - 00141664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2016-03-22 10:59 - 2016-02-24 09:30 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll
2016-03-22 10:59 - 2016-02-24 09:28 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\POSyncServices.dll
2016-03-22 10:59 - 2016-02-24 09:23 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2016-03-22 10:59 - 2016-02-24 09:23 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
2016-03-22 10:59 - 2016-02-24 09:22 - 00196608 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2016-03-22 10:59 - 2016-02-24 09:20 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
2016-03-22 10:59 - 2016-02-24 09:19 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2016-03-22 10:59 - 2016-02-24 09:19 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\seclogon.dll
2016-03-22 10:59 - 2016-02-24 09:14 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll
2016-03-22 10:59 - 2016-02-24 09:13 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
2016-03-22 10:59 - 2016-02-24 09:12 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\cemapi.dll
2016-03-22 10:59 - 2016-02-24 09:12 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2016-03-22 10:59 - 2016-02-24 09:10 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll
2016-03-22 10:59 - 2016-02-24 09:09 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll
2016-03-22 10:59 - 2016-02-24 09:09 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSip.dll
2016-03-22 10:59 - 2016-02-24 09:07 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
2016-03-22 10:59 - 2016-02-24 09:03 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-03-22 10:59 - 2016-02-24 09:02 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallHistoryClient.dll
2016-03-22 10:59 - 2016-02-24 09:01 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2016-03-22 10:59 - 2016-02-24 09:01 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll
2016-03-22 10:59 - 2016-02-24 09:00 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-03-22 10:59 - 2016-02-24 08:59 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-03-22 10:59 - 2016-02-24 08:59 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll
2016-03-22 10:59 - 2016-02-24 08:59 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2016-03-22 10:59 - 2016-02-24 08:58 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\scapi.dll
2016-03-22 10:59 - 2016-02-24 08:55 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2016-03-22 10:59 - 2016-02-24 08:55 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2016-03-22 10:59 - 2016-02-24 08:55 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExtrasXmlParser.dll
2016-03-22 10:59 - 2016-02-24 08:54 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2016-03-22 10:59 - 2016-02-24 08:54 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll
2016-03-22 10:59 - 2016-02-24 08:54 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2016-03-22 10:59 - 2016-02-24 08:54 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTypeHelperUtil.dll
2016-03-22 10:59 - 2016-02-24 08:53 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2016-03-22 10:59 - 2016-02-24 08:53 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataLanguageUtil.dll
2016-03-22 10:59 - 2016-02-24 08:52 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2016-03-22 10:59 - 2016-02-24 08:52 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PimIndexMaintenanceClient.dll
2016-03-22 10:59 - 2016-02-24 08:49 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
2016-03-22 10:59 - 2016-02-24 08:46 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfapigp.dll
2016-03-22 10:59 - 2016-02-24 08:44 - 00915456 _____ (Microsoft Corporation) C:\WINDOWS\system32\configurationclient.dll
2016-03-22 10:59 - 2016-02-24 08:44 - 00700416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
2016-03-22 10:59 - 2016-02-24 08:44 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\POSyncServices.dll
2016-03-22 10:59 - 2016-02-24 08:43 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2016-03-22 10:59 - 2016-02-24 08:41 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2016-03-22 10:59 - 2016-02-24 08:41 - 00436736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-03-22 10:59 - 2016-02-24 08:40 - 01224704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2016-03-22 10:59 - 2016-02-24 08:40 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2016-03-22 10:59 - 2016-02-24 08:40 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataPlatformHelperUtil.dll
2016-03-22 10:59 - 2016-02-24 08:39 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2016-03-22 10:59 - 2016-02-24 08:38 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll
2016-03-22 10:59 - 2016-02-24 08:36 - 01847808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2016-03-22 10:59 - 2016-02-24 08:34 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2016-03-22 10:59 - 2016-02-24 08:32 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll
2016-03-22 10:59 - 2016-02-24 08:32 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll
2016-03-22 10:59 - 2016-02-24 08:31 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cemapi.dll
2016-03-22 10:59 - 2016-02-24 08:31 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll
2016-03-22 10:59 - 2016-02-24 08:28 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2016-03-22 10:59 - 2016-02-24 08:28 - 00196608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2016-03-22 10:59 - 2016-02-24 08:28 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxSip.dll
2016-03-22 10:59 - 2016-02-24 08:25 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\sharemediacpl.dll
2016-03-22 10:59 - 2016-02-24 08:23 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallHistoryClient.dll
2016-03-22 10:59 - 2016-02-24 08:22 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll
2016-03-22 10:59 - 2016-02-24 08:21 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2016-03-22 10:59 - 2016-02-24 08:21 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2016-03-22 10:59 - 2016-02-24 08:18 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2016-03-22 10:59 - 2016-02-24 08:18 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2016-03-22 10:59 - 2016-02-24 08:18 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2016-03-22 10:59 - 2016-02-24 08:17 - 00369664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2016-03-22 10:59 - 2016-02-24 08:16 - 00394752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2016-03-22 10:59 - 2016-02-24 08:13 - 00540160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
2016-03-22 10:59 - 2016-02-24 08:09 - 00552960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
2016-03-22 10:59 - 2016-02-24 08:09 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2016-03-22 10:59 - 2016-02-24 08:07 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2016-03-22 10:59 - 2016-02-24 08:07 - 00890368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2016-03-22 10:59 - 2016-02-24 08:07 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2016-03-22 10:59 - 2016-02-24 08:04 - 01497088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2016-03-22 10:59 - 2016-02-24 08:03 - 00769536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2016-03-22 10:59 - 2016-02-24 07:55 - 01996288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-03-22 10:59 - 2016-02-24 07:43 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwbase.dll
2016-03-22 10:59 - 2016-02-24 07:34 - 01707520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-03-22 10:59 - 2016-02-24 07:22 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwbase.dll
2016-03-22 10:59 - 2016-02-24 07:12 - 05321728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-03-22 10:59 - 2016-02-24 07:09 - 06972416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-03-22 10:59 - 2016-02-24 07:05 - 12586496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-03-22 10:59 - 2016-02-24 07:03 - 14252544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-03-22 10:59 - 2016-02-23 13:25 - 01818696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-03-22 10:59 - 2016-02-23 13:15 - 00779384 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2016-03-22 10:59 - 2016-02-23 12:34 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-03-22 10:59 - 2016-02-23 12:33 - 00389992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2016-03-22 10:59 - 2016-02-23 12:32 - 08705672 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-03-22 10:59 - 2016-02-23 12:32 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-03-22 10:59 - 2016-02-23 12:32 - 01152328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-03-22 10:59 - 2016-02-23 12:32 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-03-22 10:59 - 2016-02-23 12:32 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-03-22 10:59 - 2016-02-23 12:31 - 01017032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-03-22 10:59 - 2016-02-23 12:31 - 00819648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-03-22 10:59 - 2016-02-23 12:31 - 00536256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-03-22 10:59 - 2016-02-23 12:31 - 00476728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2016-03-22 10:59 - 2016-02-23 12:31 - 00408120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2016-03-22 10:59 - 2016-02-23 12:25 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-03-22 10:59 - 2016-02-23 12:22 - 00572272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2016-03-22 10:59 - 2016-02-23 12:21 - 22564328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-03-22 10:59 - 2016-02-23 12:17 - 00146272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2016-03-22 10:59 - 2016-02-23 11:45 - 02773096 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2016-03-22 10:59 - 2016-02-23 11:40 - 00430944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2016-03-22 10:59 - 2016-02-23 11:38 - 06952088 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-03-22 10:59 - 2016-02-23 11:38 - 02180136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-03-22 10:59 - 2016-02-23 11:38 - 00980352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2016-03-22 10:59 - 2016-02-23 11:38 - 00895080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-03-22 10:59 - 2016-02-23 11:38 - 00882720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-03-22 10:59 - 2016-02-23 11:38 - 00450912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2016-03-22 10:59 - 2016-02-23 11:38 - 00420928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2016-03-22 10:59 - 2016-02-23 11:37 - 00713824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2016-03-22 10:59 - 2016-02-23 11:32 - 00791744 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-03-22 10:59 - 2016-02-23 11:30 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-03-22 10:59 - 2016-02-23 11:27 - 21124344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-03-22 10:59 - 2016-02-23 11:27 - 00376536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-03-22 10:59 - 2016-02-23 11:25 - 00534368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2016-03-22 10:59 - 2016-02-23 11:20 - 01139712 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSave.dll
2016-03-22 10:59 - 2016-02-23 11:20 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2016-03-22 10:59 - 2016-02-23 11:17 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2016-03-22 10:59 - 2016-02-23 11:12 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\provpackageapidll.dll
2016-03-22 10:59 - 2016-02-23 11:10 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2016-03-22 10:59 - 2016-02-23 11:07 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-03-22 10:59 - 2016-02-23 11:07 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2016-03-22 10:59 - 2016-02-23 11:06 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2016-03-22 10:59 - 2016-02-23 11:01 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys
2016-03-22 10:59 - 2016-02-23 11:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-03-22 10:59 - 2016-02-23 11:00 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2016-03-22 10:59 - 2016-02-23 10:58 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\irmon.dll
2016-03-22 10:59 - 2016-02-23 10:56 - 02186864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2016-03-22 10:59 - 2016-02-23 10:55 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2016-03-22 10:59 - 2016-02-23 10:53 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2016-03-22 10:59 - 2016-02-23 10:53 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll
2016-03-22 10:59 - 2016-02-23 10:52 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2016-03-22 10:59 - 2016-02-23 10:50 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-03-22 10:59 - 2016-02-23 10:48 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerClient.dll
2016-03-22 10:59 - 2016-02-23 10:40 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2016-03-22 10:59 - 2016-02-23 10:39 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2016-03-22 10:59 - 2016-02-23 10:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2016-03-22 10:59 - 2016-02-23 10:38 - 00287712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2016-03-22 10:59 - 2016-02-23 10:37 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-03-22 10:59 - 2016-02-23 10:36 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuickActionsDataModel.dll
2016-03-22 10:59 - 2016-02-23 10:34 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-03-22 10:59 - 2016-02-23 10:34 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2016-03-22 10:59 - 2016-02-23 10:33 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2016-03-22 10:59 - 2016-02-23 10:31 - 00463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2016-03-22 10:59 - 2016-02-23 10:29 - 00591872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2016-03-22 10:59 - 2016-02-23 10:28 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-03-22 10:59 - 2016-02-23 10:27 - 00307712 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2016-03-22 10:59 - 2016-02-23 10:26 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2016-03-22 10:59 - 2016-02-23 10:23 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2016-03-22 10:59 - 2016-02-23 10:22 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2016-03-22 10:59 - 2016-02-23 10:20 - 00847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2016-03-22 10:59 - 2016-02-23 10:20 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2016-03-22 10:59 - 2016-02-23 10:20 - 00493568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-03-22 10:59 - 2016-02-23 10:19 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2016-03-22 10:59 - 2016-02-23 10:14 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-03-22 10:59 - 2016-02-23 10:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-03-22 10:59 - 2016-02-23 10:10 - 00997376 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2016-03-22 10:59 - 2016-02-23 10:09 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-03-22 10:59 - 2016-02-23 10:04 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-03-22 10:59 - 2016-02-23 10:04 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-03-22 10:59 - 2016-02-23 10:04 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-03-22 10:59 - 2016-02-23 10:02 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-03-22 10:59 - 2016-02-23 10:02 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2016-03-22 10:59 - 2016-02-23 10:02 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2016-03-22 10:59 - 2016-02-23 09:58 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll
2016-03-22 10:59 - 2016-02-23 09:57 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TimeBrokerClient.dll
2016-03-22 10:59 - 2016-02-23 09:52 - 00456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2016-03-22 10:59 - 2016-02-23 09:50 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2016-03-22 10:59 - 2016-02-23 09:49 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2016-03-22 10:59 - 2016-02-23 09:48 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2016-03-22 10:59 - 2016-02-23 09:47 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll
2016-03-22 10:59 - 2016-02-23 09:38 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2016-03-22 10:59 - 2016-02-23 09:37 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2016-03-22 10:59 - 2016-02-23 09:37 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2016-03-22 10:59 - 2016-02-23 09:36 - 00713728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2016-03-22 10:59 - 2016-02-23 09:36 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2016-03-22 10:59 - 2016-02-23 09:35 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2016-03-22 10:59 - 2016-02-23 09:31 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2016-03-22 10:59 - 2016-02-23 09:24 - 04827136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2016-03-22 10:59 - 2016-02-23 09:24 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-03-22 10:59 - 2016-02-23 09:24 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-03-22 10:59 - 2016-02-23 09:14 - 00990720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-03-22 10:59 - 2016-02-23 09:05 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2016-03-22 10:59 - 2016-02-23 09:01 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2016-03-22 10:59 - 2016-02-23 08:56 - 04412928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2016-03-22 10:59 - 2016-02-23 08:55 - 04894208 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-03-22 10:59 - 2016-02-23 08:51 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-03-22 10:59 - 2016-02-23 08:41 - 02912256 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2016-03-22 10:59 - 2016-02-23 08:39 - 02581504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-03-22 10:59 - 2016-02-23 08:36 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-03-22 10:59 - 2016-02-23 08:35 - 07533568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2016-03-22 10:59 - 2016-02-23 08:33 - 02604032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2016-03-22 10:59 - 2016-02-23 08:30 - 02061312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-03-22 10:59 - 2016-02-23 08:28 - 06740992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2016-03-22 10:59 - 2016-02-09 05:18 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2016-03-22 10:59 - 2016-02-09 05:18 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2016-03-22 10:59 - 2016-02-09 05:07 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2016-03-22 10:58 - 2016-02-24 10:43 - 00625000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2016-03-22 10:58 - 2016-02-23 13:25 - 00563552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2016-03-22 10:56 - 2015-12-09 05:39 - 00301728 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2016-03-22 10:55 - 2016-04-12 22:51 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-03-22 10:55 - 2016-04-12 22:50 - 135176864 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-03-22 10:45 - 2016-04-13 09:09 - 00049664 _____ C:\WINDOWS\system32\perfh01B.dat
2016-03-22 10:45 - 2016-04-13 09:09 - 00012006 _____ C:\WINDOWS\system32\perfc01B.dat
2016-03-22 10:44 - 2016-03-22 10:44 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-03-22 10:44 - 2016-03-22 10:44 - 00000000 ____D C:\Program Files\MSBuild
2016-03-22 10:44 - 2016-03-22 10:44 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-03-22 10:44 - 2016-03-22 10:44 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-03-22 10:44 - 2015-10-23 18:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2016-03-22 10:44 - 2015-10-23 18:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-03-22 10:44 - 2015-10-23 18:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2016-03-22 10:44 - 2015-10-23 18:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-03-22 10:44 - 2015-10-23 18:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2016-03-22 10:44 - 2015-10-23 18:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-03-22 10:39 - 2016-03-22 10:39 - 00000000 ____D C:\Users\eduar\AppData\Local\NetworkTiles
2016-03-22 10:23 - 2016-03-22 13:10 - 00000000 ____D C:\Program Files (x86)\Intel
2016-03-22 10:16 - 2016-03-22 10:16 - 00000000 ____D C:\Users\eduar\AppData\Local\MicrosoftEdge
2016-03-22 10:13 - 2016-04-13 09:09 - 00922814 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-22 10:12 - 2016-04-13 09:06 - 00000000 ___RD C:\Users\eduar\OneDrive
2016-03-22 10:12 - 2016-04-12 08:49 - 00002371 _____ C:\Users\eduar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-03-22 10:12 - 2016-04-04 22:39 - 00000000 ____D C:\Users\eduar\AppData\Local\Comms
2016-03-22 10:12 - 2016-03-22 11:54 - 00000000 ____D C:\Program Files\Elantech
2016-03-22 10:12 - 2016-03-22 10:12 - 00000000 ____D C:\Users\eduar\AppData\Local\ActiveSync
2016-03-22 10:10 - 2016-04-13 08:53 - 00000000 ____D C:\Users\eduar\AppData\Local\Packages
2016-03-22 10:10 - 2016-04-10 11:43 - 00000000 ____D C:\Users\eduar\AppData\Local\VirtualStore
2016-03-22 10:10 - 2016-04-01 09:58 - 00000000 ____D C:\Users\eduar\AppData\Local\PackageStaging
2016-03-22 10:10 - 2016-03-22 10:10 - 00000000 ____D C:\Users\eduar\AppData\Roaming\Adobe
2016-03-22 10:10 - 2016-03-22 10:10 - 00000000 ____D C:\Users\eduar\AppData\Local\TileDataLayer
2016-03-22 10:10 - 2016-03-22 10:10 - 00000000 ____D C:\Users\eduar\AppData\Local\Publishers
2016-03-22 10:09 - 2016-04-13 09:05 - 00000000 ____D C:\Users\eduar
2016-03-22 10:09 - 2016-03-22 10:09 - 00000020 ___SH C:\Users\eduar\ntuser.ini
2016-03-22 10:07 - 2016-03-22 10:07 - 00000000 ____D C:\WINDOWS\CSC
2016-03-22 10:04 - 2016-03-22 10:04 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-03-22 10:03 - 2016-03-22 10:12 - 00000000 ___DC C:\WINDOWS\Panther
2016-03-22 10:01 - 2016-03-22 10:01 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2016-03-21 23:08 - 2016-03-21 23:08 - 00000000 ___HD C:\$Windows.~WS

