VIRY.CZ

Dobrý deň,

poprosil by som o preventívnu kontrolu PC.
Nič extra som si nevšimol, akurát možno spomalenejší PC po štarte ako bol pred pár mesiacmi.
Prikladám log z FRST nakoľko mi nepustilo pridať log z RSIT kvoli prekročeniu počtu znakov v sprave.

Ďakujem



Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-03-2017
Ran by Mati (administrator) on DESKTOP-8RU3FLP (29-03-2017 17:29:33)
Running from C:\Users\Mati\Desktop
Loaded Profiles: Mati (Available Profiles: Mati)
Platform: Windows 10 Education Version 1511 (X64) Language: Angličtina (USA)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\WINWORD.EXE
(Microsoft Corporation) C:\Windows\System32\SppExtComObj.Exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\AutoCAD 2013\acad.exe
(Flexera Software LLC) C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
(Autodesk, Inc.) C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\lib\WSCommCntr4.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\AutoCAD 2013\AdExchange\AcBrowserHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Mati\Desktop\FRSTLauncher.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MouseDriver] => C:\WINDOWS\system32\TiltWheelMouse.exe [241152 2013-04-09] (Pixart Imaging Inc)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7543000 2014-03-04] (Realtek Semiconductor)
HKLM\...\Run: [MBCfg64] => C:\WINDOWS\system32\RunDLL32.exe C:\WINDOWS\system32\MBCfg64.dll,RunDLLEntry MBCfg64
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2017-01-19] (Apple Inc.)
HKLM-x32\...\Run: [Sound Blaster Cinema] => C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe [711680 2013-08-16] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] => C:\WINDOWS\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1310088 2015-01-27] (Autodesk, Inc.)
HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [465920 2016-10-25] (Microsoft Corporation)
HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2016-04-22] (Apple Inc.)
HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3019552 2017-03-23] (Valve Corporation)
HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\Run: [Viber] => C:\Users\Mati\AppData\Local\Viber\Viber.exe [34978896 2017-02-15] (Viber Media S.à r.l.)
HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27262432 2016-12-20] (Skype Technologies S.A.)
HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8455960 2015-08-20] (Piriform Ltd)
HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\Policies\Explorer: []
HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\MountPoints2: {46cb6183-4201-11e6-9cbb-448a5b9fdb03} - "L:\setup.exe"
HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\MountPoints2: {7ed7e4a3-5246-11e6-9cbd-448a5b9fdb03} - "L:\setup.exe"
HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\MountPoints2: {c97361f5-3d0f-11e6-9cb7-448a5b9fdb03} - "K:\AutoRun.exe" {D2D77DC2-8299-11D1-8949-444553540000} 5.2066.1.A14B04 PID_0083 {01D42BF0-ED08-463f-8A28-99EB6FEE962B}
HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1310088 2015-01-27] (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2015-02-06] (Autodesk, Inc.)
GroupPolicy: Restriction <======= ATTENTION
GroupPolicyScripts: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 147.232.191.130 147.232.191.6 147.232.191.2
Tcpip\..\Interfaces\{7e3c1c2c-dfcf-4c2d-bab0-3c828f95d267}: [DhcpNameServer] 147.232.191.130 147.232.191.6 147.232.191.2

Internet Explorer:
==================
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-09-09] (Oracle Corporation)
BHO-x32: Microsoft Web Test Recorder 10.0 Helper -> {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} -> C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2012-07-26] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-09-09] (Oracle Corporation)
DPF: HKLM-x32 {62789780-B744-11D0-986B-00609731A21D} hxxps://mapa.katasterportal.sk/kapor2/lib/mgaxctrl.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2016-05-17] (Microsoft Corporation)

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-09-09] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-09-09] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-11-17] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-11-17] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)