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-13 09:09 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
2016-04-13 09:05 - 2016-02-13 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-04-13 09:05 - 2015-10-30 08:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2016-04-13 08:53 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-04-13 08:53 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-04-13 08:48 - 2016-01-01 21:27 - 00000000 ___HD C:\OneDriveTemp
2016-04-13 08:45 - 2016-02-13 06:37 - 00397744 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-04-12 22:56 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-04-12 22:56 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-04-12 22:56 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2016-04-12 22:56 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-04-12 22:53 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-04-11 17:15 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-04-10 13:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Branding
2016-04-10 10:50 - 2016-02-13 15:51 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-04-10 10:36 - 2015-10-30 09:24 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2016-04-10 10:36 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2016-04-06 20:32 - 2015-10-30 09:26 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-04-06 20:32 - 2015-10-30 09:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-03-31 21:04 - 2016-02-13 15:21 - 00000000 ____D C:\WINDOWS\ShellNew
2016-03-31 21:04 - 2015-10-30 09:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-03-31 21:04 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-03-31 20:55 - 2015-10-30 09:24 - 00000076 _____ C:\WINDOWS\win.ini
2016-03-31 20:55 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Common Files\System
2016-03-31 12:02 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-03-29 12:07 - 2015-09-08 20:01 - 00400302 __RSH C:\bootmgr
2016-03-25 12:03 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache
2016-03-23 08:58 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\appcompat
2016-03-22 11:02 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-03-22 11:02 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-03-22 11:02 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-03-22 11:01 - 2016-02-13 15:21 - 00000000 ____D C:\Program Files\Windows Journal
2016-03-22 11:01 - 2015-10-30 09:24 - 00000000 __RSD C:\WINDOWS\Media
2016-03-22 11:01 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2016-03-22 11:01 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-03-22 11:01 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2016-03-22 11:01 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-03-22 11:01 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2016-03-22 10:09 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2016-03-22 10:05 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-03-22 10:03 - 2015-10-30 09:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2016-03-22 09:57 - 2015-09-08 20:01 - 00008192 __RSH C:\BOOTSECT.BAK
2016-03-21 21:51 - 2015-09-08 20:26 - 00203464 __RSH C:\grldr
2016-03-21 21:51 - 2015-09-08 20:26 - 00000012 __RSH C:\win7.ld
2016-03-21 16:18 - 2015-11-13 16:33 - 00000000 ____D C:\ESD

==================== Files in the root of some directories =======

2016-04-10 11:05 - 2016-04-10 11:05 - 0005120 _____ () C:\Users\eduar\AppData\Roaming\GiftBag.db
2016-03-22 12:11 - 2016-03-22 12:11 - 0000021 _____ () C:\Users\eduar\AppData\Roaming\my_intel.sys
2016-03-22 12:10 - 2016-04-13 16:25 - 0000081 _____ () C:\Users\eduar\AppData\Roaming\sp_data.sys
2016-04-10 10:40 - 2016-04-06 00:37 - 0114176 _____ () C:\ProgramData\hp.exe
2016-04-10 10:40 - 2016-04-10 10:40 - 0016815 _____ () C:\ProgramData\webad.xml

Files to move or delete:
====================
C:\ProgramData\hp.exe

Some files in TEMP:
====================
C:\Users\eduar\AppData\Local\Temp\libeay32.dll
C:\Users\eduar\AppData\Local\Temp\msvcr120.dll
C:\Users\eduar\AppData\Local\Temp\SkypeSetup.exe
C:\Users\eduar\AppData\Local\Temp\sqlite3.dll

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2016-04-11 16:12

==================== End of FRST.txt ============================

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:166.76 GB) (Free:125.63 GB) NTFS ==>[drive with boot components (obtained from BCD)]

Available physical RAM: 4860.94 MB
Total physical RAM: 7020.54 MB
Percentage of memory in use: 30%

==================== MBR and Partition Table ==================

Disk: 0 (Size: 167.7 GB) (Disk ID: 5FCD493C)
Partition 1: (Active) - (Size=166.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=450 MB) - (Type=27)
Partition 3: (Not Active) - (Size=493 MB) - (Type=27)

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\UCBrowserUpdater.job => C:\Program Files (x86)\UCBrowser\Application\update_task.exe

==================== Alternate Data Streams (whitelisted) ==================

==================== Security Center ==================

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\eduar\Desktop" je 6500 MB.

***** Startup Programs *****

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000001

==================== End Of Log ==============================

a ešte Adition:

Additional scan result of Farbar Recovery Scan Tool (x64) Version:13-04-2016
Ran by eduar (2016-04-13 16:33:05)
Running from C:\Users\eduar\Desktop
Windows 10 Pro Version 1511 (X64) (2016-03-22 08:08:36)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-1488272672-2433312044-1902149314-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1488272672-2433312044-1902149314-503 - Limited - Disabled)
eduar (S-1-5-21-1488272672-2433312044-1902149314-1001 - Administrator - Enabled) => C:\Users\eduar
Guest (S-1-5-21-1488272672-2433312044-1902149314-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 15.14 (x64) (HKLM\...\7-Zip) (Version: 15.14 - Igor Pavlov)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 3.0.8 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.01.0003 - ASUS)
ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.20 - asus)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0037 - ASUS)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 4.111.0.63 - Conexant)
Counter-Strike 1.6 v43g (HKU\S-1-5-21-1488272672-2433312044-1902149314-1001\...\Counter-Strike 1.6_is1) (Version: - Valve)
ETDWare PS/2-x64 7.0.5.16_WHQL (HKLM\...\Elantech) (Version: 7.0.5.16 - ELAN Microelectronics Corp.)
Intel(R) Update Manager (HKLM-x32\...\{6E8699D5-6A81-4339-A21A-1FE8D33D293B}) (Version: 3.2.1289 - Intel Corporation)
Intel® SSD Toolbox (HKLM-x32\...\{06D085C8-1F00-11B2-96A7-8f0CE39193ED}) (Version: 3.3.4.400 - Intel Corporation)
Java 8 Update 77 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418077F0}) (Version: 8.0.770.3 - Oracle Corporation)
JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.33.2 - JMicron Technology Corp.)
LibreOffice 5.0.5.2 (HKLM\...\{7560B380-C81B-44F8-872D-B225EE47D059}) (Version: 5.0.5.2 - The Document Foundation)
Malwarebytes Anti-Malware verze 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
MPC-HC 1.7.10 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team)
Skype™ 7.22 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.22.108 - Skype Technologies S.A.)
Stellarium 0.14.3 (HKLM\...\Stellarium_is1) (Version: 0.14.3 - Stellarium team)
USB2.0 UVC VGA WebCam (HKLM\...\USB2.0 UVC VGA WebCam) (Version: 5.8.54000.207 - Sonix)
Viber (HKU\S-1-5-21-1488272672-2433312044-1902149314-1001\...\{fbc2e766-a500-4ec0-828f-5b884a1a292a}) (Version: 6.0.0.3669 - Viber Media Inc.)
Viber (x32 Version: 6.0.0.3669 - Viber Media Inc.) Hidden
Wireless Console 3 (HKLM-x32\...\{19EA33FB-B34E-40EA-8B8A-61743AEB795A}) (Version: 3.0.47 - ASUS)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1488272672-2433312044-1902149314-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\eduar\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\FileCoAuth.exe (Microsoft Corporation)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1AD3BB15-FDAA-4779-BFD6-34EF66BFAA04} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2014-02-11] (ASUS)
Task: {35E8A2F1-B069-4C5A-9C3F-D5A47C4070ED} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-10-09] (Intel Corporation)
Task: {39BAC468-FC70-493E-A00B-46BD8E7A26BD} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2014-04-02] (ASUS)
Task: {96A96FBE-DADB-49A8-9F01-A2DC5F4FCFE8} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2014-06-11] (ASUSTek Computer Inc.)
Task: {CEB6ADED-8E57-4AD0-A306-047C25F444E0} - System32\Tasks\UCBrowserUpdater => C:\Program Files (x86)\UCBrowser\Application\update_task.exe
Task: {F4FE62E4-0DD9-4B99-BCAF-24EFB20E182B} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-10-09] (Intel Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\UCBrowserUpdater.job => C:\Program Files (x86)\UCBrowser\Application\update_task.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2015-10-30 09:17 - 2015-10-30 09:17 - 00028672 _____ () C:\WINDOWS\SYSTEM32\efsext.dll
2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-04-12 22:50 - 2016-03-29 12:20 - 02656952 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-04-12 22:50 - 2016-03-29 12:20 - 02656952 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2014-02-11 18:08 - 2014-02-11 18:08 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll
2016-02-13 15:02 - 2016-02-13 15:02 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-04-12 22:49 - 2016-04-02 05:25 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-04-12 22:50 - 2016-03-29 12:20 - 02656952 _____ () C:\Windows\System32\CoreUIComponents.dll
2016-04-12 22:49 - 2016-04-02 05:03 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-04-12 22:49 - 2016-04-02 04:58 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-04-12 22:49 - 2016-04-02 04:59 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-04-12 22:49 - 2016-04-02 05:02 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-03-22 13:14 - 2016-03-22 13:15 - 10244608 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_2016.29.13.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2016-03-29 08:33 - 2016-03-29 08:34 - 00016896 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.325.12390.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2016-03-29 08:33 - 2016-03-29 08:34 - 17535488 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.325.12390.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2016-03-22 13:12 - 2016-03-22 13:14 - 00291328 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.325.12390.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
2015-10-30 09:18 - 2015-10-30 09:18 - 02100064 _____ () C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
2014-10-01 18:48 - 2014-10-01 18:48 - 01163264 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\acAuth.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00117248 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00037936 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00018992 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDColorEnhance.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00020528 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDRegammaAndGamut.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2015-10-30 09:24 - 2016-04-10 15:32 - 00000821 ____A C:\WINDOWS\system32\Drivers\etc\hosts

0x2320436F707972696768742028632920313939332D32303034204D6963726F736F667420436F72702E0D0A230D0A23204175746F47656E657261746564206279204D6963726F736F667420285229204D616C776172652050726F74656374696F6E20456E67696E652E0D0A23205468697320697320612073616D706C6520484F5354532066696C652075736564206279204D6963726F736F6674205443502F495020666F722057696E646F77732E0D0A230D0A2320546869732066696C6520636F6E7461696E7320746865206D617070696E6773206F662049502061646472657373657320746F20686F7374206E616D65732E20456163680D0A2320656E7472792073686F756C64206265206B657074206F6E20616E20696E646976696475616C206C696E652E2054686520495020616464726573732073686F756C640D0A2320626520706C6163656420696E2074686520666972737420636F6C756D6E20666F6C6C6F7765642062792074686520636F72726573706F6E64696E6720686F7374206E616D652E0D0A2320546865204950206164647265737320616E642074686520686F7374206E616D652073686F756C6420626520736570617261746564206279206174206C65617374206F6E650D0A232073706163652E0D0A230D0A23204164646974696F6E616C6C792C20636F6D6D656E747320287375636820617320746865736529206D617920626520696E736572746564206F6E20696E646976696475616C0D0A23206C696E6573206F7220666F6C6C6F77696E6720746865206D616368696E65206E616D652064656E6F7465642062792061202723272073796D626F6C2E0D0A230D0A2320466F72206578616D706C653A0D0A230D0A232020202020203130322E35342E39342E393720202020207268696E6F2E61636D652E636F6D202020202020202020202320736F75726365207365727665720D0A232020202020202033382E32352E36332E31302020202020782E61636D652E636F6D202020202020202020202020202023207820636C69656E7420686F73740D0A0D0A3132372E302E302E31202020202020206C6F63616C686F73740D0A3A3A31202020202020202020202020206C6F63616C686F737400

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1488272672-2433312044-1902149314-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\eduar\Pictures\awesome-matterhorn-image-desktop-hd-wallpapers-fullscreen-free-download.jpg
DNS Servers: 156.154.70.25 - 156.154.71.25
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: BugreportW => 2
MSCONFIG\Services: GoogleChromeUpService => 2
MSCONFIG\Services: GoogleChromeUpSvc => 2
MSCONFIG\Services: QQPCRTP => 2
MSCONFIG\Services: QQRepairFixSVC => 2
MSCONFIG\Services: rijufoze => 2
MSCONFIG\Services: rocufyky => 2
MSCONFIG\Services: WinSvces => 2
MSCONFIG\Services: wodufolozbt => 2
HKLM\...\StartupApproved\Run: => "cpuminer"
HKLM\...\StartupApproved\Run32: => "HomePageHelper"
HKLM\...\StartupApproved\Run32: => "LightGate"
HKLM\...\StartupApproved\Run32: => "sun21"
HKLM\...\StartupApproved\Run32: => "apphide"
HKLM\...\StartupApproved\Run32: => " QQPCTray"
HKU\S-1-5-21-1488272672-2433312044-1902149314-1001\...\StartupApproved\Run: => "msiql"
HKU\S-1-5-21-1488272672-2433312044-1902149314-1001\...\StartupApproved\Run: => "testLive"
HKU\S-1-5-21-1488272672-2433312044-1902149314-1001\...\StartupApproved\Run: => "svchost0"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [TCP Query User{FE0BFC26-2283-4D0E-BA37-30DE3F2609DD}C:\counter-strike 1.6\hl.exe] => (Allow) C:\counter-strike 1.6\hl.exe
FirewallRules: [UDP Query User{B57D4DC9-A726-4342-B9BA-E1B96F31439D}C:\counter-strike 1.6\hl.exe] => (Allow) C:\counter-strike 1.6\hl.exe
FirewallRules: [{583EB6E8-7B34-4809-A7D8-F6F9ADE8F7F6}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{00D2905C-B526-4059-A1EF-34F86EF62B7A}] => (Allow) C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe
FirewallRules: [{EF192651-C418-406A-AA02-D42CCD9C4EF1}] => (Allow) C:\Program Files (x86)\UCBrowser\Application\Downloader\download\MiniThunderPlatform.exe
FirewallRules: [{07A58870-6561-4D1B-8742-665047B6423F}] => (Allow) C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe

==================== Restore Points =========================

05-04-2016 19:22:54 Scheduled Checkpoint
10-04-2016 12:13:15 Windows Update

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (04/12/2016 10:51:45 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll8

Error: (04/12/2016 10:22:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: RadiaSK.exe, verzia: 1.0.0.0, časová značka: 0x53678975
Názov chybujúceho modulu: Windows.UI.Xaml.dll, verzia: 10.0.10586.71, časová značka: 0x5699d8e0
Kód výnimky: 0xc000027b
Odstup chyby: 0x00000000006fce8b
Identifikácia chybujúceho procesu: 0xe1c
Čas spustenia chybujúcej aplikácie: 0xRadiaSK.exe0
Cesta chybujúcej aplikácie: RadiaSK.exe1
Cesta chybujúceho modulu: RadiaSK.exe2
Identifikácia hlásenia: RadiaSK.exe3
Celé meno chybujúceho balíka: RadiaSK.exe4
Identifikácia chybujúcej aplikácie vzhľadom na balík: RadiaSK.exe5

Error: (04/11/2016 05:12:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: microsoftedgecp.exe, verzia: 11.0.10586.20, časová značka: 0x56540c35
Názov chybujúceho modulu: msvcrt.dll, verzia: 7.0.10586.0, časová značka: 0x5632d79e
Kód výnimky: 0xc0000005
Odstup chyby: 0x0000000000073c9a
Identifikácia chybujúceho procesu: 0xa98
Čas spustenia chybujúcej aplikácie: 0xmicrosoftedgecp.exe0
Cesta chybujúcej aplikácie: microsoftedgecp.exe1
Cesta chybujúceho modulu: microsoftedgecp.exe2
Identifikácia hlásenia: microsoftedgecp.exe3
Celé meno chybujúceho balíka: microsoftedgecp.exe4
Identifikácia chybujúcej aplikácie vzhľadom na balík: microsoftedgecp.exe5

Error: (04/11/2016 05:08:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: microsoftedgecp.exe, verzia: 11.0.10586.20, časová značka: 0x56540c35
Názov chybujúceho modulu: msvcrt.dll, verzia: 7.0.10586.0, časová značka: 0x5632d79e
Kód výnimky: 0xc0000005
Odstup chyby: 0x0000000000073c9a
Identifikácia chybujúceho procesu: 0xc30
Čas spustenia chybujúcej aplikácie: 0xmicrosoftedgecp.exe0
Cesta chybujúcej aplikácie: microsoftedgecp.exe1
Cesta chybujúceho modulu: microsoftedgecp.exe2
Identifikácia hlásenia: microsoftedgecp.exe3
Celé meno chybujúceho balíka: microsoftedgecp.exe4
Identifikácia chybujúcej aplikácie vzhľadom na balík: microsoftedgecp.exe5

Error: (04/11/2016 11:41:18 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: ShellExperienceHost.exe, verzia: 10.0.10586.122, časová značka: 0x56cc0133
Názov chybujúceho modulu: StartUI.dll, verzia: 10.0.10586.122, časová značka: 0x56cbff9f
Kód výnimky: 0xc000041d
Odstup chyby: 0x000000000029bfb8
Identifikácia chybujúceho procesu: 0x10f4
Čas spustenia chybujúcej aplikácie: 0xShellExperienceHost.exe0
Cesta chybujúcej aplikácie: ShellExperienceHost.exe1
Cesta chybujúceho modulu: ShellExperienceHost.exe2
Identifikácia hlásenia: ShellExperienceHost.exe3
Celé meno chybujúceho balíka: ShellExperienceHost.exe4
Identifikácia chybujúcej aplikácie vzhľadom na balík: ShellExperienceHost.exe5

Error: (04/11/2016 11:41:14 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: ShellExperienceHost.exe, verzia: 10.0.10586.122, časová značka: 0x56cc0133
Názov chybujúceho modulu: StartUI.dll, verzia: 10.0.10586.122, časová značka: 0x56cbff9f
Kód výnimky: 0xc0000005
Odstup chyby: 0x000000000029bfb8
Identifikácia chybujúceho procesu: 0x10f4
Čas spustenia chybujúcej aplikácie: 0xShellExperienceHost.exe0
Cesta chybujúcej aplikácie: ShellExperienceHost.exe1
Cesta chybujúceho modulu: ShellExperienceHost.exe2
Identifikácia hlásenia: ShellExperienceHost.exe3
Celé meno chybujúceho balíka: ShellExperienceHost.exe4
Identifikácia chybujúcej aplikácie vzhľadom na balík: ShellExperienceHost.exe5

Error: (04/10/2016 05:43:30 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: EDVO)
Description: Aktivácia aplikácie Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI zlyhala pre chybu: -2144927141 Ďalšie informácie nájdete v denníku Microsoft-Windows-TWinUI/Operational.

Error: (04/10/2016 04:11:46 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: EDVO)
Description: Aktivácia aplikácie Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI zlyhala pre chybu: -2144927141 Ďalšie informácie nájdete v denníku Microsoft-Windows-TWinUI/Operational.

Error: (04/10/2016 12:13:26 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Cryptographic Services zlyhala pri spracovávaní volania OnIdentity() v objekte System Writer.

Details:
AddLegacyDriverFiles: Unable to back up image of binary TSSysKit.

System Error:
The system cannot find the file specified.
.

Error: (04/10/2016 12:13:26 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Cryptographic Services zlyhala pri spracovávaní volania OnIdentity() v objekte System Writer.

Details:
AddLegacyDriverFiles: Unable to back up image of binary QQSysMonX64.

System Error:
The system cannot find the file specified.
.

System errors:
=============
Error: (04/13/2016 02:59:52 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable

Error: (04/13/2016 12:14:06 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable

Error: (04/13/2016 09:08:32 AM) (Source: DCOM) (EventID: 10016) (User: EDVO)
Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}EDVOeduarS-1-5-21-1488272672-2433312044-1902149314-1001LocalHost (Using LRPC)Microsoft.Windows.FeatureOnDemand.InsiderHub_10.0.10586.0_neutral_neutral_cw5n1h2txyewyS-1-15-2-4016783169-893401051-2237370320-274899566-412088533-2398988950-2155762795

Error: (04/13/2016 09:05:06 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Prístup k používateľským údajom_e9318 sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 10000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

Error: (04/13/2016 09:05:06 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Ukladací priestor používateľských údajov_e9318 sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 10000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

Error: (04/13/2016 09:05:06 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Kontaktné údaje_e9318 sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 10000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

Error: (04/13/2016 09:05:06 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Sync Host_e9318 sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 10000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

Error: (04/13/2016 09:05:06 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable

Error: (04/13/2016 09:04:37 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba sieťového zdieľania pre prehrávač Windows Media Player sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 30000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

Error: (04/13/2016 09:04:37 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Search sa neočakávane ukončila. Služba sa týmto spôsobom ukončila už 1 krát. O 30000 ms bude vykonaná nasledujúca opravná akcia: Reštartovať službu.

CodeIntegrity:
===================================
Date: 2016-04-13 08:45:41.504
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-04-12 22:53:42.104
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-04-12 18:10:06.138
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-04-12 18:10:06.102
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-04-12 18:10:06.017
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-04-12 18:10:05.976
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-04-12 18:10:05.853
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-04-12 18:10:05.822
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-04-12 18:10:05.777
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-04-12 18:10:04.716
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz
Percentage of memory in use: 30%
Total physical RAM: 7020.54 MB
Available physical RAM: 4860.94 MB
Total Virtual: 8172.54 MB
Available Virtual: 6084.08 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:166.76 GB) (Free:125.63 GB) NTFS ==>[drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 167.7 GB) (Disk ID: 5FCD493C)
Partition 1: (Active) - (Size=166.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=450 MB) - (Type=27)
Partition 3: (Not Active) - (Size=493 MB) - (Type=27)

==================== End of Addition.txt ============================

Velikost plochy by nemela presahovat 200 MB. Zpomaluje se pak start i samotny chod celeho PC. Doporucuji hlavne velke soubory a slozky premistit napr. do Dokumentu a na plochu umistit pouze zastupce.

UCBrowser pouzivate?

Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
znovu spustte FRST a kliknete na Fix

po restartu bude na plose ulozen fixlog, jehoz obsah vlozte do pristi odpovedi

Kód: Vybrat vše

Start
CreateRestorePoint:
CloseProcesses:
File: c:\programdata\msiql.exe
c:\programdata\msiql.exe
File: c:\programdata\testlive.exe
c:\programdata\testlive.exe
File: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
HKU\S-1-5-21-1488272672-2433312044-1902149314-1001\...\Run: [msiql] => c:\programdata\msiql.exe /RUNNING
HKU\S-1-5-21-1488272672-2433312044-1902149314-1001\...\Run: [testLive] => c:\programdata\testlive.exe /RUNNING
2016-04-13 16:32 - 2016-04-13 16:32 - 00011772 _____ C:\Users\eduar\Desktop\FRST.txt
2016-04-13 14:59 - 2016-04-13 14:59 - 00002336 _____ C:\Users\eduar\Desktop\sken.txt
2016-04-13 09:01 - 2016-04-13 09:04 - 00000000 ____D C:\AdwCleaner
2016-04-13 08:59 - 2016-04-13 09:01 - 03465280 _____ C:\Users\eduar\Desktop\AdwCleaner.exe
2016-04-10 13:17 - 2016-04-12 08:58 - 00000000 ____D C:\Program Files\trend micro
2016-04-10 13:17 - 2016-04-10 13:17 - 00000000 ____D C:\rsit
2016-04-10 12:46 - 2016-04-10 13:16 - 01222144 _____ C:\Users\eduar\Desktop\RSITx64.exe
Folder: C:\Users\eduar\AppData\Roaming\gplyra
2016-04-10 10:39 - 2016-04-10 10:40 - 00000000 ____D C:\Users\eduar\AppData\Roaming\gplyra
Folder: C:\ProgramData\Windows Update
File: C:\ProgramData\hp.exe
Folder: C:\Users\eduar\AppData\Roaming\dlg
File: C:\Users\eduar\AppData\Roaming\my_intel.sys
File: C:\Users\eduar\AppData\Roaming\sp_data.sys
CMD: type C:\ProgramData\webad.xml
Folder: C:\WINDOWS\system32\Drivers\etc
CMD: type C:\WINDOWS\system32\Drivers\etc\hosts
Task: C:\WINDOWS\Tasks\UCBrowserUpdater.job => C:\Program Files (x86)\UCBrowser\Application\update_task.exe
CMD: dir "C:\PROGRA~1"
CMD: dir "C:\PROGRA~2"
CMD: dir "C:\PROGRA~3"
CMD: dir "%localappdata%"
CMD: dir "%appdata%"
Hosts:
EmptyTemp:
End

nie, ucbrwoser nepoužívam, naťahal sa mi s tým bordelom. už asi 10x sem chcem dať ten log, no furt mi vyhodi akúsi chybu, nejaky sql error, kontaktoval som s tym už aj rudyho, no stále tu sem ten log nechce ísť, akonahle ho sem vložim, tie smajliky hýbajuce sa naľavo výrazne spomalia. a log sa neodošle a vypíše chybu. ak chcete, pošlem vám aj screen toho sql...takže log z farbar pridávam ako .zip.

V poradku - moje chyba, ze vam to pri vkladani logu hazelo error. Pozor, pri ukladani fixlistu musite zvolit kodovani na UTF-8!

Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
znovu spustte FRST a kliknete na Fix

po restartu bude na plose ulozen fixlog, jehoz obsah vlozte do pristi odpovedi

Kód: Vybrat vše

Start
CreateRestorePoint:
CloseProcesses:
C:\ProgramData\Windows Update
C:\ProgramData\hp.exe
C:\Users\eduar\AppData\Roaming\dlg
R1 UCGuard; C:\Windows\System32\DRIVERS\ucguard.sys [89840 2016-01-26] (Huorong Borui (Beijing) Technology Co., Ltd.)
2016-04-10 11:05 - 2016-04-10 11:05 - 00005120 _____ C:\Users\eduar\AppData\Roaming\GiftBag.db
2016-04-10 11:05 - 2016-04-10 11:04 - 00132344 _____ (Tencent Technology(Shenzhen) Company Limited) C:\WINDOWS\system32\Drivers\TAOKernelEx64.sys
2016-04-10 10:45 - 2016-04-10 10:45 - 00000000 ____D C:\Users\eduar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UC浏览器
2016-04-10 10:44 - 2016-04-13 11:36 - 00000466 _____ C:\WINDOWS\Tasks\UCBrowserUpdater.job
2016-04-10 10:44 - 2016-04-10 10:44 - 00003484 _____ C:\WINDOWS\System32\Tasks\UCBrowserUpdater
2016-04-10 10:44 - 2016-04-10 10:44 - 00000000 ____D C:\Users\eduar\AppData\Local\UCBrowser
2016-04-10 10:44 - 2016-01-26 06:38 - 00089840 _____ (Huorong Borui (Beijing) Technology Co., Ltd.) C:\WINDOWS\system32\Drivers\ucguard.sys
2016-04-10 10:43 - 2016-04-10 10:58 - 00000000 ____D C:\Users\eduar\AppData\Local\app
2016-04-10 10:40 - 2016-04-10 10:40 - 00016815 _____ C:\ProgramData\webad.xml
2016-04-10 10:40 - 2016-04-10 10:40 - 00000000 ____D C:\ProgramData\Windows Update
2016-04-10 10:40 - 2016-04-06 00:37 - 00114176 _____ C:\ProgramData\hp.exe
2016-04-10 10:39 - 2016-04-10 10:40 - 00000000 ____D C:\Users\eduar\AppData\Roaming\gplyra
Task: {CEB6ADED-8E57-4AD0-A306-047C25F444E0} - System32\Tasks\UCBrowserUpdater => C:\Program Files (x86)\UCBrowser\Application\update_task.exe
C:\Program Files (x86)\UCBrowser
EmptyTemp:
End

nech sa páči:

Fix result of Farbar Recovery Scan Tool (x64) Version:13-04-2016
Ran by eduar (2016-04-13 21:49:33) Run:3
Running from C:\Users\eduar\Desktop
Loaded Profiles: eduar (Available Profiles: eduar)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CreateRestorePoint:
CloseProcesses:
C:\ProgramData\Windows Update
C:\ProgramData\hp.exe
C:\Users\eduar\AppData\Roaming\dlg
R1 UCGuard; C:\Windows\System32\DRIVERS\ucguard.sys [89840 2016-01-26] (Huorong Borui (Beijing) Technology Co., Ltd.)
2016-04-10 11:05 - 2016-04-10 11:05 - 00005120 _____ C:\Users\eduar\AppData\Roaming\GiftBag.db
2016-04-10 11:05 - 2016-04-10 11:04 - 00132344 _____ (Tencent Technology(Shenzhen) Company Limited) C:\WINDOWS\system32\Drivers\TAOKernelEx64.sys
2016-04-10 10:45 - 2016-04-10 10:45 - 00000000 ____D C:\Users\eduar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UC浏览器
2016-04-10 10:44 - 2016-04-13 11:36 - 00000466 _____ C:\WINDOWS\Tasks\UCBrowserUpdater.job
2016-04-10 10:44 - 2016-04-10 10:44 - 00003484 _____ C:\WINDOWS\System32\Tasks\UCBrowserUpdater
2016-04-10 10:44 - 2016-04-10 10:44 - 00000000 ____D C:\Users\eduar\AppData\Local\UCBrowser
2016-04-10 10:44 - 2016-01-26 06:38 - 00089840 _____ (Huorong Borui (Beijing) Technology Co., Ltd.) C:\WINDOWS\system32\Drivers\ucguard.sys
2016-04-10 10:43 - 2016-04-10 10:58 - 00000000 ____D C:\Users\eduar\AppData\Local\app
2016-04-10 10:40 - 2016-04-10 10:40 - 00016815 _____ C:\ProgramData\webad.xml
2016-04-10 10:40 - 2016-04-10 10:40 - 00000000 ____D C:\ProgramData\Windows Update
2016-04-10 10:40 - 2016-04-06 00:37 - 00114176 _____ C:\ProgramData\hp.exe
2016-04-10 10:39 - 2016-04-10 10:40 - 00000000 ____D C:\Users\eduar\AppData\Roaming\gplyra
Task: {CEB6ADED-8E57-4AD0-A306-047C25F444E0} - System32\Tasks\UCBrowserUpdater => C:\Program Files (x86)\UCBrowser\Application\update_task.exe
C:\Program Files (x86)\UCBrowser
EmptyTemp:
End
*****************

Restore point was successfully created.
Processes closed successfully.
"C:\ProgramData\Windows Update" => not found.
"C:\ProgramData\hp.exe" => not found.
"C:\Users\eduar\AppData\Roaming\dlg" => not found.
UCGuard => service not found.
"C:\Users\eduar\AppData\Roaming\GiftBag.db" => not found.
"C:\WINDOWS\system32\Drivers\TAOKernelEx64.sys" => not found.
"C:\Users\eduar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UC浏览器" => not found.
"C:\WINDOWS\Tasks\UCBrowserUpdater.job" => not found.
"C:\WINDOWS\System32\Tasks\UCBrowserUpdater" => not found.
"C:\Users\eduar\AppData\Local\UCBrowser" => not found.
"C:\WINDOWS\system32\Drivers\ucguard.sys" => not found.
"C:\Users\eduar\AppData\Local\app" => not found.
"C:\ProgramData\webad.xml" => not found.
"C:\ProgramData\Windows Update" => not found.
"C:\ProgramData\hp.exe" => not found.
"C:\Users\eduar\AppData\Roaming\gplyra" => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CEB6ADED-8E57-4AD0-A306-047C25F444E0} => key not found.
C:\WINDOWS\System32\Tasks\UCBrowserUpdater => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UCBrowserUpdater => key not found.
"C:\Program Files (x86)\UCBrowser" => not found.
EmptyTemp: => 27.1 MB temporary data Removed.