Chrome:
=======
CHR Profile: C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default [2017-03-29]
CHR Extension: (Prezentácie Google) - C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-06-28]
CHR Extension: (Dokumenty Google) - C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-06-28]
CHR Extension: (Disk Google) - C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-06-28]
CHR Extension: (YouTube) - C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-06-28]
CHR Extension: (Tabuľky Google) - C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-06-28]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-06-28]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]
CHR Extension: (Gmail) - C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-06-28]
CHR Extension: (Chrome Media Router) - C:\Users\Mati\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-08]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-02-27] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)
S2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [19232 2012-01-31] (Autodesk, Inc.)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2771848 2017-01-10] (ESET)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [File not signed]
R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-09-26] (MICRO-STAR INTERNATIONAL CO., LTD.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [456640 2016-10-25] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [456640 2016-10-25] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-11-17] (NVIDIA Corporation)
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-10-25] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2123240 2017-03-22] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2184688 2017-03-22] (Electronic Arts)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [75064 2016-12-01] ()
R2 PnkBstrB; C:\WINDOWS\SysWOW64\PnkBstrB.exe [214520 2017-01-31] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [File not signed]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10883824 2017-03-17] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2016-10-25] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24856 2017-03-04] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [146856 2013-06-04] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [21928 2013-06-04] (Windows (R) Win 7 DDK provider)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [262792 2017-01-10] (ESET)
S0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [199304 2017-01-10] (ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15488 2016-10-10] (ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [197248 2017-01-10] (ESET)
R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [153216 2017-01-10] (ESET)
R3 ElcMouLFlt; C:\WINDOWS\System32\drivers\ElcMouLFlt.sys [28648 2015-09-11] (ELECOM)
R3 ElcMouUFlt; C:\WINDOWS\System32\drivers\ElcMouUFlt.sys [27624 2015-09-11] (ELECOM)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [208520 2017-01-10] (ESET)
R1 EpfwLWF; C:\WINDOWS\system32\DRIVERS\EpfwLWF.sys [61568 2017-01-10] (ESET)
R0 epfwwfp; C:\WINDOWS\System32\DRIVERS\epfwwfp.sys [84616 2017-01-10] (ESET)
R3 ISCT; C:\WINDOWS\System32\drivers\ISCTD64.sys [47008 2013-07-30] ()
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-10-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [46016 2016-10-25] (NVIDIA Corporation)
S3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek )
S2 SecDrv; C:\WINDOWS\SysWOW64\drivers\SECDRV.SYS [163644 2017-01-23] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [File not signed]
R3 SensorsSimulatorDriver; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [216064 2015-10-30] (Microsoft Corporation)
R3 t_mouse.sys; C:\WINDOWS\system32\DRIVERS\t_mouse.sys [6144 2013-04-09] ()
S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
S3 MSICDSetup; \??\J:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\J:\NTIOLib_X64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-03-29 17:29 - 2017-03-29 17:31 - 00019540 _____ C:\Users\Mati\Desktop\FRST.txt
2017-03-29 17:29 - 2017-03-29 17:29 - 00000000 ____D C:\FRST
2017-03-29 17:26 - 2017-03-29 17:28 - 00112640 _____ (forum.viry.cz) C:\Users\Mati\Desktop\FRSTLauncher.exe
2017-03-29 17:23 - 2017-03-29 17:23 - 02424832 _____ (Farbar) C:\Users\Mati\Desktop\FRST64.exe
2017-03-29 14:52 - 2017-03-29 14:52 - 00071084 _____ C:\Users\Mati\Downloads\kataster.dwg.zip
2017-03-29 12:39 - 2017-03-29 12:39 - 06326474 _____ C:\Users\Mati\Downloads\foto teriakovce.zip
2017-03-29 12:39 - 2017-03-29 12:39 - 00765478 _____ C:\Users\Mati\Downloads\teriakovce.zip
2017-03-29 11:01 - 2017-03-29 11:01 - 06538044 _____ C:\Users\Mati\Downloads\arrows_brushes.zip
2017-03-29 10:59 - 2017-03-29 10:59 - 00386962 _____ C:\Users\Mati\Downloads\arrow_brush.zip
2017-03-29 10:17 - 2017-03-29 10:17 - 00001120 _____ C:\Users\Mati\Desktop\Adobe Photoshop CS6 (64 Bit).lnk
2017-03-28 18:04 - 2017-03-28 18:04 - 00005309 _____ C:\Users\Mati\Downloads\EarthPointFlyTo_160501.kml
2017-03-28 10:46 - 2017-03-28 10:46 - 00039656 _____ C:\Users\Mati\Downloads\Fwd- PO_TRK Teriakovce (stoziar OG Salgovik).zip
2017-03-28 10:39 - 2017-03-28 18:35 - 00000204 ____H C:\Users\Mati\Documents\Výkres1.dwl2
2017-03-28 10:39 - 2017-03-28 18:35 - 00000054 ____H C:\Users\Mati\Documents\Výkres1.dwl
2017-03-27 23:33 - 2017-03-27 23:33 - 00001276 _____ C:\Users\Public\Desktop\Resident Evil 7 Biohazard.lnk
2017-03-27 23:33 - 2017-03-27 23:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Resident Evil 7 Biohazard
2017-03-27 23:20 - 2017-03-27 23:42 - 00000000 ____D C:\Program Files (x86)\Resident Evil 7 Biohazard
2017-03-27 23:00 - 2017-03-27 23:00 - 04701962 _____ C:\Users\Mati\Downloads\PO_TRK.zip
2017-03-25 13:43 - 2017-03-25 13:43 - 00098742 _____ C:\Users\Mati\Downloads\zsskCD (5).pdf
2017-03-23 02:14 - 2017-03-23 02:14 - 00004588 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-03-23 02:14 - 2017-03-23 02:14 - 00004412 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-03-22 23:57 - 2017-03-22 23:57 - 00000000 ____D C:\Users\Mati\Documents\WB Games
2017-03-22 23:07 - 2017-03-22 23:07 - 00000481 _____ C:\Users\Public\Desktop\Mad Max.lnk
2017-03-22 20:35 - 2017-03-22 20:35 - 02446426 _____ C:\Users\Mati\Downloads\Automatizovane_elektroinstalacne_systemy.pdf
2017-03-22 00:33 - 2017-03-22 00:33 - 00000029 _____ C:\Users\Mati\Downloads\stiahnuť
2017-03-21 22:12 - 2017-03-21 22:12 - 00000000 ____D C:\Users\Mati\AppData\Local\Microsoft_Corporation
2017-03-21 22:10 - 2017-03-21 22:10 - 00000000 ____D C:\Users\Mati\AppData\Roaming\NuGet
2017-03-21 19:46 - 2017-03-21 19:46 - 00021541 _____ C:\Users\Mati\Downloads\Faktura kredit MAREC.pdf
2017-03-21 13:04 - 2017-03-21 13:04 - 01668365 _____ C:\Users\Mati\Downloads\merged (1).pdf
2017-03-21 13:03 - 2017-03-21 13:03 - 01315230 _____ C:\Users\Mati\Downloads\merged.pdf
2017-03-21 05:01 - 2017-03-21 05:01 - 00339105 _____ C:\Users\Mati\Downloads\myo.js-master (2).zip
2017-03-21 04:58 - 2017-03-21 04:58 - 00001513 _____ C:\Users\Mati\Desktop\Visual Studio 2012.lnk
2017-03-21 04:48 - 2017-03-21 04:51 - 00000000 ____D C:\Users\Mati\Documents\Visual Studio 2012
2017-03-21 04:46 - 2017-03-21 04:46 - 00000000 ____D C:\ProgramData\Windows App Certification Kit
2017-03-21 04:46 - 2017-03-21 04:46 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2017-03-21 04:46 - 2017-03-21 04:46 - 00000000 ____D C:\Program Files\Application Verifier
2017-03-21 04:46 - 2017-03-21 04:46 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2017-03-21 04:46 - 2017-03-21 04:46 - 00000000 ____D C:\Program Files (x86)\Application Verifier
2017-03-21 04:45 - 2017-03-21 04:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits
2017-03-21 04:45 - 2017-03-21 04:45 - 00000000 ____D C:\ProgramData\PreEmptive Solutions
2017-03-21 04:45 - 2017-03-21 04:45 - 00000000 ____D C:\Program Files (x86)\Microsoft Web Tools
2017-03-21 04:45 - 2017-03-21 04:45 - 00000000 ____D C:\Program Files (x86)\Microsoft ASP.NET
2017-03-21 04:44 - 2017-03-21 04:44 - 00002177 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Web Platform Installer.lnk
2017-03-21 04:44 - 2017-03-21 04:44 - 00000000 ____D C:\Program Files\IIS Express
2017-03-21 04:44 - 2017-03-21 04:44 - 00000000 ____D C:\Program Files (x86)\IIS Express
2017-03-21 04:43 - 2017-03-21 04:43 - 00000000 ____D C:\Program Files (x86)\Windows Kits
2017-03-21 04:43 - 2017-03-21 04:43 - 00000000 ____D C:\Program Files (x86)\NuGet
2017-03-21 04:43 - 2017-03-21 04:43 - 00000000 ____D C:\Program Files (x86)\Microsoft WCF Data Services
2017-03-21 04:41 - 2017-03-21 04:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Help Viewer
2017-03-21 04:41 - 2017-03-21 04:41 - 00000000 ____D C:\Program Files (x86)\HTML Help Workshop
2017-03-21 04:40 - 2017-03-21 04:46 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2017-03-21 04:40 - 2017-03-21 04:46 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2017-03-21 04:40 - 2017-03-21 04:42 - 00000000 ____D C:\WINDOWS\SysWOW64\1033
2017-03-21 04:40 - 2017-03-21 04:40 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-03-21 04:38 - 2017-03-21 04:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2012
2017-03-21 04:38 - 2017-03-21 04:47 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 11.0
2017-03-21 04:38 - 2017-03-21 04:41 - 00000000 ____D C:\Program Files (x86)\MSBuild
2017-03-21 04:38 - 2017-03-21 04:40 - 00000000 ____D C:\WINDOWS\system32\1033
2017-03-21 04:38 - 2017-03-21 04:38 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_SensorsSimulatorDriver_01_11_00.Wdf
2017-03-21 04:36 - 2017-03-21 04:47 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs
2017-03-21 04:36 - 2017-03-21 04:36 - 00000000 ____D C:\WINDOWS\symbols
2017-03-21 04:36 - 2017-03-21 04:36 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 11.0
2017-03-21 03:22 - 2017-03-21 03:22 - 00001507 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2017.lnk
2017-03-21 03:18 - 2017-03-21 03:25 - 00000000 ____D C:\Users\Mati\AppData\Roaming\Visual Studio Setup
2017-03-21 03:18 - 2017-03-21 03:21 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2017-03-21 03:18 - 2017-03-21 03:18 - 00002295 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio Installer.lnk
2017-03-21 03:18 - 2017-03-21 03:18 - 00000000 ____D C:\Users\Mati\AppData\Roaming\vstelemetry
2017-03-21 03:18 - 2017-03-21 03:18 - 00000000 ____D C:\Users\Mati\AppData\Local\ServiceHub
2017-03-21 03:17 - 2017-03-21 03:17 - 01037440 _____ (Microsoft Corporation) C:\Users\Mati\Downloads\mu_visual_studio_enterprise_2017_x86_x64_10049783.exe
2017-03-21 03:15 - 2017-03-21 03:15 - 00000000 ____D C:\Users\Mati\Downloads\Microsoft.Visual.Studio.Ultimate.2012-REMEDY
2017-03-21 03:14 - 2017-03-21 03:14 - 00016263 _____ C:\Users\Mati\Downloads\[CzT]Microsoft_Visual_Studio_2012_Ultimate.torrent
2017-03-21 02:59 - 2017-03-21 02:59 - 04008548 _____ C:\Users\Mati\Downloads\myodaemon (5).zip
2017-03-20 00:52 - 2017-03-20 00:52 - 00339105 _____ C:\Users\Mati\Downloads\myo.js-master (1).zip
2017-03-20 00:49 - 2017-03-20 00:49 - 00390801 _____ C:\Users\Mati\Downloads\MyoJS-master.zip
2017-03-20 00:49 - 2017-03-20 00:49 - 00390801 _____ C:\Users\Mati\Downloads\MyoJS-master (1).zip
2017-03-20 00:41 - 2017-03-20 00:41 - 00013773 _____ C:\Users\Mati\Downloads\FileSaver.js-master.zip
2017-03-20 00:25 - 2017-03-20 00:25 - 04008548 _____ C:\Users\Mati\Downloads\myodaemon (4).zip
2017-03-19 18:02 - 2017-03-19 18:02 - 02944143 _____ C:\Users\Mati\Downloads\AutoCAD-2013-keygen.rar
2017-03-19 13:46 - 2017-03-19 13:46 - 00868393 _____ C:\Users\Mati\Downloads\Myo Data Capture Windows (1).zip
2017-03-19 02:40 - 2016-11-30 11:42 - 00000000 ____D C:\Users\Mati\Downloads\myo.js-master
2017-03-19 02:39 - 2017-03-19 02:39 - 00339105 _____ C:\Users\Mati\Downloads\myo.js-master.zip
2017-03-19 02:14 - 2017-03-19 02:14 - 00303586 _____ C:\Users\Mati\Downloads\lua-5.3.4.tar.gz
2017-03-19 02:07 - 2017-03-19 02:07 - 04008548 _____ C:\Users\Mati\Downloads\myodaemon (3).zip
2017-03-18 17:35 - 2017-03-18 17:35 - 02157050 _____ C:\Users\Mati\Downloads\Mod api 0.56c.rar
2017-03-18 17:09 - 2017-03-18 17:09 - 02376302 _____ C:\Users\Mati\Downloads\modapi_20170117.zip
2017-03-17 12:25 - 2017-03-17 12:25 - 04008548 _____ C:\Users\Mati\Downloads\myodaemon (2).zip
2017-03-17 12:07 - 2017-03-17 12:26 - 42353285 _____ C:\Users\Mati\Downloads\Nepotvrdené 931063.crdownload
2017-03-17 11:29 - 2017-03-17 11:29 - 00848698 _____ C:\Users\Mati\Downloads\Myo Data Capture Windows.zip
2017-03-17 02:03 - 2017-03-17 02:03 - 00000194 _____ C:\Users\Mati\.gitconfig
2017-03-17 02:03 - 2017-03-17 02:03 - 00000000 ____D C:\Users\Mati\.ssh
2017-03-17 01:24 - 2017-03-17 02:04 - 00000000 ____D C:\Users\Mati\AppData\Roaming\GitHub
2017-03-17 01:24 - 2017-03-17 02:04 - 00000000 ____D C:\Users\Mati\AppData\Local\GitHub
2017-03-17 01:24 - 2017-03-17 01:24 - 00002246 _____ C:\Users\Mati\Desktop\Git Shell.lnk
2017-03-17 01:24 - 2017-03-17 01:24 - 00000308 _____ C:\Users\Mati\Desktop\GitHub.appref-ms
2017-03-17 01:24 - 2017-03-17 01:24 - 00000000 ____D C:\Users\Mati\Documents\GitHub
2017-03-17 01:24 - 2017-03-17 01:24 - 00000000 ____D C:\Users\Mati\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
2017-03-17 00:59 - 2017-03-17 01:24 - 00000000 ____D C:\Users\Mati\AppData\Local\Deployment
2017-03-17 00:59 - 2017-03-17 00:59 - 00679416 _____ () C:\Users\Mati\Downloads\GitHubSetup.exe
2017-03-17 00:59 - 2017-03-17 00:59 - 00000000 ____D C:\Users\Mati\AppData\Local\Apps\2.0
2017-03-16 19:43 - 2017-03-16 19:43 - 04008548 _____ C:\Users\Mati\Downloads\myodaemon (1).zip
2017-03-16 19:42 - 2017-03-16 19:42 - 04008548 _____ C:\Users\Mati\Downloads\myodaemon.zip
2017-03-16 19:16 - 2017-03-21 03:05 - 00005858 _____ C:\Users\Mati\.node_repl_history
2017-03-16 19:15 - 2017-03-16 19:15 - 00000000 ____D C:\Users\Mati\AppData\Roaming\npm
2017-03-16 19:15 - 2017-03-16 19:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Node.js
2017-03-16 19:15 - 2017-03-16 19:15 - 00000000 ____D C:\Program Files\nodejs
2017-03-16 19:14 - 2017-03-16 19:14 - 13705216 _____ C:\Users\Mati\Downloads\node-v7.7.3-x64.msi
2017-03-16 19:14 - 2017-03-16 19:14 - 12861440 _____ C:\Users\Mati\Downloads\node-v6.10.0-x64.msi
2017-03-16 02:05 - 2017-03-16 02:05 - 00000000 ____D C:\ProgramData\Microsoft Toolkit
2017-03-16 02:03 - 2017-03-16 02:03 - 00000000 ____D C:\Users\Mati\Downloads\Microsoft Toolkit 2.6.2
2017-03-16 02:01 - 2017-03-16 02:01 - 00018640 _____ C:\Users\Mati\Downloads\[CzT]Microsoft_Toolkit_v2_6_2_2016_.torrent
2017-03-16 00:45 - 2017-03-27 15:32 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2017-03-16 00:45 - 2017-03-23 14:05 - 00001040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 12.lnk
2017-03-16 00:45 - 2017-03-23 14:05 - 00001028 _____ C:\Users\Public\Desktop\TeamViewer 12.lnk
2017-03-16 00:45 - 2017-03-16 01:06 - 00000000 ____D C:\Users\Mati\AppData\Roaming\TeamViewer
2017-03-16 00:44 - 2017-03-16 00:44 - 12973136 _____ (TeamViewer GmbH) C:\Users\Mati\Downloads\TeamViewer_Setup_sk.exe
2017-03-15 23:45 - 2017-03-15 23:45 - 00016608 _____ C:\Users\Mati\Downloads\CzTESET_Smart_Security_v9_0_376_1_x86_x64_CZ_SK_.torrent