The system needed a reboot.

==== End of Fixlog 21:49:39 ====

Vyborne, poprosim Vas o nove logy FRST.txt a Addition.txt

Dale popiste, jake problemy na PC pozorujete ted.

pozorujem, že po zadaní PIN kódu sa dlho spúšťa Win. Dlho sa to kolečko točí, a to mám SSD s dostatkom miesta.
log z frst:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-04-2016
Ran by eduar (administrator) on EDVO (13-04-2016 21:59:03)
Running from C:\Users\eduar\Desktop
Loaded Profiles: eduar (Available Profiles: eduar)
Platform: Windows 10 Pro Version 1511 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\Wireless Console 3\ASNB4LDRSvc.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [649608 2010-06-10] (ELAN Microelectronic Corp.)
HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [649608 2010-06-10] (ELAN Microelectronic Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595992 2016-03-21] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRS Premium Sound.lnk [2016-04-12]
ShortcutTarget: SRS Premium Sound.lnk -> C:\Windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe (Acresso Software Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 01 C:\WINDOWS\SysWOW64\napinsp.dll [55808 2015-10-30] (Microsoft Corporation)ATTENTION: LibraryPath should be "%SystemRoot%\system32\napinsp.dll"
Winsock: Catalog5 02 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70656 2015-10-30] (Microsoft Corporation)ATTENTION: LibraryPath should be "%SystemRoot%\system32\pnrpnsp.dll"
Winsock: Catalog5 03 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70656 2015-10-30] (Microsoft Corporation)ATTENTION: LibraryPath should be "%SystemRoot%\system32\pnrpnsp.dll"
Winsock: Catalog5 04 C:\WINDOWS\SysWOW64\NLAapi.dll [65024 2015-10-30] (Microsoft Corporation)ATTENTION: LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5 05 C:\WINDOWS\SysWOW64\mswsock.dll [312160 2015-10-30] (Microsoft Corporation)ATTENTION: LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
Winsock: Catalog5 06 C:\WINDOWS\SysWOW64\winrnr.dll [23552 2015-10-30] (Microsoft Corporation)ATTENTION: LibraryPath should be "%SystemRoot%\System32\winrnr.dll"
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{3fa29aad-1033-43eb-8048-46878ce844ee}: [NameServer] 156.154.70.25,156.154.71.25
Tcpip\..\Interfaces\{3fa29aad-1033-43eb-8048-46878ce844ee}: [DhcpNameServer] 8.8.8.8 8.8.4.4

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131048712800606928&GUID=00D8EE5A-172A-4603-9F2B-72BC24FCAC37
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131048712800623633&GUID=00D8EE5A-172A-4603-9F2B-72BC24FCAC37
HKU\S-1-5-21-1488272672-2433312044-1902149314-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.bing.com/
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_77\bin\ssv.dll [2016-03-24] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_77\bin\jp2ssv.dll [2016-03-24] (Oracle Corporation)

Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-1488272672-2433312044-1902149314-1001 -> hxxps://www.bing.com/

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.77.2 -> C:\Program Files\Java\jre1.8.0_77\bin\dtplugin\npDeployJava1.dll [2016-03-24] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.77.2 -> C:\Program Files\Java\jre1.8.0_77\bin\plugin2\npjp2.dll [2016-03-24] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ASNB4LDRSvc; C:\Program Files (x86)\ASUS\Wireless Console 3\ASNB4LDRSvc.exe [33912 2014-10-01] (ASUS)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [144072 2015-10-07] (ELAN Microelectronics Corp.)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [178312 2015-10-09] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\System32\drivers\athwnx.sys [4207104 2015-10-30] (Qualcomm Atheros Communications, Inc.)
R1 mbamchameleon; C:\WINDOWS\system32\drivers\mbamchameleon.sys [140672 2016-04-10] (Malwarebytes)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-04-13] (Malwarebytes)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
R3 NETJME; C:\Windows\System32\drivers\NETJME.sys [137728 2015-10-30] (JMicron Technology Corp.)
R3 SNP2UVC; C:\Windows\system32\DRIVERS\snp2uvc.sys [1800192 2009-08-20] ()
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-13 21:59 - 2016-04-13 21:59 - 00008673 _____ C:\Users\eduar\Desktop\FRST.txt
2016-04-13 21:49 - 2016-04-13 21:49 - 00003385 _____ C:\Users\eduar\Desktop\Fixlog.txt
2016-04-13 17:21 - 2016-04-13 21:26 - 00029696 _____ C:\Users\eduar\AppData\Local\MSGBOX.EXE
2016-04-13 16:32 - 2016-04-13 21:59 - 00000000 ____D C:\FRST
2016-04-13 16:29 - 2016-04-13 16:31 - 00112640 _____ (forum.viry.cz) C:\Users\eduar\Desktop\FRSTLauncher.exe
2016-04-13 16:28 - 2016-04-13 21:15 - 02375168 _____ (Farbar) C:\Users\eduar\Desktop\FRST64.exe
2016-04-13 08:51 - 2016-04-13 08:51 - 00570920 _____ C:\Users\eduar\Downloads\download-audiograbber.exe
2016-04-12 22:50 - 2016-03-29 12:20 - 07474016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-04-12 22:50 - 2016-03-29 12:20 - 02656952 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-04-12 22:50 - 2016-03-29 12:18 - 02152280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-04-12 22:50 - 2016-03-29 11:37 - 01862008 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-04-12 22:50 - 2016-03-29 10:41 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-04-12 22:50 - 2016-03-29 10:06 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-04-12 22:50 - 2016-03-29 10:01 - 00541304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-04-12 22:50 - 2016-03-29 09:58 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2016-04-12 22:50 - 2016-03-29 09:58 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2016-04-12 22:50 - 2016-03-29 09:46 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-04-12 22:50 - 2016-03-29 09:36 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2016-04-12 22:50 - 2016-03-29 09:19 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-04-12 22:50 - 2016-03-29 09:15 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-04-12 22:50 - 2016-03-29 09:12 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2016-04-12 22:50 - 2016-03-29 09:12 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2016-04-12 22:50 - 2016-03-29 09:10 - 01388544 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-04-12 22:50 - 2016-03-29 09:07 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-04-12 22:50 - 2016-03-29 09:02 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-04-12 22:50 - 2016-03-29 08:42 - 03592704 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-04-12 22:50 - 2016-03-29 08:37 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-04-12 22:50 - 2016-03-29 08:32 - 01731584 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-04-12 22:50 - 2016-03-29 08:31 - 02275328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-04-12 22:50 - 2016-03-29 08:26 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-04-12 22:50 - 2016-03-29 08:05 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-04-12 22:50 - 2016-03-29 08:05 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-04-12 22:50 - 2016-03-29 08:02 - 02229760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-04-12 22:50 - 2016-03-29 07:51 - 22378496 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-04-12 22:50 - 2016-03-29 07:41 - 24602112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-04-12 22:50 - 2016-03-29 07:41 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-04-12 22:50 - 2016-03-29 07:39 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-04-12 22:50 - 2016-03-29 07:38 - 18673664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-04-12 22:50 - 2016-03-29 07:37 - 19340800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-04-12 22:49 - 2016-04-02 06:13 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2016-04-12 22:49 - 2016-04-02 06:10 - 00770640 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll
2016-04-12 22:49 - 2016-04-02 06:10 - 00730344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2016-04-12 22:49 - 2016-04-02 06:10 - 00374008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2016-04-12 22:49 - 2016-04-02 05:30 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2016-04-12 22:49 - 2016-04-02 05:29 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
2016-04-12 22:49 - 2016-04-02 05:29 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll
2016-04-12 22:49 - 2016-04-02 05:26 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2016-04-12 22:49 - 2016-04-02 05:25 - 00278528 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll
2016-04-12 22:49 - 2016-04-02 05:25 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NotificationObjFactory.dll
2016-04-12 22:49 - 2016-04-02 05:23 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2016-04-12 22:49 - 2016-04-02 05:23 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2016-04-12 22:49 - 2016-04-02 05:21 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2016-04-12 22:49 - 2016-04-02 05:19 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-04-12 22:49 - 2016-04-02 05:18 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-04-12 22:49 - 2016-04-02 05:15 - 01090048 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-04-12 22:49 - 2016-04-02 05:14 - 03994624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-04-12 22:49 - 2016-04-02 05:09 - 01832448 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-04-12 22:49 - 2016-04-02 05:08 - 02193408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2016-04-12 22:49 - 2016-04-02 05:07 - 03575296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-04-12 22:49 - 2016-04-02 05:07 - 02158592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-04-12 22:49 - 2016-04-02 05:03 - 04774912 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2016-04-12 22:49 - 2016-04-02 05:00 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-04-12 22:49 - 2016-03-29 12:23 - 00277856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2016-04-12 22:49 - 2016-03-29 12:22 - 01030416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-04-12 22:49 - 2016-03-29 12:22 - 00874968 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-04-12 22:49 - 2016-03-29 12:20 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-04-12 22:49 - 2016-03-29 12:20 - 01141504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-04-12 22:49 - 2016-03-29 12:15 - 00100232 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll
2016-04-12 22:49 - 2016-03-29 12:11 - 00686976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2016-04-12 22:49 - 2016-03-29 12:05 - 01152864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2016-04-12 22:49 - 2016-03-29 12:02 - 00989536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2016-04-12 22:49 - 2016-03-29 12:02 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2016-04-12 22:49 - 2016-03-29 11:56 - 01297752 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2016-04-12 22:49 - 2016-03-29 11:28 - 00696664 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-04-12 22:49 - 2016-03-29 11:28 - 00535080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2016-04-12 22:49 - 2016-03-29 11:28 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-04-12 22:49 - 2016-03-29 11:25 - 00258912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufx01000.sys
2016-04-12 22:49 - 2016-03-29 11:25 - 00058400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2016-04-12 22:49 - 2016-03-29 11:19 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2016-04-12 22:49 - 2016-03-29 11:18 - 00185184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2016-04-12 22:49 - 2016-03-29 11:17 - 00300104 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-04-12 22:49 - 2016-03-29 11:13 - 00986976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2016-04-12 22:49 - 2016-03-29 11:11 - 00605440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-04-12 22:49 - 2016-03-29 11:11 - 00074424 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe
2016-04-12 22:49 - 2016-03-29 11:10 - 00110584 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvcli.dll
2016-04-12 22:49 - 2016-03-29 11:09 - 00078040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkscli.dll
2016-04-12 22:49 - 2016-03-29 11:08 - 00358752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-04-12 22:49 - 2016-03-29 11:08 - 00261376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
2016-04-12 22:49 - 2016-03-29 11:07 - 00081144 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi32.dll
2016-04-12 22:49 - 2016-03-29 10:44 - 00502104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-04-12 22:49 - 2016-03-29 10:44 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-04-12 22:49 - 2016-03-29 10:41 - 00051128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.dll
2016-04-12 22:49 - 2016-03-29 10:32 - 00253088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-04-12 22:49 - 2016-03-29 10:26 - 02403680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2016-04-12 22:49 - 2016-03-29 10:26 - 01089888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2016-04-12 22:49 - 2016-03-29 10:26 - 00073872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srvcli.dll
2016-04-12 22:49 - 2016-03-29 10:25 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkscli.dll
2016-04-12 22:49 - 2016-03-29 10:24 - 00294752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-04-12 22:49 - 2016-03-29 10:23 - 00069744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netapi32.dll
2016-04-12 22:49 - 2016-03-29 10:21 - 00378208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2016-04-12 22:49 - 2016-03-29 10:17 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-04-12 22:49 - 2016-03-29 10:16 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
2016-04-12 22:49 - 2016-03-29 10:07 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2016-04-12 22:49 - 2016-03-29 10:07 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2016-04-12 22:49 - 2016-03-29 10:07 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2016-04-12 22:49 - 2016-03-29 10:07 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
2016-04-12 22:49 - 2016-03-29 10:07 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsdchngr.dll
2016-04-12 22:49 - 2016-03-29 10:06 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacchooks.dll
2016-04-12 22:49 - 2016-03-29 10:02 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2016-04-12 22:49 - 2016-03-29 10:00 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
2016-04-12 22:49 - 2016-03-29 10:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveskybackup.dll
2016-04-12 22:49 - 2016-03-29 10:00 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-04-12 22:49 - 2016-03-29 09:59 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe
2016-04-12 22:49 - 2016-03-29 09:57 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-04-12 22:49 - 2016-03-29 09:57 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2016-04-12 22:49 - 2016-03-29 09:57 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-04-12 22:49 - 2016-03-29 09:57 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\browcli.dll
2016-04-12 22:49 - 2016-03-29 09:55 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-04-12 22:49 - 2016-03-29 09:55 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\serial.sys
2016-04-12 22:49 - 2016-03-29 09:55 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
2016-04-12 22:49 - 2016-03-29 09:54 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
2016-04-12 22:49 - 2016-03-29 09:53 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll
2016-04-12 22:49 - 2016-03-29 09:52 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
2016-04-12 22:49 - 2016-03-29 09:51 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2016-04-12 22:49 - 2016-03-29 09:51 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2016-04-12 22:49 - 2016-03-29 09:50 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeHdCfgLib.dll
2016-04-12 22:49 - 2016-03-29 09:50 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2016-04-12 22:49 - 2016-03-29 09:50 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-04-12 22:49 - 2016-03-29 09:50 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll
2016-04-12 22:49 - 2016-03-29 09:50 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll
2016-04-12 22:49 - 2016-03-29 09:49 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2016-04-12 22:49 - 2016-03-29 09:48 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
2016-04-12 22:49 - 2016-03-29 09:48 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-04-12 22:49 - 2016-03-29 09:46 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser.dll
2016-04-12 22:49 - 2016-03-29 09:44 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll
2016-04-12 22:49 - 2016-03-29 09:42 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-04-12 22:49 - 2016-03-29 09:39 - 00550912 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-04-12 22:49 - 2016-03-29 09:38 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-04-12 22:49 - 2016-03-29 09:37 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-04-12 22:49 - 2016-03-29 09:36 - 00530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2016-04-12 22:49 - 2016-03-29 09:35 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacc.dll
2016-04-12 22:49 - 2016-03-29 09:35 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll
2016-04-12 22:49 - 2016-03-29 09:34 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2016-04-12 22:49 - 2016-03-29 09:34 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-04-12 22:49 - 2016-03-29 09:34 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2016-04-12 22:49 - 2016-03-29 09:34 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2016-04-12 22:49 - 2016-03-29 09:33 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2016-04-12 22:49 - 2016-03-29 09:32 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-04-12 22:49 - 2016-03-29 09:32 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-04-12 22:49 - 2016-03-29 09:30 - 00328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2016-04-12 22:49 - 2016-03-29 09:30 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll
2016-04-12 22:49 - 2016-03-29 09:28 - 00460288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-04-12 22:49 - 2016-03-29 09:27 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2016-04-12 22:49 - 2016-03-29 09:26 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2016-04-12 22:49 - 2016-03-29 09:23 - 00694784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2016-04-12 22:49 - 2016-03-29 09:23 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2016-04-12 22:49 - 2016-03-29 09:23 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-04-12 22:49 - 2016-03-29 09:22 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll
2016-04-12 22:49 - 2016-03-29 09:21 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-04-12 22:49 - 2016-03-29 09:20 - 00948736 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-04-12 22:49 - 2016-03-29 09:20 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
2016-04-12 22:49 - 2016-03-29 09:20 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.V2.dll
2016-04-12 22:49 - 2016-03-29 09:20 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsdchngr.dll
2016-04-12 22:49 - 2016-03-29 09:19 - 00556032 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-04-12 22:49 - 2016-03-29 09:19 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacchooks.dll
2016-04-12 22:49 - 2016-03-29 09:18 - 00676352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
2016-04-12 22:49 - 2016-03-29 09:17 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-04-12 22:49 - 2016-03-29 09:17 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2016-04-12 22:49 - 2016-03-29 09:17 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-04-12 22:49 - 2016-03-29 09:16 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-04-12 22:49 - 2016-03-29 09:16 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2016-04-12 22:49 - 2016-03-29 09:15 - 01714688 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2016-04-12 22:49 - 2016-03-29 09:14 - 00965632 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2016-04-12 22:49 - 2016-03-29 09:14 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-04-12 22:49 - 2016-03-29 09:13 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-04-12 22:49 - 2016-03-29 09:12 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2016-04-12 22:49 - 2016-03-29 09:11 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-04-12 22:49 - 2016-03-29 09:11 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2016-04-12 22:49 - 2016-03-29 09:11 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-04-12 22:49 - 2016-03-29 09:11 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
2016-04-12 22:49 - 2016-03-29 09:11 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-04-12 22:49 - 2016-03-29 09:11 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\browcli.dll
2016-04-12 22:49 - 2016-03-29 09:10 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-04-12 22:49 - 2016-03-29 09:09 - 01239552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2016-04-12 22:49 - 2016-03-29 09:09 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-04-12 22:49 - 2016-03-29 09:09 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
2016-04-12 22:49 - 2016-03-29 09:08 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2016-04-12 22:49 - 2016-03-29 09:08 - 00841216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2016-04-12 22:49 - 2016-03-29 09:08 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll
2016-04-12 22:49 - 2016-03-29 09:07 - 01902592 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2016-04-12 22:49 - 2016-03-29 09:06 - 01575936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2016-04-12 22:49 - 2016-03-29 09:06 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2016-04-12 22:49 - 2016-03-29 09:06 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
2016-04-12 22:49 - 2016-03-29 09:05 - 01395712 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2016-04-12 22:49 - 2016-03-29 09:05 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OnDemandConnRouteHelper.dll
2016-04-12 22:49 - 2016-03-29 09:04 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Devices.dll
2016-04-12 22:49 - 2016-03-29 09:03 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2016-04-12 22:49 - 2016-03-29 09:02 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-04-12 22:49 - 2016-03-29 09:02 - 01211904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2016-04-12 22:49 - 2016-03-29 09:00 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2016-04-12 22:49 - 2016-03-29 09:00 - 00235008 _____ C:\WINDOWS\system32\MTF.dll
2016-04-12 22:49 - 2016-03-29 09:00 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
2016-04-12 22:49 - 2016-03-29 09:00 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-04-12 22:49 - 2016-03-29 08:59 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2016-04-12 22:49 - 2016-03-29 08:59 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2016-04-12 22:49 - 2016-03-29 08:59 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2016-04-12 22:49 - 2016-03-29 08:56 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2016-04-12 22:49 - 2016-03-29 08:56 - 00415232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-04-12 22:49 - 2016-03-29 08:55 - 01052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2016-04-12 22:49 - 2016-03-29 08:53 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll
2016-04-12 22:49 - 2016-03-29 08:53 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
2016-04-12 22:49 - 2016-03-29 08:52 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2016-04-12 22:49 - 2016-03-29 08:52 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll
2016-04-12 22:49 - 2016-03-29 08:49 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
2016-04-12 22:49 - 2016-03-29 08:48 - 00346624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-04-12 22:49 - 2016-03-29 08:44 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2016-04-12 22:49 - 2016-03-29 08:43 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AccountsRt.dll
2016-04-12 22:49 - 2016-03-29 08:42 - 01410560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2016-04-12 22:49 - 2016-03-29 08:42 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-04-12 22:49 - 2016-03-29 08:41 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
2016-04-12 22:49 - 2016-03-29 08:40 - 00787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2016-04-12 22:49 - 2016-03-29 08:39 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll
2016-04-12 22:49 - 2016-03-29 08:39 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2016-04-12 22:49 - 2016-03-29 08:39 - 00350720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-04-12 22:49 - 2016-03-29 08:38 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-04-12 22:49 - 2016-03-29 08:37 - 01444352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2016-04-12 22:49 - 2016-03-29 08:37 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2016-04-12 22:49 - 2016-03-29 08:36 - 03351040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2016-04-12 22:49 - 2016-03-29 08:36 - 00649728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2016-04-12 22:49 - 2016-03-29 08:35 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2016-04-12 22:49 - 2016-03-29 08:34 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-04-12 22:49 - 2016-03-29 08:34 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-04-12 22:49 - 2016-03-29 08:34 - 00682496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2016-04-12 22:49 - 2016-03-29 08:34 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2016-04-12 22:49 - 2016-03-29 08:32 - 01588224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2016-04-12 22:49 - 2016-03-29 08:32 - 01098240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2016-04-12 22:49 - 2016-03-29 08:32 - 00854528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2016-04-12 22:49 - 2016-03-29 08:32 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2016-04-12 22:49 - 2016-03-29 08:32 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2016-04-12 22:49 - 2016-03-29 08:32 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2016-04-12 22:49 - 2016-03-29 08:32 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll
2016-04-12 22:49 - 2016-03-29 08:31 - 01946112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-04-12 22:49 - 2016-03-29 08:31 - 01117184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2016-04-12 22:49 - 2016-03-29 08:31 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2016-04-12 22:49 - 2016-03-29 08:30 - 01139712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2016-04-12 22:49 - 2016-03-29 08:29 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
2016-04-12 22:49 - 2016-03-29 08:29 - 00256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll
2016-04-12 22:49 - 2016-03-29 08:28 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-04-12 22:49 - 2016-03-29 08:28 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2016-04-12 22:49 - 2016-03-29 08:27 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-04-12 22:49 - 2016-03-29 08:27 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2016-04-12 22:49 - 2016-03-29 08:27 - 00162816 _____ C:\WINDOWS\SysWOW64\MTF.dll
2016-04-12 22:49 - 2016-03-29 08:27 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2016-04-12 22:49 - 2016-03-29 08:27 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2016-04-12 22:49 - 2016-03-29 08:23 - 00777728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2016-04-12 22:49 - 2016-03-29 08:22 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2016-04-12 22:49 - 2016-03-29 08:19 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-04-12 22:49 - 2016-03-29 08:17 - 00765952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2016-04-12 22:49 - 2016-03-29 08:14 - 01072128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2016-04-12 22:49 - 2016-03-29 08:13 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2016-04-12 22:49 - 2016-03-29 08:10 - 03671040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2016-04-12 22:49 - 2016-03-29 08:06 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2016-04-12 22:49 - 2016-03-29 08:05 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-04-12 22:49 - 2016-03-29 08:05 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-04-12 22:49 - 2016-03-29 08:05 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll
2016-04-12 22:49 - 2016-03-29 08:05 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2016-04-12 22:49 - 2016-03-29 08:04 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2016-04-12 22:49 - 2016-03-29 08:04 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2016-04-12 22:49 - 2016-03-29 08:01 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-04-12 22:49 - 2016-03-29 08:01 - 00957952 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2016-04-12 22:49 - 2016-03-29 08:00 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-04-12 22:49 - 2016-03-29 07:58 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-04-12 22:49 - 2016-03-29 07:56 - 16985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-04-12 22:49 - 2016-03-29 07:52 - 11545600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-04-12 22:49 - 2016-03-29 07:51 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-04-12 22:49 - 2016-03-29 07:49 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-04-12 22:49 - 2016-03-29 07:45 - 03078144 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2016-04-12 22:49 - 2016-03-29 07:45 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll
2016-04-12 22:49 - 2016-03-29 07:43 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-04-12 22:49 - 2016-03-29 07:43 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2016-04-12 22:49 - 2016-03-29 07:38 - 02798080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-04-12 22:49 - 2016-03-29 07:36 - 02722816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2016-04-12 22:49 - 2016-03-29 07:35 - 00821248 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2016-04-12 22:49 - 2016-03-29 07:28 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
2016-04-12 22:49 - 2016-03-29 07:27 - 07836160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-04-12 22:49 - 2016-03-29 07:27 - 05662208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-04-12 22:49 - 2016-03-29 07:27 - 00794112 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2016-04-12 22:49 - 2016-03-29 07:26 - 00958976 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2016-04-12 22:49 - 2016-03-29 07:26 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2016-04-12 22:49 - 2016-03-29 07:25 - 00712704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll
2016-04-12 22:49 - 2016-03-29 07:25 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2016-04-12 22:49 - 2016-03-29 07:21 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\basesrv.dll
2016-04-11 18:42 - 2016-04-11 18:42 - 00000000 ____D C:\Users\eduar\AppData\Local\Apps\2.0
2016-04-10 20:23 - 2016-04-10 20:23 - 00000000 ____D C:\Users\eduar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6
2016-04-10 20:21 - 2016-04-13 20:40 - 00000000 ____D C:\Counter-Strike 1.6
2016-04-10 17:43 - 2016-04-10 17:43 - 00003646 _____ C:\WINDOWS\System32\Tasks\ATK Package 36D18D69AFC3
2016-04-10 16:02 - 2016-04-10 16:02 - 00066560 _____ C:\~ccetmp.dat
2016-04-10 15:32 - 2016-04-10 10:30 - 00001006 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ccebak
2016-04-10 12:52 - 2016-04-10 12:59 - 222776824 _____ (COMODO) C:\Users\eduar\Downloads\cispremium_installer.exe
2016-04-10 12:17 - 2016-04-10 12:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-04-10 12:15 - 2016-04-10 12:15 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-04-10 12:15 - 2016-04-10 12:15 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-04-10 11:54 - 2016-04-13 21:50 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-04-10 11:54 - 2016-04-10 13:02 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-04-10 11:54 - 2016-04-10 11:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-04-10 11:54 - 2016-04-10 11:54 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-04-10 11:54 - 2016-04-10 11:54 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-04-10 11:54 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-04-10 11:54 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-04-10 11:49 - 2016-04-10 15:30 - 00000000 ____D C:\Users\eduar\Desktop\cce_2.5.242177.201_x64
2016-04-10 11:41 - 2016-04-10 11:41 - 00016812 _____ C:\Users\eduar\Desktop\breberky.txt
2016-04-10 10:36 - 2016-04-10 13:00 - 00000290 __RSH C:\ProgramData\ntuser.pol
2016-04-10 10:35 - 2016-04-10 10:36 - 00000000 ____D C:\Users\Public\Documents\dmp
2016-04-10 10:31 - 2016-04-10 10:30 - 00001006 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
2016-04-08 23:02 - 2016-04-12 08:49 - 00001033 _____ C:\Users\eduar\AppData\Roaming\Microsoft\Windows\Start Menu\Viber.lnk
2016-04-08 23:02 - 2016-04-08 23:02 - 00000000 ____D C:\Users\eduar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Viber
2016-04-08 23:02 - 2016-04-08 23:02 - 00000000 ____D C:\Users\eduar\AppData\Local\Viber
2016-04-06 22:23 - 2016-04-06 22:23 - 00597304 _____ C:\Users\eduar\Downloads\flux-setup.exe
2016-04-01 20:19 - 2016-04-01 20:19 - 00000379 _____ C:\Users\eduar\Downloads\smil.xml
2016-03-31 21:23 - 2016-03-31 21:23 - 00302011 _____ C:\Users\eduar\Downloads\WindowsUpdateDiagnostic.diagcab
2016-03-31 21:07 - 2016-03-31 21:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 5.0
2016-03-31 21:06 - 2016-03-31 21:07 - 00000000 ____D C:\Program Files\LibreOffice 5
2016-03-31 18:37 - 2016-03-31 18:37 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2016-03-31 18:37 - 2016-03-31 18:37 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2016-03-31 17:34 - 2016-03-31 17:34 - 00000000 ____D C:\Users\eduar\Documents\Poznámkové bloky programu OneNote
2016-03-31 17:29 - 2016-04-10 17:39 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2016-03-31 17:23 - 2016-03-31 17:24 - 00000000 ____D C:\ProgramData\Microsoft Toolkit
2016-03-31 17:09 - 2016-03-31 21:04 - 00000000 ____D C:\Program Files\Microsoft Office
2016-03-31 17:09 - 2016-03-31 17:09 - 00000000 ____D C:\Users\eduar\AppData\Local\Microsoft Help
2016-03-30 18:04 - 2016-03-30 18:04 - 00000000 ____D C:\WINDOWS\pss
2016-03-26 16:56 - 2016-03-26 16:56 - 00000000 ____D C:\Users\eduar\Downloads\Temný-případ---True-Detective-E01-08S01-TV-seriál-2014,-CZ
2016-03-25 10:46 - 2016-03-25 10:46 - 00000000 ____D C:\Users\eduar\Tracing
2016-03-25 10:45 - 2016-04-09 23:13 - 00000000 ____D C:\Users\eduar\AppData\Roaming\Skype
2016-03-25 10:45 - 2016-04-05 18:57 - 00000000 ____D C:\ProgramData\Skype