2017-03-15 23:45 - 2017-03-15 23:45 - 00016608 _____ C:\Users\Mati\Downloads\[CzT]ESET_Smart_Security_v9_0_376_1_x86_x64_CZ_SK_.torrent
2017-03-15 17:39 - 2017-03-15 17:39 - 00035983 _____ C:\Users\Mati\Downloads\[CzT]Microsoft_office_2007_SK_.torrent
2017-03-15 17:37 - 2017-03-15 17:37 - 00015305 _____ C:\Users\Mati\Downloads\[CzT]Microsoft_Office_2010_Professional_Plus_x86_x64_SK_.torrent
2017-03-15 17:18 - 2017-03-15 17:18 - 00014913 _____ C:\Users\Mati\Downloads\[CzT]Microsoft_Office_2013_Professional_Plus_CZ_SK_x86_x64_.torrent
2017-03-15 15:08 - 2017-03-04 08:33 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-03-15 15:08 - 2017-03-04 08:29 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-03-15 15:08 - 2017-03-04 07:27 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2017-03-15 15:08 - 2017-03-04 07:19 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2017-03-15 15:08 - 2017-03-04 07:16 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2017-03-15 15:08 - 2017-03-04 07:16 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2017-03-15 15:08 - 2017-03-04 07:15 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stdole2.tlb
2017-03-15 15:08 - 2017-03-04 07:06 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallButtons.dll
2017-03-15 15:08 - 2017-03-04 07:06 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
2017-03-15 15:08 - 2017-03-04 07:03 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2017-03-15 15:08 - 2017-03-04 07:00 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sscore.dll
2017-03-15 15:08 - 2017-03-04 06:57 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp
2017-03-15 15:08 - 2017-03-04 06:57 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\feclient.dll
2017-03-15 15:08 - 2017-03-04 06:56 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oemlicense.dll
2017-03-15 15:08 - 2017-03-04 06:51 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll
2017-03-15 15:08 - 2017-03-04 06:49 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icm32.dll
2017-03-15 15:08 - 2017-03-04 06:49 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2017-03-15 15:08 - 2017-03-04 06:46 - 00113664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe
2017-03-15 15:08 - 2017-03-04 06:45 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2017-03-15 15:08 - 2017-03-04 06:42 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2017-03-15 15:08 - 2017-03-04 06:33 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll
2017-03-15 15:08 - 2017-03-04 06:32 - 00153088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSSync.dll
2017-03-15 15:08 - 2017-03-04 06:31 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2017-03-15 15:08 - 2017-03-04 06:29 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2017-03-15 15:08 - 2017-03-04 06:29 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2017-03-15 15:08 - 2017-03-04 06:28 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2017-03-15 15:08 - 2017-03-04 06:25 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-03-15 15:08 - 2017-03-04 06:24 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2017-03-15 15:08 - 2017-03-04 06:21 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licensingdiag.exe
2017-03-15 15:08 - 2017-03-04 06:13 - 00246784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qwave.dll
2017-03-15 15:07 - 2017-03-04 09:39 - 01862008 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-03-15 15:07 - 2017-03-04 09:39 - 00602256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2017-03-15 15:07 - 2017-03-04 09:29 - 00535088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2017-03-15 15:07 - 2017-03-04 09:27 - 00922432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2017-03-15 15:07 - 2017-03-04 09:12 - 00987488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2017-03-15 15:07 - 2017-03-04 08:43 - 00306832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2017-03-15 15:07 - 2017-03-04 08:41 - 02180136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-03-15 15:07 - 2017-03-04 08:41 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2017-03-15 15:07 - 2017-03-04 08:41 - 00980352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-03-15 15:07 - 2017-03-04 08:41 - 00895080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2017-03-15 15:07 - 2017-03-04 08:41 - 00701384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2017-03-15 15:07 - 2017-03-04 08:40 - 01349640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-03-15 15:07 - 2017-03-04 08:40 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2017-03-15 15:07 - 2017-03-04 08:40 - 00713824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-03-15 15:07 - 2017-03-04 08:34 - 01824272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2017-03-15 15:07 - 2017-03-04 08:33 - 02942536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-03-15 15:07 - 2017-03-04 08:30 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-03-15 15:07 - 2017-03-04 08:29 - 05240960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-03-15 15:07 - 2017-03-04 08:29 - 04075184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-03-15 15:07 - 2017-03-04 08:29 - 00836752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2017-03-15 15:07 - 2017-03-04 08:29 - 00569752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2017-03-15 15:07 - 2017-03-04 08:25 - 00268040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2017-03-15 15:07 - 2017-03-04 07:58 - 02186864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2017-03-15 15:07 - 2017-03-04 07:57 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2017-03-15 15:07 - 2017-03-04 07:55 - 01370224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2017-03-15 15:07 - 2017-03-04 07:41 - 02448752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2017-03-15 15:07 - 2017-03-04 07:41 - 00882208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
2017-03-15 15:07 - 2017-03-04 07:40 - 00473616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2017-03-15 15:07 - 2017-03-04 07:40 - 00467440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
2017-03-15 15:07 - 2017-03-04 07:06 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2017-03-15 15:07 - 2017-03-04 07:06 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2017-03-15 15:07 - 2017-03-04 07:04 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2017-03-15 15:07 - 2017-03-04 06:57 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2017-03-15 15:07 - 2017-03-04 06:55 - 00302080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe
2017-03-15 15:07 - 2017-03-04 06:48 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apds.dll
2017-03-15 15:07 - 2017-03-04 06:47 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2017-03-15 15:07 - 2017-03-04 06:45 - 00395776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll
2017-03-15 15:07 - 2017-03-04 06:45 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2017-03-15 15:07 - 2017-03-04 06:42 - 00541184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2017-03-15 15:07 - 2017-03-04 06:37 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2017-03-15 15:07 - 2017-03-04 06:36 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-03-15 15:07 - 2017-03-04 06:33 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2017-03-15 15:07 - 2017-03-04 06:33 - 00616960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2017-03-15 15:07 - 2017-03-04 06:33 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2017-03-15 15:07 - 2017-03-04 06:33 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll
2017-03-15 15:07 - 2017-03-04 06:32 - 00502272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2017-03-15 15:07 - 2017-03-04 06:31 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2017-03-15 15:07 - 2017-03-04 06:30 - 00501760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-03-15 15:07 - 2017-03-04 06:27 - 00854528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2017-03-15 15:07 - 2017-03-04 06:26 - 01586176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2017-03-15 15:07 - 2017-03-04 06:26 - 01497088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2017-03-15 15:07 - 2017-03-04 06:26 - 01467904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2017-03-15 15:07 - 2017-03-04 06:25 - 01117184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2017-03-15 15:07 - 2017-03-04 06:24 - 02578432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
2017-03-15 15:07 - 2017-03-04 06:24 - 00885248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2017-03-15 15:07 - 2017-03-04 06:24 - 00760320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2017-03-15 15:07 - 2017-03-04 06:23 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2017-03-15 15:07 - 2017-03-04 06:22 - 03695104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-03-15 15:07 - 2017-03-04 06:22 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2017-03-15 15:07 - 2017-03-04 06:21 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-03-15 15:07 - 2017-03-04 06:19 - 00639488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2017-03-15 15:07 - 2017-03-04 06:18 - 00778240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2017-03-15 15:07 - 2017-03-04 06:15 - 01986560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2017-03-15 15:07 - 2017-03-04 06:14 - 00581632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2017-03-15 15:07 - 2017-03-04 06:08 - 01185280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationFramework.dll
2017-03-15 15:07 - 2017-03-04 06:07 - 04078080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-03-15 15:07 - 2017-03-04 06:07 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2017-03-15 15:07 - 2017-03-04 06:07 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2017-03-15 15:07 - 2017-03-04 06:05 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Proximity.dll
2017-03-15 15:07 - 2017-03-04 06:03 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rshx32.dll
2017-03-15 15:07 - 2017-03-04 06:01 - 00724480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanpref.dll
2017-03-15 15:07 - 2017-03-04 06:00 - 01501184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-03-15 15:07 - 2017-03-04 05:59 - 01626112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-03-15 15:07 - 2017-03-04 05:58 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2017-03-15 15:07 - 2017-03-04 05:57 - 04412928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-03-15 15:07 - 2017-03-04 05:57 - 02878976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-03-15 15:07 - 2017-03-04 05:57 - 01708032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2017-03-15 15:07 - 2017-03-04 05:55 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2017-03-15 15:07 - 2017-03-04 05:54 - 06296064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2017-03-15 15:07 - 2017-03-04 05:54 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-03-15 15:07 - 2017-03-04 05:52 - 02000896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2017-03-15 15:07 - 2017-03-04 05:52 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-03-15 15:07 - 2017-03-04 05:51 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-03-15 15:07 - 2017-03-04 05:51 - 09921024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-03-15 15:07 - 2017-03-04 05:44 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2017-03-15 15:07 - 2017-03-04 05:41 - 04404736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2017-03-15 15:07 - 2017-03-04 05:38 - 02519552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll
2017-03-15 15:07 - 2017-03-04 05:36 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-03-15 15:07 - 2017-03-04 05:35 - 05326336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-03-15 15:07 - 2017-03-04 05:35 - 02798080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-03-15 15:07 - 2017-03-04 05:33 - 02604032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2017-03-15 15:07 - 2017-03-04 05:31 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2017-03-15 15:07 - 2017-03-04 05:31 - 02062336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-03-15 15:07 - 2017-03-04 05:31 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2017-03-15 15:07 - 2017-03-04 05:30 - 01249280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2017-03-15 15:07 - 2017-03-04 05:29 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll
2017-03-15 15:07 - 2017-03-04 05:03 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-03-15 15:06 - 2017-03-04 09:54 - 00989528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2017-03-15 15:06 - 2017-03-04 09:12 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-03-15 15:06 - 2017-03-04 09:06 - 06536248 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2017-03-15 15:06 - 2017-03-04 08:00 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-03-15 15:06 - 2017-03-04 07:59 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2017-03-15 15:06 - 2017-03-04 07:37 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdechangepin.exe
2017-03-15 15:06 - 2017-03-04 07:37 - 00351232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2017-03-15 15:06 - 2017-03-04 07:19 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2017-03-15 15:06 - 2017-03-04 07:11 - 00556544 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2017-03-15 15:06 - 2017-03-04 07:10 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2017-03-15 15:06 - 2017-03-04 07:04 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2017-03-15 15:06 - 2017-03-04 06:57 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-03-15 15:06 - 2017-03-04 06:55 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2017-03-15 15:06 - 2017-03-04 05:20 - 00381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2017-03-15 15:05 - 2017-03-04 10:01 - 00994760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2017-03-15 15:05 - 2017-03-04 09:18 - 01554152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2017-03-15 15:05 - 2017-03-04 09:18 - 01552104 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-03-15 15:05 - 2017-03-04 09:07 - 01040792 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2017-03-15 15:05 - 2017-03-04 07:35 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-03-15 15:05 - 2017-03-04 06:53 - 00865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-03-15 15:05 - 2017-03-04 06:49 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\P2P.dll
2017-03-15 15:05 - 2017-03-04 06:41 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2017-03-15 15:05 - 2017-03-04 06:23 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-03-15 15:05 - 2017-03-04 05:31 - 02911744 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2017-03-15 15:05 - 2017-03-04 05:19 - 01487872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
2017-03-15 15:04 - 2017-03-04 07:29 - 00216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\P2P.dll
2017-03-15 15:04 - 2017-03-04 07:11 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2017-03-15 15:04 - 2017-03-04 07:09 - 00351232 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll
2017-03-15 15:04 - 2017-03-04 06:35 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2017-03-15 15:03 - 2017-03-04 10:13 - 00800080 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2017-03-15 15:03 - 2017-03-04 09:48 - 01297760 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2017-03-15 15:03 - 2017-03-04 09:19 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2017-03-15 15:03 - 2017-03-04 09:08 - 22560744 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-03-15 15:03 - 2017-03-04 08:09 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2017-03-15 15:03 - 2017-03-04 08:09 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-03-15 15:03 - 2017-03-04 08:03 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2017-03-15 15:03 - 2017-03-04 07:59 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\stdole2.tlb
2017-03-15 15:03 - 2017-03-04 07:52 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2017-03-15 15:03 - 2017-03-04 07:49 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2017-03-15 15:03 - 2017-03-04 07:47 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2017-03-15 15:03 - 2017-03-04 07:44 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2017-03-15 15:03 - 2017-03-04 07:41 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2017-03-15 15:03 - 2017-03-04 07:34 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2017-03-15 15:03 - 2017-03-04 07:31 - 00185856 _____ C:\WINDOWS\system32\ism32k.dll
2017-03-15 15:03 - 2017-03-04 07:29 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\icm32.dll
2017-03-15 15:03 - 2017-03-04 07:25 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-03-15 15:03 - 2017-03-04 07:25 - 00287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2017-03-15 15:03 - 2017-03-04 07:20 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2017-03-15 15:03 - 2017-03-04 07:08 - 00852992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2017-03-15 15:03 - 2017-03-04 07:03 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2017-03-15 15:03 - 2017-03-04 07:02 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2017-03-15 15:03 - 2017-03-04 06:41 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\qwave.dll
2017-03-15 15:03 - 2017-03-04 06:24 - 00931328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2017-03-15 15:02 - 2017-03-04 10:13 - 01997832 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-03-15 15:02 - 2017-03-04 09:19 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2017-03-15 15:02 - 2017-03-04 09:19 - 00498952 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2017-03-15 15:02 - 2017-03-04 09:18 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-03-15 15:02 - 2017-03-04 09:18 - 01152328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-03-15 15:02 - 2017-03-04 09:18 - 01092464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2017-03-15 15:02 - 2017-03-04 09:18 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-03-15 15:02 - 2017-03-04 09:18 - 01017032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2017-03-15 15:02 - 2017-03-04 09:18 - 00858952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-03-15 15:02 - 2017-03-04 09:18 - 00819648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-03-15 15:02 - 2017-03-04 08:16 - 00388896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-03-15 15:02 - 2017-03-04 08:01 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-03-15 15:02 - 2017-03-04 07:33 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\LegacyNetUXHost.exe
2017-03-15 15:02 - 2017-03-04 07:27 - 00531968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2017-03-15 15:02 - 2017-03-04 07:25 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2017-03-15 15:02 - 2017-03-04 07:23 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2017-03-15 15:02 - 2017-03-04 07:19 - 00510464 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll
2017-03-15 15:02 - 2017-03-04 07:19 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2017-03-15 15:02 - 2017-03-04 07:17 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-03-15 15:02 - 2017-03-04 07:17 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2017-03-15 15:02 - 2017-03-04 07:16 - 00619520 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2017-03-15 15:02 - 2017-03-04 07:15 - 00695296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2017-03-15 15:02 - 2017-03-04 07:13 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-03-15 15:02 - 2017-03-04 07:08 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2017-03-15 15:02 - 2017-03-04 07:08 - 00787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll
2017-03-15 15:02 - 2017-03-04 07:08 - 00674304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2017-03-15 15:02 - 2017-03-04 07:04 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2017-03-15 15:02 - 2017-03-04 07:03 - 01001472 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2017-03-15 15:02 - 2017-03-04 07:02 - 00817152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Search.dll
2017-03-15 15:02 - 2017-03-04 07:00 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2017-03-15 15:02 - 2017-03-04 06:53 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-03-15 15:02 - 2017-03-04 06:32 - 05123072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-03-15 15:02 - 2017-03-04 06:25 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanpref.dll
2017-03-15 15:02 - 2017-03-04 06:00 - 07200256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-03-15 15:02 - 2017-03-04 05:59 - 00882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2017-03-15 15:02 - 2017-03-04 05:52 - 00957952 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2017-03-15 15:02 - 2017-03-04 05:36 - 03428352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-03-15 15:02 - 2017-03-04 05:36 - 01385472 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2017-03-15 15:02 - 2017-03-04 05:34 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-03-15 15:01 - 2017-03-04 09:08 - 06605544 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-03-15 15:01 - 2017-03-04 06:18 - 07977984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2017-03-15 15:01 - 2017-03-04 05:28 - 14258688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2017-03-15 15:01 - 2017-03-04 05:26 - 12590080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2017-03-15 15:00 - 2017-03-04 10:09 - 00610632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2017-03-15 15:00 - 2017-03-04 09:20 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll
2017-03-15 15:00 - 2017-03-04 08:29 - 00216416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-03-15 15:00 - 2017-03-04 08:17 - 00315232 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2017-03-15 15:00 - 2017-03-04 08:17 - 00038240 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2017-03-15 15:00 - 2017-03-04 07:59 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2017-03-15 15:00 - 2017-03-04 07:58 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2017-03-15 15:00 - 2017-03-04 07:57 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpreference.exe
2017-03-15 15:00 - 2017-03-04 07:49 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2017-03-15 15:00 - 2017-03-04 07:45 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2017-03-15 15:00 - 2017-03-04 07:42 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscore.dll
2017-03-15 15:00 - 2017-03-04 07:39 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
2017-03-15 15:00 - 2017-03-04 07:39 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabbtnEx.dll
2017-03-15 15:00 - 2017-03-04 07:29 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2017-03-15 15:00 - 2017-03-04 07:27 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2017-03-15 15:00 - 2017-03-04 07:26 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe
2017-03-15 15:00 - 2017-03-04 07:19 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2017-03-15 15:00 - 2017-03-04 07:10 - 00509440 _____ (Microsoft Corporation) C:\WINDOWS\system32\energy.dll
2017-03-15 15:00 - 2017-03-04 07:08 - 00472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll
2017-03-15 15:00 - 2017-03-04 07:08 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSSync.dll
2017-03-15 15:00 - 2017-03-04 07:03 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2017-03-15 15:00 - 2017-03-04 06:58 - 01752576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2017-03-15 15:00 - 2017-03-04 06:58 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingMonitor.dll
2017-03-15 15:00 - 2017-03-04 06:56 - 00961536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2017-03-15 15:00 - 2017-03-04 06:54 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2017-03-15 15:00 - 2017-03-04 06:49 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2017-03-15 15:00 - 2017-03-04 06:25 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2017-03-15 15:00 - 2017-03-04 06:24 - 01097728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-03-15 15:00 - 2017-03-04 06:22 - 00995328 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2017-03-15 15:00 - 2017-03-04 06:03 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Tabbtn.dll
2017-03-15 15:00 - 2017-01-24 04:22 - 00447095 _____ C:\WINDOWS\system32\ApnDatabase.xml
2017-03-15 14:59 - 2017-03-04 10:13 - 07467872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-03-15 14:59 - 2017-03-04 10:13 - 01098648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2017-03-15 14:59 - 2017-03-04 10:12 - 02656952 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2017-03-15 14:59 - 2017-03-04 10:04 - 00687496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2017-03-15 14:59 - 2017-03-04 09:56 - 01637216 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-03-15 14:59 - 2017-03-04 09:49 - 03449168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2017-03-15 14:59 - 2017-03-04 09:12 - 03695152 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-03-15 14:59 - 2017-03-04 08:27 - 00431456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2017-03-15 14:59 - 2017-03-04 08:24 - 00420704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2017-03-15 14:59 - 2017-03-04 08:16 - 02831488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2017-03-15 14:59 - 2017-03-04 08:16 - 01062992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
2017-03-15 14:59 - 2017-03-04 08:15 - 00549088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2017-03-15 14:59 - 2017-03-04 08:15 - 00521192 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2017-03-15 14:59 - 2017-03-04 07:28 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\apds.dll
2017-03-15 14:59 - 2017-03-04 07:26 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2017-03-15 14:59 - 2017-03-04 07:25 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinFax.dll
2017-03-15 14:59 - 2017-03-04 07:23 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2017-03-15 14:59 - 2017-03-04 07:22 - 00450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2017-03-15 14:59 - 2017-03-04 07:16 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2017-03-15 14:59 - 2017-03-04 07:09 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-03-15 14:59 - 2017-03-04 07:08 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2017-03-15 14:59 - 2017-03-04 07:08 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmIndexer.dll
2017-03-15 14:59 - 2017-03-04 07:05 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-03-15 14:59 - 2017-03-04 07:05 - 00602624 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-03-15 14:59 - 2017-03-04 07:05 - 00538112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2017-03-15 14:59 - 2017-03-04 07:00 - 01239552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2017-03-15 14:59 - 2017-03-04 07:00 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-03-15 14:59 - 2017-03-04 07:00 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-03-15 14:59 - 2017-03-04 06:59 - 01847808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2017-03-15 14:59 - 2017-03-04 06:59 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-03-15 14:59 - 2017-03-04 06:57 - 01040896 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2017-03-15 14:59 - 2017-03-04 06:56 - 01648128 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2017-03-15 14:59 - 2017-03-04 06:55 - 01319424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2017-03-15 14:59 - 2017-03-04 06:54 - 00549888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2017-03-15 14:59 - 2017-03-04 06:50 - 02054144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2017-03-15 14:59 - 2017-03-04 06:48 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-03-15 14:59 - 2017-03-04 06:46 - 00283136 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2017-03-15 14:59 - 2017-03-04 06:46 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinFax.dll
2017-03-15 14:59 - 2017-03-04 06:42 - 02436096 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2017-03-15 14:59 - 2017-03-04 06:33 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2017-03-15 14:59 - 2017-03-04 06:31 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2017-03-15 14:59 - 2017-03-04 06:30 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-03-15 14:59 - 2017-03-04 06:24 - 01946112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-03-15 14:59 - 2017-03-04 06:24 - 01729024 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-03-15 14:59 - 2017-03-04 06:19 - 03404800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-03-15 14:59 - 2017-03-04 06:13 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2017-03-15 14:59 - 2017-03-04 06:10 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2017-03-15 14:59 - 2017-03-04 06:04 - 00733184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-03-15 14:59 - 2017-03-04 05:58 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-03-15 14:59 - 2017-03-04 05:55 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-03-15 14:59 - 2017-03-04 05:43 - 22375424 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-03-15 14:59 - 2017-03-04 05:33 - 24603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-03-15 14:58 - 2017-03-04 09:12 - 02607336 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2017-03-15 14:58 - 2017-03-04 07:03 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2017-03-15 14:58 - 2017-03-04 06:59 - 01900544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2017-03-15 14:58 - 2017-03-04 06:29 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2017-03-15 14:58 - 2017-03-04 06:11 - 02444800 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2017-03-15 14:58 - 2017-03-04 05:50 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-03-15 14:58 - 2017-03-04 05:48 - 04895744 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-03-15 14:58 - 2017-03-04 05:39 - 18672128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-03-15 14:58 - 2017-03-04 05:37 - 03664384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-03-15 14:58 - 2017-03-04 05:36 - 19344384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-03-15 14:58 - 2017-03-04 05:36 - 12134912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-03-15 14:58 - 2017-03-04 05:34 - 06312448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2017-03-15 14:58 - 2017-03-04 05:31 - 13392384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-03-15 14:58 - 2017-03-04 05:21 - 05671424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-03-15 14:58 - 2017-03-04 05:19 - 07855616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-03-15 14:57 - 2017-03-04 10:10 - 00754664 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-03-15 14:57 - 2017-03-04 09:09 - 00230752 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-03-15 14:57 - 2017-03-04 09:08 - 00725776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2017-03-15 14:57 - 2017-03-04 09:03 - 00341944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2017-03-15 14:57 - 2017-03-04 08:32 - 02773096 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2017-03-15 14:57 - 2017-03-04 08:17 - 00343904 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2017-03-15 14:57 - 2017-03-04 08:17 - 00142176 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-03-15 14:57 - 2017-03-04 08:17 - 00086368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2017-03-15 14:57 - 2017-03-04 07:50 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-03-15 14:57 - 2017-03-04 07:49 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcdAutoSetup.dll
2017-03-15 14:57 - 2017-03-04 07:48 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scfilter.sys
2017-03-15 14:57 - 2017-03-04 07:40 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2017-03-15 14:57 - 2017-03-04 07:38 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oemlicense.dll
2017-03-15 14:57 - 2017-03-04 07:36 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2017-03-15 14:57 - 2017-03-04 07:31 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2017-03-15 14:57 - 2017-03-04 07:28 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-03-15 14:57 - 2017-03-04 07:28 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2017-03-15 14:57 - 2017-03-04 07:26 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2017-03-15 14:57 - 2017-03-04 07:24 - 00431104 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2017-03-15 14:57 - 2017-03-04 07:24 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2017-03-15 14:57 - 2017-03-04 07:22 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\APHostService.dll
2017-03-15 14:57 - 2017-03-04 07:21 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\scapi.dll
2017-03-15 14:57 - 2017-03-04 07:20 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-03-15 14:57 - 2017-03-04 07:16 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll
2017-03-15 14:57 - 2017-03-04 07:15 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2017-03-15 14:57 - 2017-03-04 07:09 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2017-03-15 14:57 - 2017-03-04 07:07 - 00915456 _____ (Microsoft Corporation) C:\WINDOWS\system32\configurationclient.dll
2017-03-15 14:57 - 2017-03-04 07:07 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2017-03-15 14:57 - 2017-03-04 07:07 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2017-03-15 14:57 - 2017-03-04 07:03 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2017-03-15 14:57 - 2017-03-04 07:02 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2017-03-15 14:57 - 2017-03-04 06:58 - 01717760 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2017-03-15 14:57 - 2017-03-04 06:52 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\licensingdiag.exe
2017-03-15 14:57 - 2017-03-04 06:47 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-03-15 14:57 - 2017-03-04 06:47 - 01052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2017-03-15 14:57 - 2017-03-04 06:27 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2017-03-15 14:57 - 2017-03-04 06:27 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2017-03-15 14:57 - 2017-03-04 06:27 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rshx32.dll
2017-03-15 14:57 - 2017-03-04 06:08 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabSvc.dll
2017-03-15 14:57 - 2017-03-04 05:43 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2017-03-15 14:57 - 2017-03-04 05:42 - 00651776 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
2017-03-15 14:56 - 2017-03-04 10:15 - 01030416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2017-03-15 14:56 - 2017-03-04 10:15 - 00875480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2017-03-15 14:56 - 2017-03-04 09:08 - 00566112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-03-15 14:56 - 2017-03-04 08:32 - 01987424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-03-15 14:56 - 2017-03-04 08:31 - 01594416 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2017-03-15 14:56 - 2017-03-04 08:17 - 01617760 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-03-15 14:56 - 2017-03-04 08:17 - 01294688 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-03-15 14:56 - 2017-03-04 08:17 - 00655200 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-03-15 14:56 - 2017-03-04 08:17 - 00565088 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-03-15 14:56 - 2017-03-04 08:17 - 00242528 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2017-03-15 14:56 - 2017-03-04 07:38 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\feclient.dll
2017-03-15 14:56 - 2017-03-04 07:26 - 00642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-03-15 14:56 - 2017-03-04 07:13 - 00602112 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2017-03-15 14:56 - 2017-03-04 07:07 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-03-15 14:56 - 2017-03-04 07:05 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2017-03-15 14:56 - 2017-03-04 07:02 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-03-15 14:56 - 2017-03-04 07:02 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-03-15 14:56 - 2017-03-04 06:57 - 02731008 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
2017-03-15 14:56 - 2017-03-04 06:55 - 01661952 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2017-03-15 14:56 - 2017-03-04 06:53 - 04456448 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-03-15 14:56 - 2017-03-04 06:35 - 03586560 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-03-15 14:56 - 2017-03-04 06:30 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Proximity.dll
2017-03-15 14:56 - 2017-03-04 06:24 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2017-03-15 14:56 - 2017-03-04 06:20 - 02175488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-03-15 14:56 - 2017-03-04 06:19 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2017-03-15 14:56 - 2017-03-04 06:08 - 00984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-03-15 14:56 - 2017-03-04 05:34 - 00636928 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll
2017-03-15 14:55 - 2017-03-04 09:55 - 01038176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2017-03-15 14:55 - 2017-03-04 09:09 - 00730352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2017-03-15 14:55 - 2017-03-04 09:08 - 04516800 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-03-15 14:55 - 2017-03-04 09:07 - 01540224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-03-15 14:55 - 2017-03-04 09:06 - 00742192 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2017-03-15 14:55 - 2017-03-04 09:06 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2017-03-15 14:55 - 2017-03-04 09:04 - 01128104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2017-03-15 14:55 - 2017-03-04 09:04 - 00625000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-03-15 14:55 - 2017-03-04 07:29 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2017-03-15 14:55 - 2017-03-04 07:21 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack_win.dll
2017-03-15 14:55 - 2017-03-04 07:14 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2017-03-15 14:55 - 2017-03-04 07:11 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.UserAccountsHandlers.dll
2017-03-15 14:55 - 2017-03-04 07:08 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2017-03-15 14:55 - 2017-03-04 07:06 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Bluetooth.dll
2017-03-15 14:55 - 2017-03-04 07:02 - 01159168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationFrame.dll
2017-03-15 14:55 - 2017-03-04 07:02 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-03-15 14:55 - 2017-03-04 07:02 - 00990208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2017-03-15 14:55 - 2017-03-04 06:58 - 01575936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2017-03-15 14:55 - 2017-03-04 06:53 - 01073152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-03-15 14:55 - 2017-03-04 06:41 - 00701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2017-03-15 14:55 - 2017-03-04 06:39 - 01297408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe
2017-03-15 14:55 - 2017-03-04 06:34 - 02610176 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-03-15 14:55 - 2017-03-04 06:31 - 01755648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2017-03-15 14:55 - 2017-03-04 06:31 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2017-03-15 14:55 - 2017-03-04 06:18 - 04826624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-03-15 14:55 - 2017-03-04 06:12 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-03-15 14:55 - 2017-03-04 06:08 - 03585536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-03-15 14:55 - 2017-03-04 06:03 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2017-03-15 14:55 - 2017-03-04 05:56 - 02563584 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll
2017-03-15 14:55 - 2017-03-04 05:52 - 01797120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-03-15 14:55 - 2017-03-04 05:41 - 11545600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-03-15 14:55 - 2017-03-04 05:35 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2017-03-15 14:55 - 2017-03-04 05:31 - 06976512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-03-15 14:55 - 2017-03-04 05:31 - 03994112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-03-15 14:55 - 2017-03-04 05:13 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-03-15 11:19 - 2017-03-15 11:20 - 243330234 _____ C:\Users\Mati\Downloads\Pracovne a obchodne pravo.zip
2017-03-15 00:57 - 2016-01-17 00:02 - 00000000 ____D C:\Users\Mati\Desktop\TNod User & Password Finder 1.6.0 Final Portable
2017-03-14 01:17 - 2017-03-14 01:17 - 10694029 _____ C:\Users\Mati\Downloads\F3-BP-2015-Uhlir-Adam-Thesis (4).pdf
2017-03-14 01:16 - 2017-03-14 01:17 - 10694029 _____ C:\Users\Mati\Downloads\F3-BP-2015-Uhlir-Adam-Thesis (3).pdf
2017-03-13 19:39 - 2017-03-13 19:39 - 00301512 _____ C:\Users\Mati\Downloads\The.Forest.Steamworks.Fix.V5-RVTFiX.rar
2017-03-13 19:15 - 2017-03-13 19:23 - 00000000 ____D C:\Users\Mati\Downloads\3DMGAME-The.Forest.Public.Alpha.v0.55c.Cracked-3DM
2017-03-13 19:12 - 2017-03-13 19:12 - 00055123 _____ C:\Users\Mati\Downloads\PosudokF3694C6560BCC9F7DF28A9C4A654D11730E8D9D2BC953C74C74B3764589A2A829D5AEA2A46C5651E.pdf
2017-03-13 19:12 - 2017-03-13 19:12 - 00055123 _____ C:\Users\Mati\Downloads\PosudokF3694C6560BCC9F7DF28A9C4A654D11730E8D9D2BC953C74C74B3764589A2A829D5AEA2A46C5651E (1).pdf
2017-03-12 23:37 - 2017-03-12 23:37 - 00001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk
2017-03-12 23:36 - 2017-03-12 23:36 - 00001082 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk
2017-03-12 23:35 - 2017-03-12 23:35 - 00001600 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2017-03-12 23:35 - 2017-03-12 23:35 - 00001430 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk
2017-03-12 23:34 - 2017-03-12 23:37 - 00000000 ____D C:\Program Files\Common Files\Adobe
2017-03-12 23:14 - 2017-03-12 23:14 - 00397866 _____ C:\Users\Mati\Downloads\Prezentácia.pptx
2017-03-12 22:38 - 2017-03-12 22:38 - 00239635 _____ C:\Users\Mati\Downloads\Slovný doprovod k prezentácií.pdf
2017-03-10 11:02 - 2017-03-10 11:02 - 00097929 _____ C:\Users\Mati\Downloads\zsskCD (4).pdf
2017-03-09 20:43 - 2017-03-09 20:43 - 00000000 ____D C:\Users\Mati\Downloads\Fences 2016 DVDSCR x264 AC3 - SiNDK8
2017-03-09 17:19 - 2017-03-09 17:20 - 00022081 _____ C:\Users\Mati\Downloads\512_cz.rar
2017-03-09 17:19 - 2017-03-09 17:19 - 00027169 _____ C:\Users\Mati\Downloads\509_cz.rar
2017-03-09 17:19 - 2017-03-09 17:19 - 00023073 _____ C:\Users\Mati\Downloads\510_cz.rar
2017-03-09 17:19 - 2017-03-09 17:19 - 00021865 _____ C:\Users\Mati\Downloads\511_cz.rar
2017-03-09 17:18 - 2017-03-09 17:18 - 00023187 _____ C:\Users\Mati\Downloads\508_cz.rar
2017-03-09 16:25 - 2017-03-09 16:25 - 00022489 _____ C:\Users\Mati\Downloads\The.Forest.Public.Alpha.v0.55c.torrent
2017-03-09 16:25 - 2017-03-09 16:25 - 00022489 _____ C:\Users\Mati\Downloads\The.Forest.Public.Alpha.v0.55c (1).torrent
2017-03-07 14:28 - 2017-03-07 14:28 - 01661377 _____ C:\Users\Mati\Downloads\KS_JAS_D_RPD_-_STAVEBNÁ.pdf
2017-03-07 14:27 - 2017-03-07 14:27 - 01662402 _____ C:\Users\Mati\Downloads\KS_JAS_D RPD - STAVEBNÁ.pdf
2017-03-06 23:11 - 2017-03-06 23:12 - 07822250 _____ C:\Users\Mati\Downloads\myo-sdk-win-0.9.0.zip
2017-03-06 22:10 - 2017-03-06 22:10 - 00000000 ____D C:\ProgramData\Socialclub
2017-03-06 18:19 - 2017-03-06 18:19 - 08321186 _____ C:\Users\Mati\Downloads\pravo.zip
2017-03-06 10:37 - 2017-03-06 10:37 - 00042107 _____ C:\Users\Mati\Downloads\Situácia 2.dwg (1).zip
2017-03-06 01:12 - 2017-03-06 01:12 - 00405128 _____ C:\Users\Mati\Downloads\ESK-NEverbalna-komunikácia-2.pdf
2017-03-03 20:47 - 2017-03-03 20:47 - 00000000 ____D C:\Users\Mati\AppData\LocalLow\Playdead
2017-03-03 20:43 - 2017-03-03 20:43 - 00001633 _____ C:\Users\Public\Desktop\INSIDE.lnk
2017-03-03 20:43 - 2017-03-03 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\INSIDE [GOG.com]
2017-03-03 13:17 - 2017-03-03 13:17 - 04433920 _____ C:\Users\Mati\Downloads\LPS - system ochrany pred bleskom.ppt
2017-03-03 12:55 - 2017-03-03 12:55 - 00292895 _____ C:\Users\Mati\Downloads\e.3._-_technicka_sprava.pdf
2017-03-03 11:15 - 2017-03-03 11:15 - 00828996 _____ C:\Users\Mati\Downloads\PE_SNP (1).pdf
2017-03-03 11:14 - 2017-03-03 11:14 - 01107069 _____ C:\Users\Mati\Downloads\PE_SNP PD.zip
2017-03-02 15:38 - 2017-03-02 15:38 - 00042107 _____ C:\Users\Mati\Downloads\Situácia 2.dwg.zip
2017-03-02 14:15 - 2017-03-02 14:15 - 00045186 _____ C:\Users\Mati\Downloads\[CzT]Collateral_Beauty_Druha_sance_Collateral_Beauty_2016_720pHD_.torrent
2017-03-02 14:12 - 2017-03-02 14:12 - 00017490 _____ C:\Users\Mati\Downloads\[CzT]Fences_2016_DVDScr_.torrent
2017-03-02 13:59 - 2017-03-02 13:59 - 00828996 _____ C:\Users\Mati\Downloads\PE_SNP.pdf
2017-03-01 23:00 - 2017-03-01 23:00 - 10694029 _____ C:\Users\Mati\Downloads\F3-BP-2015-Uhlir-Adam-Thesis (2).pdf
2017-03-01 19:38 - 2017-03-01 19:38 - 02646528 _____ C:\Users\Mati\Downloads\2017-01-11-072339-__SEZ_Krompachy_od_15.7.2016.xls
2017-03-01 19:00 - 2017-03-01 19:00 - 00144604 _____ C:\Users\Mati\Downloads\Situácia.dwg.zip
2017-03-01 18:28 - 2017-03-01 18:28 - 08293177 _____ C:\Users\Mati\Downloads\RV_HRH.rar