2016-03-25 10:45 - 2016-03-25 10:55 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-03-25 10:45 - 2016-03-25 10:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-03-25 10:39 - 2016-03-25 10:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS Utility
2016-03-25 08:57 - 2016-03-29 10:40 - 00000000 ____D C:\Users\eduar\AppData\Local\Google
2016-03-24 21:31 - 2016-03-25 10:38 - 00003834 _____ C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2016-03-24 21:31 - 2016-03-24 21:31 - 00003604 _____ C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon
2016-03-24 10:23 - 2016-03-24 10:23 - 00000000 ____D C:\Users\eduar\AppData\Roaming\Sun
2016-03-24 10:23 - 2016-03-24 10:23 - 00000000 ____D C:\Users\eduar\AppData\LocalLow\Sun
2016-03-24 10:23 - 2016-03-24 10:23 - 00000000 ____D C:\Users\eduar\.oracle_jre_usage
2016-03-24 10:23 - 2016-03-24 10:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-03-24 10:23 - 2016-03-24 10:22 - 00110144 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2016-03-24 10:22 - 2016-03-24 10:23 - 00000000 ____D C:\ProgramData\Oracle
2016-03-24 10:22 - 2016-03-24 10:22 - 00000000 ____D C:\Users\eduar\AppData\LocalLow\Oracle
2016-03-24 10:22 - 2016-03-24 10:22 - 00000000 ____D C:\Program Files\Java
2016-03-23 10:37 - 2016-03-23 10:37 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-03-23 10:22 - 2016-04-04 15:50 - 00015167 _____ C:\Users\eduar\Desktop\životopis.odt
2016-03-23 10:22 - 2016-04-04 15:49 - 00017946 _____ C:\Users\eduar\Desktop\žiadosť.odt
2016-03-22 22:35 - 2016-03-22 22:35 - 00000000 ____D C:\Users\eduar\AppData\Roaming\MPC-HC
2016-03-22 22:35 - 2016-03-22 22:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC x64
2016-03-22 22:35 - 2016-03-22 22:35 - 00000000 ____D C:\Program Files\MPC-HC
2016-03-22 18:30 - 2016-03-22 18:31 - 00000000 ____D C:\Users\eduar\AppData\Roaming\Stellarium
2016-03-22 18:30 - 2016-03-22 18:30 - 00000000 ____D C:\Users\eduar\AppData\Local\stellarium
2016-03-22 16:56 - 2016-04-05 09:08 - 00000000 ____D C:\Users\eduar\Documents\ViberDownloads
2016-03-22 16:55 - 2016-04-11 11:04 - 00000000 ____D C:\Users\eduar\AppData\Roaming\ViberPC
2016-03-22 16:55 - 2016-04-08 23:02 - 00000000 ____D C:\Users\eduar\AppData\Local\Package Cache
2016-03-22 14:14 - 2016-03-22 14:14 - 00000000 ____D C:\Users\eduar\AppData\Local\PeerDistRepub
2016-03-22 14:13 - 2016-03-31 18:36 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-22 14:13 - 2016-03-22 14:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stellarium
2016-03-22 14:13 - 2016-03-22 14:13 - 00000000 ____D C:\Program Files\Stellarium
2016-03-22 13:27 - 2016-03-22 13:27 - 00000000 ____D C:\ProgramData\Intel
2016-03-22 13:12 - 2016-03-22 13:12 - 00000000 ____D C:\Users\eduar\AppData\Roaming\LibreOffice
2016-03-22 13:10 - 2016-03-24 21:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2016-03-22 13:10 - 2016-03-22 13:10 - 00000000 ____D C:\ProgramData\Intel(R) Update Manager
2016-03-22 12:30 - 2016-03-22 12:30 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2016-03-22 12:11 - 2016-03-22 12:11 - 00000021 _____ C:\Users\eduar\AppData\Roaming\my_intel.sys
2016-03-22 12:10 - 2016-04-13 17:13 - 00000081 _____ C:\Users\eduar\AppData\Roaming\sp_data.sys
2016-03-22 12:08 - 2016-03-22 12:08 - 00000000 ____D C:\ProgramData\Atheros
2016-03-22 12:07 - 2016-03-22 12:07 - 00003060 _____ C:\WINDOWS\System32\Tasks\ASUS Splendid ACMON
2016-03-22 12:05 - 2016-04-10 17:43 - 00000000 ____D C:\Program Files (x86)\ASUS
2016-03-22 11:59 - 2010-05-11 11:56 - 02401307 _____ (Macrovision Corporation) C:\WINDOWS\snuninst.exe
2016-03-22 11:59 - 2009-08-21 11:55 - 00375808 _____ (Sonix) C:\WINDOWS\system32\vsnp2uvc.dll
2016-03-22 11:59 - 2009-08-21 11:55 - 00306176 _____ (Sonix) C:\WINDOWS\SysWOW64\vsnp2uvc.dll
2016-03-22 11:59 - 2009-08-20 11:41 - 01800192 _____ () C:\WINDOWS\system32\Drivers\snp2uvc.sys
2016-03-22 11:59 - 2009-07-21 13:08 - 00013021 _____ C:\WINDOWS\snp2uvc.src
2016-03-22 11:59 - 2009-02-16 19:33 - 00306176 _____ ( ) C:\WINDOWS\system32\csnp2uvc.dll
2016-03-22 11:59 - 2008-12-29 18:14 - 00035456 _____ C:\WINDOWS\system32\Drivers\sncduvc.sys
2016-03-22 11:59 - 2006-05-19 12:39 - 00015497 _____ C:\WINDOWS\snp2uvc.ini
2016-03-22 11:56 - 2016-04-10 17:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2016-03-22 11:56 - 2016-03-22 11:56 - 00003106 _____ C:\WINDOWS\System32\Tasks\ASUS P4G
2016-03-22 11:56 - 2016-03-22 11:56 - 00000000 ____D C:\Users\eduar\AppData\Local\ASUS
2016-03-22 11:56 - 2016-03-22 11:56 - 00000000 ____D C:\ProgramData\P4G
2016-03-22 11:56 - 2016-03-22 11:56 - 00000000 ____D C:\Program Files\ASUS
2016-03-22 11:53 - 2010-10-12 17:44 - 04674952 _____ (ELAN Microelectronics Corp.) C:\WINDOWS\system32\ETDUI.cpl
2016-03-22 11:50 - 2016-03-22 11:50 - 00000000 ____D C:\Users\eduar\AppData\Local\SRS Labs
2016-03-22 11:50 - 2016-03-22 11:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SRS Labs
2016-03-22 11:50 - 2016-03-22 11:50 - 00000000 ____D C:\Program Files\SRS Labs
2016-03-22 11:47 - 2016-03-22 11:47 - 00000000 ____D C:\Program Files (x86)\JMicron
2016-03-22 11:47 - 2009-08-19 08:23 - 00143472 _____ (JMicron Technology Corporation) C:\WINDOWS\system32\Drivers\jmcr.sys
2016-03-22 11:47 - 2008-05-15 11:53 - 00110080 _____ (JMicron Technology Corporation) C:\WINDOWS\system32\jmcricon.dll
2016-03-22 11:37 - 2016-03-22 11:50 - 00000000 ____D C:\Program Files\CONEXANT
2016-03-22 11:37 - 2016-03-22 11:37 - 00000000 ____D C:\WINDOWS\system32\SRSLabs
2016-03-22 11:36 - 2010-04-07 14:29 - 00443960 _____ (Conexant Systems, Inc.) C:\WINDOWS\system32\UCI64A56.dll
2016-03-22 11:36 - 2010-01-18 18:45 - 00717368 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\Drivers\CHDRT64.sys
2016-03-22 11:36 - 2009-11-18 15:49 - 01787392 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CX64AP25.dll
2016-03-22 11:35 - 2010-02-23 16:34 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\WINDOWS\SysWOW64\CSVer.dll
2016-03-22 11:30 - 2016-04-10 19:59 - 00000000 ____D C:\Users\eduar\AppData\Local\ElevatedDiagnostics
2016-03-22 11:25 - 2016-04-13 16:28 - 00004212 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{50E0791F-D2D8-468D-ABC1-A7870895FE4E}
2016-03-22 11:06 - 2016-03-22 11:06 - 00000000 ____D C:\Users\eduar\AppData\Roaming\Macromedia
2016-03-22 10:59 - 2016-03-22 10:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2016-03-22 10:59 - 2016-03-22 10:59 - 00000000 ____D C:\Program Files\7-Zip
2016-03-22 10:59 - 2016-03-01 07:31 - 00848168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-03-22 10:59 - 2016-03-01 07:22 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-03-22 10:59 - 2016-02-24 11:52 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-03-22 10:59 - 2016-02-24 11:48 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-03-22 10:59 - 2016-02-24 11:47 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-03-22 10:59 - 2016-02-24 11:40 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-03-22 10:59 - 2016-02-24 11:34 - 01613664 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-03-22 10:59 - 2016-02-24 11:28 - 03449168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2016-03-22 10:59 - 2016-02-24 11:15 - 01557768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-03-22 10:59 - 2016-02-24 10:58 - 00794888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2016-03-22 10:59 - 2016-02-24 10:54 - 00127840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2016-03-22 10:59 - 2016-02-24 10:51 - 01322248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-03-22 10:59 - 2016-02-24 10:50 - 00808800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-03-22 10:59 - 2016-02-24 10:46 - 06607080 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-03-22 10:59 - 2016-02-24 10:39 - 00141560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe
2016-03-22 10:59 - 2016-02-24 10:19 - 00670928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2016-03-22 10:59 - 2016-02-24 10:14 - 00216416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2016-03-22 10:59 - 2016-02-24 10:11 - 01997152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-03-22 10:59 - 2016-02-24 10:11 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-03-22 10:59 - 2016-02-24 10:11 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-03-22 10:59 - 2016-02-24 10:11 - 00652392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2016-03-22 10:59 - 2016-02-24 10:11 - 00394080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-03-22 10:59 - 2016-02-24 10:11 - 00258280 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqmapi.dll
2016-03-22 10:59 - 2016-02-24 10:10 - 00576864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-03-22 10:59 - 2016-02-24 10:09 - 00640472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2016-03-22 10:59 - 2016-02-24 10:09 - 00147808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2016-03-22 10:59 - 2016-02-24 10:06 - 05242496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-03-22 10:59 - 2016-02-24 09:39 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTypeHelperUtil.dll
2016-03-22 10:59 - 2016-02-24 09:39 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExtrasXmlParser.dll
2016-03-22 10:59 - 2016-02-24 09:38 - 00187744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2016-03-22 10:59 - 2016-02-24 09:38 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2016-03-22 10:59 - 2016-02-24 09:37 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataLanguageUtil.dll
2016-03-22 10:59 - 2016-02-24 09:36 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenanceClient.dll
2016-03-22 10:59 - 2016-02-24 09:35 - 00523752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2016-03-22 10:59 - 2016-02-24 09:35 - 00220064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqmapi.dll
2016-03-22 10:59 - 2016-02-24 09:33 - 00538736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2016-03-22 10:59 - 2016-02-24 09:33 - 00141664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2016-03-22 10:59 - 2016-02-24 09:30 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll
2016-03-22 10:59 - 2016-02-24 09:28 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\POSyncServices.dll
2016-03-22 10:59 - 2016-02-24 09:23 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2016-03-22 10:59 - 2016-02-24 09:23 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataPlatformHelperUtil.dll
2016-03-22 10:59 - 2016-02-24 09:22 - 00196608 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2016-03-22 10:59 - 2016-02-24 09:20 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\system32\VCardParser.dll
2016-03-22 10:59 - 2016-02-24 09:19 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2016-03-22 10:59 - 2016-02-24 09:19 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\seclogon.dll
2016-03-22 10:59 - 2016-02-24 09:14 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll
2016-03-22 10:59 - 2016-02-24 09:13 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
2016-03-22 10:59 - 2016-02-24 09:12 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\cemapi.dll
2016-03-22 10:59 - 2016-02-24 09:12 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2016-03-22 10:59 - 2016-02-24 09:10 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll
2016-03-22 10:59 - 2016-02-24 09:09 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll
2016-03-22 10:59 - 2016-02-24 09:09 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSip.dll
2016-03-22 10:59 - 2016-02-24 09:07 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
2016-03-22 10:59 - 2016-02-24 09:03 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-03-22 10:59 - 2016-02-24 09:02 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallHistoryClient.dll
2016-03-22 10:59 - 2016-02-24 09:01 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2016-03-22 10:59 - 2016-02-24 09:01 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll
2016-03-22 10:59 - 2016-02-24 09:00 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2016-03-22 10:59 - 2016-02-24 08:59 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2016-03-22 10:59 - 2016-02-24 08:59 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll
2016-03-22 10:59 - 2016-02-24 08:59 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2016-03-22 10:59 - 2016-02-24 08:58 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\scapi.dll
2016-03-22 10:59 - 2016-02-24 08:55 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2016-03-22 10:59 - 2016-02-24 08:55 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2016-03-22 10:59 - 2016-02-24 08:55 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExtrasXmlParser.dll
2016-03-22 10:59 - 2016-02-24 08:54 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2016-03-22 10:59 - 2016-02-24 08:54 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll
2016-03-22 10:59 - 2016-02-24 08:54 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2016-03-22 10:59 - 2016-02-24 08:54 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTypeHelperUtil.dll
2016-03-22 10:59 - 2016-02-24 08:53 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2016-03-22 10:59 - 2016-02-24 08:53 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataLanguageUtil.dll
2016-03-22 10:59 - 2016-02-24 08:52 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2016-03-22 10:59 - 2016-02-24 08:52 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PimIndexMaintenanceClient.dll
2016-03-22 10:59 - 2016-02-24 08:49 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
2016-03-22 10:59 - 2016-02-24 08:46 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfapigp.dll
2016-03-22 10:59 - 2016-02-24 08:44 - 00915456 _____ (Microsoft Corporation) C:\WINDOWS\system32\configurationclient.dll
2016-03-22 10:59 - 2016-02-24 08:44 - 00700416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
2016-03-22 10:59 - 2016-02-24 08:44 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\POSyncServices.dll
2016-03-22 10:59 - 2016-02-24 08:43 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2016-03-22 10:59 - 2016-02-24 08:41 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2016-03-22 10:59 - 2016-02-24 08:41 - 00436736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-03-22 10:59 - 2016-02-24 08:40 - 01224704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2016-03-22 10:59 - 2016-02-24 08:40 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2016-03-22 10:59 - 2016-02-24 08:40 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataPlatformHelperUtil.dll
2016-03-22 10:59 - 2016-02-24 08:39 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2016-03-22 10:59 - 2016-02-24 08:38 - 00150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VCardParser.dll
2016-03-22 10:59 - 2016-02-24 08:36 - 01847808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2016-03-22 10:59 - 2016-02-24 08:34 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2016-03-22 10:59 - 2016-02-24 08:32 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll
2016-03-22 10:59 - 2016-02-24 08:32 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll
2016-03-22 10:59 - 2016-02-24 08:31 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cemapi.dll
2016-03-22 10:59 - 2016-02-24 08:31 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll
2016-03-22 10:59 - 2016-02-24 08:28 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2016-03-22 10:59 - 2016-02-24 08:28 - 00196608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2016-03-22 10:59 - 2016-02-24 08:28 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxSip.dll
2016-03-22 10:59 - 2016-02-24 08:25 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\sharemediacpl.dll
2016-03-22 10:59 - 2016-02-24 08:23 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallHistoryClient.dll
2016-03-22 10:59 - 2016-02-24 08:22 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll
2016-03-22 10:59 - 2016-02-24 08:21 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2016-03-22 10:59 - 2016-02-24 08:21 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2016-03-22 10:59 - 2016-02-24 08:18 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2016-03-22 10:59 - 2016-02-24 08:18 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2016-03-22 10:59 - 2016-02-24 08:18 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2016-03-22 10:59 - 2016-02-24 08:17 - 00369664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2016-03-22 10:59 - 2016-02-24 08:16 - 00394752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2016-03-22 10:59 - 2016-02-24 08:13 - 00540160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
2016-03-22 10:59 - 2016-02-24 08:09 - 00552960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
2016-03-22 10:59 - 2016-02-24 08:09 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2016-03-22 10:59 - 2016-02-24 08:07 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2016-03-22 10:59 - 2016-02-24 08:07 - 00890368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2016-03-22 10:59 - 2016-02-24 08:07 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2016-03-22 10:59 - 2016-02-24 08:04 - 01497088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2016-03-22 10:59 - 2016-02-24 08:03 - 00769536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2016-03-22 10:59 - 2016-02-24 07:55 - 01996288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-03-22 10:59 - 2016-02-24 07:43 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwbase.dll
2016-03-22 10:59 - 2016-02-24 07:34 - 01707520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-03-22 10:59 - 2016-02-24 07:22 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwbase.dll
2016-03-22 10:59 - 2016-02-24 07:12 - 05321728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-03-22 10:59 - 2016-02-24 07:09 - 06972416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-03-22 10:59 - 2016-02-24 07:05 - 12586496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-03-22 10:59 - 2016-02-24 07:03 - 14252544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-03-22 10:59 - 2016-02-23 13:25 - 01818696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-03-22 10:59 - 2016-02-23 13:15 - 00779384 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2016-03-22 10:59 - 2016-02-23 12:34 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-03-22 10:59 - 2016-02-23 12:33 - 00389992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2016-03-22 10:59 - 2016-02-23 12:32 - 08705672 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-03-22 10:59 - 2016-02-23 12:32 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-03-22 10:59 - 2016-02-23 12:32 - 01152328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-03-22 10:59 - 2016-02-23 12:32 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-03-22 10:59 - 2016-02-23 12:32 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-03-22 10:59 - 2016-02-23 12:31 - 01017032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-03-22 10:59 - 2016-02-23 12:31 - 00819648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-03-22 10:59 - 2016-02-23 12:31 - 00536256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-03-22 10:59 - 2016-02-23 12:31 - 00476728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2016-03-22 10:59 - 2016-02-23 12:31 - 00408120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2016-03-22 10:59 - 2016-02-23 12:25 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-03-22 10:59 - 2016-02-23 12:22 - 00572272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2016-03-22 10:59 - 2016-02-23 12:21 - 22564328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-03-22 10:59 - 2016-02-23 12:17 - 00146272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2016-03-22 10:59 - 2016-02-23 11:45 - 02773096 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2016-03-22 10:59 - 2016-02-23 11:40 - 00430944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2016-03-22 10:59 - 2016-02-23 11:38 - 06952088 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-03-22 10:59 - 2016-02-23 11:38 - 02180136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-03-22 10:59 - 2016-02-23 11:38 - 00980352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2016-03-22 10:59 - 2016-02-23 11:38 - 00895080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-03-22 10:59 - 2016-02-23 11:38 - 00882720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-03-22 10:59 - 2016-02-23 11:38 - 00450912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2016-03-22 10:59 - 2016-02-23 11:38 - 00420928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2016-03-22 10:59 - 2016-02-23 11:37 - 00713824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2016-03-22 10:59 - 2016-02-23 11:32 - 00791744 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-03-22 10:59 - 2016-02-23 11:30 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-03-22 10:59 - 2016-02-23 11:27 - 21124344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-03-22 10:59 - 2016-02-23 11:27 - 00376536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-03-22 10:59 - 2016-02-23 11:25 - 00534368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2016-03-22 10:59 - 2016-02-23 11:20 - 01139712 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSave.dll
2016-03-22 10:59 - 2016-02-23 11:20 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2016-03-22 10:59 - 2016-02-23 11:17 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2016-03-22 10:59 - 2016-02-23 11:12 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\provpackageapidll.dll
2016-03-22 10:59 - 2016-02-23 11:10 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2016-03-22 10:59 - 2016-02-23 11:07 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-03-22 10:59 - 2016-02-23 11:07 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2016-03-22 10:59 - 2016-02-23 11:06 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2016-03-22 10:59 - 2016-02-23 11:01 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys
2016-03-22 10:59 - 2016-02-23 11:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-03-22 10:59 - 2016-02-23 11:00 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2016-03-22 10:59 - 2016-02-23 10:58 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\irmon.dll
2016-03-22 10:59 - 2016-02-23 10:56 - 02186864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2016-03-22 10:59 - 2016-02-23 10:55 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2016-03-22 10:59 - 2016-02-23 10:53 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2016-03-22 10:59 - 2016-02-23 10:53 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll
2016-03-22 10:59 - 2016-02-23 10:52 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2016-03-22 10:59 - 2016-02-23 10:50 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-03-22 10:59 - 2016-02-23 10:48 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerClient.dll
2016-03-22 10:59 - 2016-02-23 10:40 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2016-03-22 10:59 - 2016-02-23 10:39 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2016-03-22 10:59 - 2016-02-23 10:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2016-03-22 10:59 - 2016-02-23 10:38 - 00287712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2016-03-22 10:59 - 2016-02-23 10:37 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-03-22 10:59 - 2016-02-23 10:36 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuickActionsDataModel.dll
2016-03-22 10:59 - 2016-02-23 10:34 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-03-22 10:59 - 2016-02-23 10:34 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2016-03-22 10:59 - 2016-02-23 10:33 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2016-03-22 10:59 - 2016-02-23 10:31 - 00463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2016-03-22 10:59 - 2016-02-23 10:29 - 00591872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2016-03-22 10:59 - 2016-02-23 10:28 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-03-22 10:59 - 2016-02-23 10:27 - 00307712 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2016-03-22 10:59 - 2016-02-23 10:26 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2016-03-22 10:59 - 2016-02-23 10:23 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2016-03-22 10:59 - 2016-02-23 10:22 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2016-03-22 10:59 - 2016-02-23 10:20 - 00847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2016-03-22 10:59 - 2016-02-23 10:20 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2016-03-22 10:59 - 2016-02-23 10:20 - 00493568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-03-22 10:59 - 2016-02-23 10:19 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2016-03-22 10:59 - 2016-02-23 10:14 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-03-22 10:59 - 2016-02-23 10:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-03-22 10:59 - 2016-02-23 10:10 - 00997376 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2016-03-22 10:59 - 2016-02-23 10:09 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-03-22 10:59 - 2016-02-23 10:04 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-03-22 10:59 - 2016-02-23 10:04 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-03-22 10:59 - 2016-02-23 10:04 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-03-22 10:59 - 2016-02-23 10:02 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-03-22 10:59 - 2016-02-23 10:02 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2016-03-22 10:59 - 2016-02-23 10:02 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2016-03-22 10:59 - 2016-02-23 09:58 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll
2016-03-22 10:59 - 2016-02-23 09:57 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TimeBrokerClient.dll
2016-03-22 10:59 - 2016-02-23 09:52 - 00456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2016-03-22 10:59 - 2016-02-23 09:50 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2016-03-22 10:59 - 2016-02-23 09:49 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2016-03-22 10:59 - 2016-02-23 09:48 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2016-03-22 10:59 - 2016-02-23 09:47 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll
2016-03-22 10:59 - 2016-02-23 09:38 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2016-03-22 10:59 - 2016-02-23 09:37 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2016-03-22 10:59 - 2016-02-23 09:37 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2016-03-22 10:59 - 2016-02-23 09:36 - 00713728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2016-03-22 10:59 - 2016-02-23 09:36 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2016-03-22 10:59 - 2016-02-23 09:35 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2016-03-22 10:59 - 2016-02-23 09:31 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2016-03-22 10:59 - 2016-02-23 09:24 - 04827136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2016-03-22 10:59 - 2016-02-23 09:24 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-03-22 10:59 - 2016-02-23 09:24 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-03-22 10:59 - 2016-02-23 09:14 - 00990720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-03-22 10:59 - 2016-02-23 09:05 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2016-03-22 10:59 - 2016-02-23 09:01 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2016-03-22 10:59 - 2016-02-23 08:56 - 04412928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2016-03-22 10:59 - 2016-02-23 08:55 - 04894208 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-03-22 10:59 - 2016-02-23 08:51 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-03-22 10:59 - 2016-02-23 08:41 - 02912256 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2016-03-22 10:59 - 2016-02-23 08:39 - 02581504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-03-22 10:59 - 2016-02-23 08:36 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-03-22 10:59 - 2016-02-23 08:35 - 07533568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2016-03-22 10:59 - 2016-02-23 08:33 - 02604032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2016-03-22 10:59 - 2016-02-23 08:30 - 02061312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-03-22 10:59 - 2016-02-23 08:28 - 06740992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2016-03-22 10:59 - 2016-02-09 05:18 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2016-03-22 10:59 - 2016-02-09 05:18 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2016-03-22 10:59 - 2016-02-09 05:07 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2016-03-22 10:58 - 2016-02-24 10:43 - 00625000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2016-03-22 10:58 - 2016-02-23 13:25 - 00563552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2016-03-22 10:56 - 2015-12-09 05:39 - 00301728 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2016-03-22 10:55 - 2016-04-12 22:51 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-03-22 10:55 - 2016-04-12 22:50 - 135176864 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-03-22 10:45 - 2016-04-13 21:55 - 00049664 _____ C:\WINDOWS\system32\perfh01B.dat
2016-03-22 10:45 - 2016-04-13 21:55 - 00012006 _____ C:\WINDOWS\system32\perfc01B.dat
2016-03-22 10:44 - 2016-03-22 10:44 - 00000000 ____D C:\Program Files\Reference Assemblies
2016-03-22 10:44 - 2016-03-22 10:44 - 00000000 ____D C:\Program Files\MSBuild
2016-03-22 10:44 - 2016-03-22 10:44 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-03-22 10:44 - 2016-03-22 10:44 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-03-22 10:44 - 2015-10-23 18:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2016-03-22 10:44 - 2015-10-23 18:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2016-03-22 10:44 - 2015-10-23 18:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2016-03-22 10:44 - 2015-10-23 18:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2016-03-22 10:44 - 2015-10-23 18:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2016-03-22 10:44 - 2015-10-23 18:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2016-03-22 10:39 - 2016-03-22 10:39 - 00000000 ____D C:\Users\eduar\AppData\Local\NetworkTiles
2016-03-22 10:23 - 2016-03-22 13:10 - 00000000 ____D C:\Program Files (x86)\Intel
2016-03-22 10:16 - 2016-03-22 10:16 - 00000000 ____D C:\Users\eduar\AppData\Local\MicrosoftEdge
2016-03-22 10:13 - 2016-04-13 21:55 - 00922814 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-22 10:12 - 2016-04-13 21:51 - 00000000 ___RD C:\Users\eduar\OneDrive
2016-03-22 10:12 - 2016-04-12 08:49 - 00002371 _____ C:\Users\eduar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-03-22 10:12 - 2016-04-04 22:39 - 00000000 ____D C:\Users\eduar\AppData\Local\Comms
2016-03-22 10:12 - 2016-03-22 11:54 - 00000000 ____D C:\Program Files\Elantech
2016-03-22 10:12 - 2016-03-22 10:12 - 00000000 ____D C:\Users\eduar\AppData\Local\ActiveSync
2016-03-22 10:10 - 2016-04-13 08:53 - 00000000 ____D C:\Users\eduar\AppData\Local\Packages
2016-03-22 10:10 - 2016-04-10 11:43 - 00000000 ____D C:\Users\eduar\AppData\Local\VirtualStore
2016-03-22 10:10 - 2016-04-01 09:58 - 00000000 ____D C:\Users\eduar\AppData\Local\PackageStaging
2016-03-22 10:10 - 2016-03-22 10:10 - 00000000 ____D C:\Users\eduar\AppData\Roaming\Adobe
2016-03-22 10:10 - 2016-03-22 10:10 - 00000000 ____D C:\Users\eduar\AppData\Local\TileDataLayer
2016-03-22 10:10 - 2016-03-22 10:10 - 00000000 ____D C:\Users\eduar\AppData\Local\Publishers
2016-03-22 10:09 - 2016-04-13 17:23 - 00000000 ____D C:\Users\eduar
2016-03-22 10:09 - 2016-03-22 10:09 - 00000020 ___SH C:\Users\eduar\ntuser.ini
2016-03-22 10:07 - 2016-03-22 10:07 - 00000000 ____D C:\WINDOWS\CSC
2016-03-22 10:04 - 2016-03-22 10:04 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-03-22 10:03 - 2016-03-22 10:12 - 00000000 ___DC C:\WINDOWS\Panther
2016-03-22 10:01 - 2016-03-22 10:01 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2016-03-21 23:08 - 2016-03-21 23:08 - 00000000 ___HD C:\$Windows.~WS