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-03-29 17:29 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
2017-03-29 17:00 - 2016-06-30 11:48 - 00000000 ____D C:\Users\Mati\AppData\Roaming\Skype
2017-03-29 15:23 - 2016-06-28 00:14 - 00004166 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{9DCCFFC6-DC26-4869-AB36-D4F6F9D8924E}
2017-03-29 14:29 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-03-29 13:22 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2017-03-29 12:26 - 2016-12-05 21:34 - 00000000 ____D C:\Users\Mati\AppData\Local\cache
2017-03-29 10:54 - 2016-06-27 23:16 - 00000000 ____D C:\Users\Mati\AppData\Roaming\Adobe
2017-03-29 09:05 - 2016-07-22 22:37 - 00000000 ____D C:\Program Files (x86)\Steam
2017-03-29 09:04 - 2016-04-27 09:10 - 00884482 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-03-29 08:59 - 2016-06-27 23:19 - 00000000 ____D C:\ProgramData\NVIDIA
2017-03-29 08:58 - 2016-04-27 09:04 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-03-29 01:11 - 2015-10-30 08:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2017-03-28 23:12 - 2016-06-29 21:00 - 00000000 ____D C:\Users\Mati\AppData\Roaming\vlc
2017-03-28 17:44 - 2016-06-27 23:16 - 00000000 ____D C:\Users\Mati\AppData\Local\Packages
2017-03-27 18:26 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache
2017-03-24 01:17 - 2016-06-27 23:16 - 00000000 ____D C:\Users\Mati
2017-03-23 22:51 - 2016-10-13 01:43 - 00000000 ____D C:\Users\Mati\Documents\ViberDownloads
2017-03-23 15:58 - 2017-02-24 18:55 - 00000000 ____D C:\Users\Mati\AppData\Local\Viber
2017-03-23 15:58 - 2016-10-13 01:43 - 00000000 ____D C:\Users\Mati\AppData\Roaming\ViberPC
2017-03-23 02:14 - 2016-06-28 00:16 - 00000000 ____D C:\Users\Mati\AppData\Local\Adobe
2017-03-23 02:14 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-03-23 02:14 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-03-23 01:40 - 2016-06-28 00:49 - 00000000 ____D C:\Users\Mati\AppData\Local\CrashDumps
2017-03-22 23:57 - 2016-09-18 21:21 - 00000000 ____D C:\Users\Mati\Documents\CPY_SAVES
2017-03-22 23:48 - 2016-06-28 02:24 - 00000000 ____D C:\WINDOWS\SysWOW64\directx
2017-03-22 23:07 - 2017-01-25 16:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-03-22 21:21 - 2016-06-28 01:24 - 00000000 ____D C:\ProgramData\Origin
2017-03-22 20:41 - 2016-06-28 01:25 - 00000000 ____D C:\Users\Mati\AppData\Roaming\Origin
2017-03-22 20:41 - 2016-06-28 01:24 - 00000000 ____D C:\Program Files (x86)\Origin
2017-03-21 09:44 - 2016-04-27 08:59 - 04986832 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-03-21 04:46 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-03-21 04:44 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-03-21 04:39 - 2016-06-27 23:22 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-21 04:35 - 2015-10-30 09:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-03-21 03:31 - 2016-06-28 00:26 - 00000000 ____D C:\Users\Mati\AppData\Roaming\uTorrent
2017-03-21 00:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-03-20 17:40 - 2017-01-10 18:47 - 00000000 ____D C:\Program Files (x86)\Call Of Duty - Black Ops II
2017-03-20 17:39 - 2017-01-10 20:26 - 00002171 _____ C:\Users\Mati\Desktop\Play Black Ops 2 Zombie.lnk
2017-03-19 18:42 - 2016-12-05 21:34 - 00000000 ____D C:\ProgramData\TEMP
2017-03-16 09:21 - 2016-04-27 09:14 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-03-16 02:46 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-03-16 02:46 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2017-03-16 02:46 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-03-16 02:46 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-03-16 02:46 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2017-03-16 02:46 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Provisioning
2017-03-16 02:46 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-03-16 02:46 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Defender
2017-03-16 02:46 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-03-16 02:46 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2017-03-16 02:46 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-03-15 15:05 - 2016-07-12 23:25 - 00000000 ____D C:\Users\Mati\Documents\The Witcher 3
2017-03-15 14:54 - 2016-07-10 01:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2017-03-15 14:52 - 2016-06-29 14:15 - 00000000 ____D C:\Users\Mati\AppData\Local\ElevatedDiagnostics
2017-03-12 23:37 - 2016-09-05 01:27 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2017-03-12 23:37 - 2016-09-05 01:18 - 00000000 ____D C:\Program Files\Adobe
2017-03-12 23:36 - 2016-06-28 00:17 - 00000000 ____D C:\Program Files (x86)\Adobe
2017-03-12 23:35 - 2016-06-28 00:16 - 00000000 ____D C:\ProgramData\Adobe
2017-03-10 06:42 - 2015-10-30 09:26 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-03-10 06:42 - 2015-10-30 09:26 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-03-05 03:57 - 2016-04-27 09:05 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2017-03-03 20:43 - 2016-07-12 22:36 - 00000000 ____D C:\GOG Games
2017-03-03 12:45 - 2016-06-28 00:35 - 00000000 ____D C:\Program Files (x86)\TNod
2017-03-03 11:14 - 2016-10-29 02:40 - 00000000 ____D C:\Users\Mati\Downloads\30 Seconds To Mars (2002-2013) Complete Discography
2017-03-02 18:32 - 2016-06-28 08:07 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-03-02 18:31 - 2016-06-28 08:07 - 138020592 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

==================== Files in the root of some directories =======

2017-01-10 20:08 - 2017-01-10 20:08 - 0223744 _____ () C:\Users\Mati\AppData\Roaming\old
2016-08-19 18:52 - 2016-08-19 18:52 - 0007602 _____ () C:\Users\Mati\AppData\Local\Resmon.ResmonCfg
2016-12-05 21:17 - 2016-12-05 21:17 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2016-06-27 23:28 - 2016-06-27 23:28 - 0000133 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc

Some files in TEMP:
====================
2016-12-05 20:54 - 2011-12-14 20:34 - 0039336 _____ (Autodesk, Inc.) C:\Users\Mati\AppData\Local\Temp\AcDeltree.exe
2017-02-08 16:06 - 2017-02-08 16:06 - 0053248 _____ () C:\Users\Mati\AppData\Local\Temp\datbfme.EXE
2017-02-10 01:10 - 2017-02-10 01:10 - 0065536 _____ (Sony DADC Austria AG) C:\Users\Mati\AppData\Local\Temp\drm_dialogs.dll
2017-01-25 16:23 - 2017-01-25 16:23 - 0440832 _____ () C:\Users\Mati\AppData\Local\Temp\setup.exe
2017-01-25 16:27 - 2017-01-25 16:27 - 0010376 _____ () C:\Users\Mati\AppData\Local\Temp\Trotux.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Smart Security 9.0.407.0 (Enabled - Up to date) {EC1D6F37-E411-475A-DF50-12FF7FE4AC70}
AS: ESET Smart Security 9.0.407.0 (Enabled - Up to date) {577C8ED3-C22B-48D4-E5E0-298D0463E6CD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Personálny firewall (Enabled) {D426EE12-AE7E-4602-F40F-BBCA8137EB0B}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Mati\Desktop" je 8 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000001


==================== End Of Log ==============================

ahoj
Jeste prosim priloz Addition.txt ( druhy log, ktery byl vytvoreny.)

Prikladám addtion

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-03-2017
Ran by Mati (29-03-2017 17:32:21)
Running from C:\Users\Mati\Desktop
Windows 10 Education Version 1511 (X64) (2016-06-27 21:15:09)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3560770857-3083150776-1943231325-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3560770857-3083150776-1943231325-503 - Limited - Disabled)
Guest (S-1-5-21-3560770857-3083150776-1943231325-501 - Limited - Disabled)
Mati (S-1-5-21-3560770857-3083150776-1943231325-1001 - Administrator - Enabled) => C:\Users\Mati