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-04-13 21:55 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
2016-04-13 21:50 - 2016-02-13 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-04-13 21:49 - 2015-10-30 08:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2016-04-13 08:53 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-04-13 08:53 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-04-13 08:48 - 2016-01-01 21:27 - 00000000 ___HD C:\OneDriveTemp
2016-04-13 08:45 - 2016-02-13 06:37 - 00397744 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-04-12 22:56 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-04-12 22:56 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-04-12 22:56 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2016-04-12 22:56 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-04-12 22:53 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-04-11 17:15 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-04-10 13:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Branding
2016-04-10 10:50 - 2016-02-13 15:51 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-04-10 10:36 - 2015-10-30 09:24 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2016-04-10 10:36 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2016-04-06 20:32 - 2015-10-30 09:26 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-04-06 20:32 - 2015-10-30 09:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-03-31 21:04 - 2016-02-13 15:21 - 00000000 ____D C:\WINDOWS\ShellNew
2016-03-31 21:04 - 2015-10-30 09:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-03-31 21:04 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-03-31 20:55 - 2015-10-30 09:24 - 00000076 _____ C:\WINDOWS\win.ini
2016-03-31 20:55 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Common Files\System
2016-03-31 12:02 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-03-29 12:07 - 2015-09-08 20:01 - 00400302 __RSH C:\bootmgr
2016-03-25 12:03 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache
2016-03-23 08:58 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\appcompat
2016-03-22 11:02 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-03-22 11:02 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-03-22 11:02 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-03-22 11:01 - 2016-02-13 15:21 - 00000000 ____D C:\Program Files\Windows Journal
2016-03-22 11:01 - 2015-10-30 09:24 - 00000000 __RSD C:\WINDOWS\Media
2016-03-22 11:01 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2016-03-22 11:01 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-03-22 11:01 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2016-03-22 11:01 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-03-22 11:01 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2016-03-22 10:09 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2016-03-22 10:05 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-03-22 10:03 - 2015-10-30 09:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2016-03-22 09:57 - 2015-09-08 20:01 - 00008192 __RSH C:\BOOTSECT.BAK
2016-03-21 21:51 - 2015-09-08 20:26 - 00203464 __RSH C:\grldr
2016-03-21 21:51 - 2015-09-08 20:26 - 00000012 __RSH C:\win7.ld
2016-03-21 16:18 - 2015-11-13 16:33 - 00000000 ____D C:\ESD

==================== Files in the root of some directories =======

2016-03-22 12:11 - 2016-03-22 12:11 - 0000021 _____ () C:\Users\eduar\AppData\Roaming\my_intel.sys
2016-03-22 12:10 - 2016-04-13 17:13 - 0000081 _____ () C:\Users\eduar\AppData\Roaming\sp_data.sys
2016-04-13 17:21 - 2016-04-13 21:26 - 0029696 _____ () C:\Users\eduar\AppData\Local\MSGBOX.EXE

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2016-04-11 16:12

==================== End of FRST.txt ============================

a log z Additional:

Additional scan result of Farbar Recovery Scan Tool (x64) Version:13-04-2016
Ran by eduar (2016-04-13 21:59:57)
Running from C:\Users\eduar\Desktop
Windows 10 Pro Version 1511 (X64) (2016-03-22 08:08:36)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-1488272672-2433312044-1902149314-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1488272672-2433312044-1902149314-503 - Limited - Disabled)
eduar (S-1-5-21-1488272672-2433312044-1902149314-1001 - Administrator - Enabled) => C:\Users\eduar
Guest (S-1-5-21-1488272672-2433312044-1902149314-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 15.14 (x64) (HKLM\...\7-Zip) (Version: 15.14 - Igor Pavlov)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 3.0.8 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.01.0003 - ASUS)
ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.20 - asus)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0037 - ASUS)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 4.111.0.63 - Conexant)
Counter-Strike 1.6 v43g (HKU\S-1-5-21-1488272672-2433312044-1902149314-1001\...\Counter-Strike 1.6_is1) (Version: - Valve)
ETDWare PS/2-x64 7.0.5.16_WHQL (HKLM\...\Elantech) (Version: 7.0.5.16 - ELAN Microelectronics Corp.)
Intel(R) Update Manager (HKLM-x32\...\{6E8699D5-6A81-4339-A21A-1FE8D33D293B}) (Version: 3.2.1289 - Intel Corporation)
Intel® SSD Toolbox (HKLM-x32\...\{06D085C8-1F00-11B2-96A7-8f0CE39193ED}) (Version: 3.3.4.400 - Intel Corporation)
Java 8 Update 77 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418077F0}) (Version: 8.0.770.3 - Oracle Corporation)
JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.33.2 - JMicron Technology Corp.)
LibreOffice 5.0.5.2 (HKLM\...\{7560B380-C81B-44F8-872D-B225EE47D059}) (Version: 5.0.5.2 - The Document Foundation)
Malwarebytes Anti-Malware verze 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
MPC-HC 1.7.10 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team)
Skype™ 7.22 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.22.108 - Skype Technologies S.A.)
Stellarium 0.14.3 (HKLM\...\Stellarium_is1) (Version: 0.14.3 - Stellarium team)
USB2.0 UVC VGA WebCam (HKLM\...\USB2.0 UVC VGA WebCam) (Version: 5.8.54000.207 - Sonix)
Viber (HKU\S-1-5-21-1488272672-2433312044-1902149314-1001\...\{fbc2e766-a500-4ec0-828f-5b884a1a292a}) (Version: 6.0.0.3669 - Viber Media Inc.)
Viber (x32 Version: 6.0.0.3669 - Viber Media Inc.) Hidden
Wireless Console 3 (HKLM-x32\...\{19EA33FB-B34E-40EA-8B8A-61743AEB795A}) (Version: 3.0.47 - ASUS)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1488272672-2433312044-1902149314-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\eduar\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\FileCoAuth.exe (Microsoft Corporation)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1AD3BB15-FDAA-4779-BFD6-34EF66BFAA04} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2014-02-11] (ASUS)
Task: {35E8A2F1-B069-4C5A-9C3F-D5A47C4070ED} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-10-09] (Intel Corporation)
Task: {39BAC468-FC70-493E-A00B-46BD8E7A26BD} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2014-04-02] (ASUS)
Task: {96A96FBE-DADB-49A8-9F01-A2DC5F4FCFE8} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2014-06-11] (ASUSTek Computer Inc.)
Task: {F4FE62E4-0DD9-4B99-BCAF-24EFB20E182B} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-10-09] (Intel Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2015-10-30 09:17 - 2015-10-30 09:17 - 00028672 _____ () C:\WINDOWS\SYSTEM32\efsext.dll
2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-04-12 22:50 - 2016-03-29 12:20 - 02656952 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-04-12 22:50 - 2016-03-29 12:20 - 02656952 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-02-13 15:02 - 2016-02-13 15:02 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-04-12 22:49 - 2016-04-02 05:25 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2014-02-11 18:08 - 2014-02-11 18:08 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll
2016-04-12 22:49 - 2016-04-02 05:03 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-04-12 22:49 - 2016-04-02 04:58 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-04-12 22:49 - 2016-04-02 04:59 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-04-12 22:49 - 2016-04-02 05:02 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2014-10-01 18:48 - 2014-10-01 18:48 - 01163264 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\acAuth.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00018992 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDColorEnhance.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00117248 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00037936 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00020528 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDRegammaAndGamut.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2015-10-30 09:24 - 2016-04-13 17:22 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1488272672-2433312044-1902149314-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\eduar\Pictures\awesome-matterhorn-image-desktop-hd-wallpapers-fullscreen-free-download.jpg
DNS Servers: 156.154.70.25 - 156.154.71.25
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: BugreportW => 2
MSCONFIG\Services: GoogleChromeUpService => 2
MSCONFIG\Services: GoogleChromeUpSvc => 2
MSCONFIG\Services: QQPCRTP => 2
MSCONFIG\Services: QQRepairFixSVC => 2
MSCONFIG\Services: rijufoze => 2
MSCONFIG\Services: rocufyky => 2
MSCONFIG\Services: WinSvces => 2
MSCONFIG\Services: wodufolozbt => 2
HKLM\...\StartupApproved\Run: => "cpuminer"
HKLM\...\StartupApproved\Run32: => "HomePageHelper"
HKLM\...\StartupApproved\Run32: => "LightGate"
HKLM\...\StartupApproved\Run32: => "sun21"
HKLM\...\StartupApproved\Run32: => "apphide"
HKLM\...\StartupApproved\Run32: => " QQPCTray"
HKU\S-1-5-21-1488272672-2433312044-1902149314-1001\...\StartupApproved\Run: => "msiql"
HKU\S-1-5-21-1488272672-2433312044-1902149314-1001\...\StartupApproved\Run: => "testLive"
HKU\S-1-5-21-1488272672-2433312044-1902149314-1001\...\StartupApproved\Run: => "svchost0"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [TCP Query User{FE0BFC26-2283-4D0E-BA37-30DE3F2609DD}C:\counter-strike 1.6\hl.exe] => (Allow) C:\counter-strike 1.6\hl.exe
FirewallRules: [UDP Query User{B57D4DC9-A726-4342-B9BA-E1B96F31439D}C:\counter-strike 1.6\hl.exe] => (Allow) C:\counter-strike 1.6\hl.exe
FirewallRules: [{583EB6E8-7B34-4809-A7D8-F6F9ADE8F7F6}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{00D2905C-B526-4059-A1EF-34F86EF62B7A}] => (Allow) C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe
FirewallRules: [{EF192651-C418-406A-AA02-D42CCD9C4EF1}] => (Allow) C:\Program Files (x86)\UCBrowser\Application\Downloader\download\MiniThunderPlatform.exe
FirewallRules: [{07A58870-6561-4D1B-8742-665047B6423F}] => (Allow) C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe

==================== Restore Points =========================

05-04-2016 19:22:54 Scheduled Checkpoint
10-04-2016 12:13:15 Windows Update
13-04-2016 17:21:50 Restore Point Created by FRST

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (04/13/2016 09:49:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: svchost.exe, verzia: 10.0.10586.0, časová značka: 0x5632d7ba
Názov chybujúceho modulu: ESENT.dll, verzia: 10.0.10586.212, časová značka: 0x56fa1686
Kód výnimky: 0xc0000602
Odstup chyby: 0x000000000022885f
Identifikácia chybujúceho procesu: 0x4c4
Čas spustenia chybujúcej aplikácie: 0xsvchost.exe0
Cesta chybujúcej aplikácie: svchost.exe1
Cesta chybujúceho modulu: svchost.exe2
Identifikácia hlásenia: svchost.exe3
Celé meno chybujúceho balíka: svchost.exe4
Identifikácia chybujúcej aplikácie vzhľadom na balík: svchost.exe5

Error: (04/13/2016 09:49:45 PM) (Source: ESENT) (EventID: 908) (User: )
Description: svchost (1220) Terminating process due to non-recoverable failure: PV: 10.0.10586.0 SV: 10.0.10586.0 GLE: 0 ERR: -4006(osdisk.cxx:4484): dllentry.cxx(103) (ESENT[10.0.10586.0] RETAIL RTM MBCS)

Error: (04/13/2016 05:21:53 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Cryptographic Services zlyhala pri spracovávaní volania OnIdentity() v objekte System Writer.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.

System Error:
Access is denied.
.

Error: (04/13/2016 05:21:49 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied.
.
This is often caused by incorrect security settings in either the writer or requestor process.

Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {f0c72f18-a50e-44eb-971e-7053fb8f24ad}

Error: (04/12/2016 10:51:45 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll8

Error: (04/12/2016 10:22:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: RadiaSK.exe, verzia: 1.0.0.0, časová značka: 0x53678975
Názov chybujúceho modulu: Windows.UI.Xaml.dll, verzia: 10.0.10586.71, časová značka: 0x5699d8e0
Kód výnimky: 0xc000027b
Odstup chyby: 0x00000000006fce8b
Identifikácia chybujúceho procesu: 0xe1c
Čas spustenia chybujúcej aplikácie: 0xRadiaSK.exe0
Cesta chybujúcej aplikácie: RadiaSK.exe1
Cesta chybujúceho modulu: RadiaSK.exe2
Identifikácia hlásenia: RadiaSK.exe3
Celé meno chybujúceho balíka: RadiaSK.exe4
Identifikácia chybujúcej aplikácie vzhľadom na balík: RadiaSK.exe5

Error: (04/11/2016 05:12:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: microsoftedgecp.exe, verzia: 11.0.10586.20, časová značka: 0x56540c35
Názov chybujúceho modulu: msvcrt.dll, verzia: 7.0.10586.0, časová značka: 0x5632d79e
Kód výnimky: 0xc0000005
Odstup chyby: 0x0000000000073c9a
Identifikácia chybujúceho procesu: 0xa98
Čas spustenia chybujúcej aplikácie: 0xmicrosoftedgecp.exe0
Cesta chybujúcej aplikácie: microsoftedgecp.exe1
Cesta chybujúceho modulu: microsoftedgecp.exe2
Identifikácia hlásenia: microsoftedgecp.exe3
Celé meno chybujúceho balíka: microsoftedgecp.exe4
Identifikácia chybujúcej aplikácie vzhľadom na balík: microsoftedgecp.exe5

Error: (04/11/2016 05:08:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: microsoftedgecp.exe, verzia: 11.0.10586.20, časová značka: 0x56540c35
Názov chybujúceho modulu: msvcrt.dll, verzia: 7.0.10586.0, časová značka: 0x5632d79e
Kód výnimky: 0xc0000005
Odstup chyby: 0x0000000000073c9a
Identifikácia chybujúceho procesu: 0xc30
Čas spustenia chybujúcej aplikácie: 0xmicrosoftedgecp.exe0
Cesta chybujúcej aplikácie: microsoftedgecp.exe1
Cesta chybujúceho modulu: microsoftedgecp.exe2
Identifikácia hlásenia: microsoftedgecp.exe3
Celé meno chybujúceho balíka: microsoftedgecp.exe4
Identifikácia chybujúcej aplikácie vzhľadom na balík: microsoftedgecp.exe5

Error: (04/11/2016 11:41:18 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: ShellExperienceHost.exe, verzia: 10.0.10586.122, časová značka: 0x56cc0133
Názov chybujúceho modulu: StartUI.dll, verzia: 10.0.10586.122, časová značka: 0x56cbff9f
Kód výnimky: 0xc000041d
Odstup chyby: 0x000000000029bfb8
Identifikácia chybujúceho procesu: 0x10f4
Čas spustenia chybujúcej aplikácie: 0xShellExperienceHost.exe0
Cesta chybujúcej aplikácie: ShellExperienceHost.exe1
Cesta chybujúceho modulu: ShellExperienceHost.exe2
Identifikácia hlásenia: ShellExperienceHost.exe3
Celé meno chybujúceho balíka: ShellExperienceHost.exe4
Identifikácia chybujúcej aplikácie vzhľadom na balík: ShellExperienceHost.exe5

Error: (04/11/2016 11:41:14 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Názov chybujúcej aplikácie: ShellExperienceHost.exe, verzia: 10.0.10586.122, časová značka: 0x56cc0133
Názov chybujúceho modulu: StartUI.dll, verzia: 10.0.10586.122, časová značka: 0x56cbff9f
Kód výnimky: 0xc0000005
Odstup chyby: 0x000000000029bfb8
Identifikácia chybujúceho procesu: 0x10f4
Čas spustenia chybujúcej aplikácie: 0xShellExperienceHost.exe0
Cesta chybujúcej aplikácie: ShellExperienceHost.exe1
Cesta chybujúceho modulu: ShellExperienceHost.exe2
Identifikácia hlásenia: ShellExperienceHost.exe3
Celé meno chybujúceho balíka: ShellExperienceHost.exe4
Identifikácia chybujúcej aplikácie vzhľadom na balík: ShellExperienceHost.exe5

System errors:
=============
Error: (04/13/2016 09:51:25 PM) (Source: DCOM) (EventID: 10016) (User: EDVO)
Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}EDVOeduarS-1-5-21-1488272672-2433312044-1902149314-1001LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (04/13/2016 09:51:25 PM) (Source: DCOM) (EventID: 10016) (User: EDVO)
Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}EDVOeduarS-1-5-21-1488272672-2433312044-1902149314-1001LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (04/13/2016 09:51:25 PM) (Source: DCOM) (EventID: 10016) (User: EDVO)
Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}EDVOeduarS-1-5-21-1488272672-2433312044-1902149314-1001LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (04/13/2016 09:51:25 PM) (Source: DCOM) (EventID: 10016) (User: EDVO)
Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}EDVOeduarS-1-5-21-1488272672-2433312044-1902149314-1001LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (04/13/2016 09:51:25 PM) (Source: DCOM) (EventID: 10016) (User: EDVO)
Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}EDVOeduarS-1-5-21-1488272672-2433312044-1902149314-1001LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (04/13/2016 09:51:25 PM) (Source: DCOM) (EventID: 10016) (User: EDVO)
Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}EDVOeduarS-1-5-21-1488272672-2433312044-1902149314-1001LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (04/13/2016 09:51:25 PM) (Source: DCOM) (EventID: 10016) (User: EDVO)
Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}EDVOeduarS-1-5-21-1488272672-2433312044-1902149314-1001LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (04/13/2016 09:51:25 PM) (Source: DCOM) (EventID: 10016) (User: EDVO)
Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}EDVOeduarS-1-5-21-1488272672-2433312044-1902149314-1001LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (04/13/2016 09:51:25 PM) (Source: DCOM) (EventID: 10016) (User: EDVO)
Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}EDVOeduarS-1-5-21-1488272672-2433312044-1902149314-1001LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (04/13/2016 09:51:25 PM) (Source: DCOM) (EventID: 10016) (User: EDVO)
Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}EDVOeduarS-1-5-21-1488272672-2433312044-1902149314-1001LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

CodeIntegrity:
===================================
Date: 2016-04-13 08:45:41.504
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-04-12 22:53:42.104
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-04-12 18:10:06.138
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-04-12 18:10:06.102
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-04-12 18:10:06.017
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-04-12 18:10:05.976
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-04-12 18:10:05.853
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-04-12 18:10:05.822
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-04-12 18:10:05.777
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-04-12 18:10:04.716
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz
Percentage of memory in use: 24%
Total physical RAM: 7020.54 MB
Available physical RAM: 5318.46 MB
Total Virtual: 8172.54 MB
Available Virtual: 6592.23 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:166.76 GB) (Free:126.22 GB) NTFS ==>[drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 167.7 GB) (Disk ID: 5FCD493C)
Partition 1: (Active) - (Size=166.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=450 MB) - (Type=27)
Partition 3: (Not Active) - (Size=493 MB) - (Type=27)

==================== End of Addition.txt ============================

MBAM pri startu systemu zavadi nektere sluzby/ovladace, ktere popisovany problem mohou zpusobovat. Odinstalujte MBAM pomoci https://downloads.malwarebytes.org/file/mbam_clean

Dalsi aktivni malware jiz v logu nevidim.

Veľmi pekne Vám ďakujem za pomoc. Až mi to moja finančná situácia dovolí, rád Vám pošlem € na účet viry.cz. Môžete LOCK.

VIRY.CZ

prosím o kontrolu logu

prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu

Re: prosím o kontrolu logu