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Smart Security 9.0.407.0 (Enabled - Up to date) {EC1D6F37-E411-475A-DF50-12FF7FE4AC70}
AS: ESET Smart Security 9.0.407.0 (Enabled - Up to date) {577C8ED3-C22B-48D4-E5E0-298D0463E6CD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Personálny firewall (Enabled) {D426EE12-AE7E-4602-F40F-BBCA8137EB0B}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\uTorrent) (Version: 3.4.9.43388 - BitTorrent Inc.)
7-Zip 16.02 (x64) (HKLM\...\7-Zip) (Version: 16.02 - Igor Pavlov)
A360 Desktop (HKLM\...\{B209E611-5511-4AD6-B4B3-9D36F93DBCD4}) (Version: 6.0.3.1100 - Autodesk)
ACA & MEP 2016 Object Enabler (Version: 7.8.41.0 - Autodesk) Hidden
ACAD Private (Version: 20.1.49.0 - Autodesk) Hidden
Adobe Acrobat Reader DC - Slovak (HKLM-x32\...\{AC76BA86-7AD7-1051-7B44-AC0F074E4100}) (Version: 15.023.20070 - Adobe Systems Incorporated)
Adobe Flash Player 25 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 25.0.0.127 - Adobe Systems Incorporated)
Adobe Muse CC 2015 (HKLM-x32\...\{25CC1EC0-19D9-11E5-952D-BD72CD08879E}) (Version: 2015.0.2.4 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Aktualizácie NVIDIA 2.13.0.21 (Version: 2.13.0.21 - NVIDIA Corporation) Hidden
Ansel (Version: 375.95 - NVIDIA Corporation) Hidden
Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
AutoCAD 2013 – Čeština (Czech) (Version: 19.0.55.0 - Autodesk) Hidden
AutoCAD 2013 - English (HKLM\...\AutoCAD 2013 - English) (Version: 19.0.55.0 - Autodesk)
AutoCAD 2013 - English (Version: 19.0.55.0 - Autodesk) Hidden
AutoCAD 2013 Language Pack – Čeština (Czech) (HKLM\...\AutoCAD 2013 Language Pack – Čeština (Czech)) (Version: 19.0.55.0 - Autodesk)
AutoCAD 2013 Language Pack – Čeština (Czech) (Version: 19.0.55.0 - Autodesk) Hidden
AutoCAD 2013 Language Pack - English (Version: 19.0.55.0 - Autodesk) Hidden
AutoCAD 2016 – Čeština (Czech) (Version: 20.1.49.0 - Autodesk) Hidden
AutoCAD 2016 - Français (French) (Version: 20.1.49.0 - Autodesk) Hidden
AutoCAD 2016 (Version: 20.1.49.0 - Autodesk) Hidden
AutoCAD 2016 Language Pack – Čeština (Czech) (Version: 20.1.49.0 - Autodesk) Hidden
AutoCAD 2016 Language Pack - Français (French) (Version: 20.1.49.0 - Autodesk) Hidden
Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.0.84.0 - Autodesk)
Autodesk Content Service (Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Content Service (x32 Version: 3.0.84.0 - Autodesk) Hidden
Autodesk Content Service Language Pack (Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Content Service Language Pack (x32 Version: 3.0.84.0 - Autodesk) Hidden
Autodesk Material Library 2013 (HKLM-x32\...\{117EBEEB-5DB0-43C8-9FD6-DD583DB152DD}) (Version: 3.0.13 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2013 (HKLM-x32\...\{606E12B9-641F-4644-A22A-FF38AE980AFD}) (Version: 3.0.13 - Autodesk)
Blend for Visual Studio 2012 (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden
Blend for Visual Studio 2012 ENU resources (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.09 - Piriform)
Cities - Skylines (HKLM-x32\...\Cities - Skylines_R.G. Mechanics_is1) (Version: - R.G. Mechanics, markfiter)
Cities: Skylines - ČEŠTINA (HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\Cities: Skylines - ČEŠTINA) (Version: - )
Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version: - Valve)
Counter-Strike: Source (HKLM-x32\...\Counter-Strike: Source) (Version: - Valve)
Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden
Dual-Core Optimizer (HKLM-x32\...\{9FD6F1A8-5550-46AF-8509-271DF0E768B5}) (Version: 1.1.4.0169 - AMD)
Entity Framework Designer for Visual Studio 2012 - enu (HKLM-x32\...\{0A1A1D48-DB23-443A-BC7B-49255D138020}) (Version: 11.1.20702.00 - Microsoft Corporation)
ESET Smart Security (HKLM\...\{4CB3B9EE-3841-40D5-89FA-42017161A37D}) (Version: 9.0.376.1 - ESET, spol. s r.o.)
Fallout 4 v.1.1.30 (HKLM-x32\...\Fallout 4_is1) (Version: - )
Far Cry Primal (HKLM-x32\...\{80BD47AF-CF13-49B2-99BF-7E78FBA26124}_is1) (Version: - Ubisoft)
FARO LS 1.1.406.58 (HKLM-x32\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production)
FARO LS 1.1.502.0 (64bit) (HKLM-x32\...\{66D83FE0-D798-4B38-86FE-FB48151E5AEF}) (Version: 5.2.0.35213 - FARO Scanner Production)
femm 4.2 12Jan2016 (HKLM-x32\...\FEMM_is1) (Version: - )
Fraps (HKLM-x32\...\Fraps) (Version: - )
GitHub (HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\5f7eb300e2ea4ebf) (Version: 3.3.4.0 - GitHub, Inc.)
Google Earth (HKLM-x32\...\{F6430171-B86B-4639-839E-374913E7911D}) (Version: 7.1.8.3036 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 56.0.2924.87 - Spoločnosť Google Inc.)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
iCloud (HKLM\...\{ADFDB647-35C0-4254-9EE6-2D9C3B7104BD}) (Version: 5.2.1.69 - Apple Inc.)
IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version: - )
IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version: - )
iNELS3 Designer & Manager (HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\iNELS3 Designer & Manager) (Version: - )
INSIDE (HKLM-x32\...\1916896012_is1) (Version: 2.0.0.2 - GOG.com)
Intel(R) Chipset Device Software (x32 Version: 10.0.13 - Intel(R) Corporation) Hidden
iTunes (HKLM\...\{9D0D2A8B-7E7B-4D88-8D50-24286ED6A5EB}) (Version: 12.5.5.5 - Apple Inc.)
Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
KNX ETS5 Compatibility Components V5.2.0 (x32 Version: 5.2.0.0 - KNX Association cvba) Hidden
KNX ETS5 v5.5.2 (HKLM-x32\...\{6976472b-8d0b-4e4c-a76f-f9c679c77f3e}) (Version: 5.5.665.16682 - KNX Association cvba)
KNX ETS5 v5.5.2 (x32 Version: 5.5.665.16682 - KNX Association cvba) Hidden
LEGO® Harry Potter™: Years 5-7 (HKLM-x32\...\{5C5A944F-096E-4ADD-B8E8-887F18BA6228}) (Version: 1.0.0.0 - WB Games)
LibreOffice 5.1.4.2 (HKLM-x32\...\{D5D4AC5C-C757-4EB2-857C-B021DB22482C}) (Version: 5.1.4.2 - The Document Foundation)
LocalESPC (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
LocalESPCui for en-us (x32 Version: 8.59.25584 - Microsoft) Hidden
Mad Max (HKLM-x32\...\Mad Max_is1) (Version: - )
MATLAB R2011b (HKLM\...\Matlab R2011b) (Version: 7.13 - The MathWorks, Inc.)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D}) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{1948E039-EC79-4591-951D-9867A8C14C90}) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft ASP.NET MVC 3 (HKLM-x32\...\{DCDEC776-BADD-48B9-8F9A-DFF513C3D7FA}) (Version: 3.0.20105.0 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft ASP.NET Web Pages (HKLM-x32\...\{631471BE-DEAB-454B-A9AC-CE3EB42C28B3}) (Version: 1.0.20105.0 - Microsoft Corporation)
Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (HKLM\...\{36E619BC-A234-4EC3-849B-779A7C865A45}) (Version: 11.0.2316.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}) (Version: 11.0.2316.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{13D558FE-A863-402C-B115-160007277033}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{DA1C1761-5F4F-4332-AB9D-29EDF3F8EA0A}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{FA0A244E-F3C2-4589-B42A-3D522DE79A42}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL Compiler Service (HKLM\...\{BEB0F91E-F2EA-48A1-B938-7857ABF2A93D}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{0E8670B8-3965-4930-ADA6-570348B67153}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{6D6D43E5-218C-4B05-92D3-2240810F4760}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (11.1.20627.00) (HKLM-x32\...\{FA804794-2CCB-4301-954F-2C2894698876}) (Version: 11.1.20627.00 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - enu (11.1.20627.00) (HKLM-x32\...\{790E9425-8570-493F-9AE7-81AFC9E46930}) (Version: 11.1.20627.00 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{E2082604-4BA5-44BB-BBFB-AF0F3CB8C6AB}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{F1949145-EB64-4DE7-9D81-E6D27937146C}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2017 (HKLM-x32\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 1.5.30308.1 - Microsoft Corporation)
Microsoft Visual Studio Ultimate 2012 (HKLM-x32\...\{9600393b-6ede-469b-a522-689fce1461d1}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Web Deploy dbSqlPackage Provider - enu (HKLM-x32\...\{E4C33F5B-1B2F-466E-957E-B274F08151A0}) (Version: 10.3.20225.0 - Microsoft Corporation)
Microsoft Web Platform Installer 4.0 (HKLM\...\{E2B8249D-895C-4685-8C83-00F3B1A13028}) (Version: 4.0.1622 - Microsoft Corporation)
Microsoft Word 2013 (HKLM\...\Office15.WORD) (Version: 15.0.4569.1506 - Microsoft Corporation)
Minecraft1.7.2 (HKLM-x32\...\Minecraft1.7.2) (Version: - )
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
Nástroje kontroly pravopisu pro Microsoft Office 2013 – čeština (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Nástroje korektúry balíka Microsoft Office 2013 - slovenčina (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Node.js (HKLM\...\{84F68739-3B44-4D36-ABDB-2151A23C9C3D}) (Version: 6.10.0 - Node.js Foundation)
NVIDIA 3D Vision radič ovládača 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.1.0.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.1.0.52 - NVIDIA Corporation)
NVIDIA Grafický ovládač 375.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 375.95 - NVIDIA Corporation)
NVIDIA Ovládač 3D Vision 375.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 375.95 - NVIDIA Corporation)
NVIDIA Ovládač zvuku HD 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (Version: 3.1.0.52 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 1.2.0.0 - NVIDIA Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 10.4.5.30491 - Electronic Arts, Inc.)
Ovládací panel NVIDIA 375.95 (Version: 375.95 - NVIDIA Corporation) Hidden
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Podpora Apple aplikácií (32-bit) (HKLM-x32\...\{9BA1A894-B42F-4805-BC8C-349C905A3930}) (Version: 5.3.1 - Apple Inc.)
Podpora Apple aplikácií(64-bit) (HKLM\...\{7EAC8A42-9FAC-4F6B-AABF-C08C9F2E0F13}) (Version: 5.3.1 - Apple Inc.)
PreEmptive Analytics Visual Studio Components (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden
Prerequisites for SSDT (HKLM-x32\...\{9169C939-ED01-446A-BD0C-29873BAF4E48}) (Version: 11.0.2100.60 - Microsoft Corporation)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.23.1126.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7188 - Realtek Semiconductor Corp.)
Resident Evil 7 Biohazard (HKLM-x32\...\{1ECBF8F3-7079-44CA-AD32-B2AECBCF636F}_is1) (Version: - Capcom)
Rise of the Tomb Raider (HKLM-x32\...\{45F08513-973A-4C18-93FD-8E12B1908390}_is1) (Version: - Square Enix)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-001B-0000-1000-0000000FF1CE}_Office15.WORD_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version: - Microsoft) Hidden
SHIELD Streaming (Version: 7.1.0330 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.1.0.52 - NVIDIA Corporation) Hidden
Sid Meier's Civilization 6 (HKLM-x32\...\Sid Meier's Civilization 6_is1) (Version: - )
Skype™ 7.31 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.31.104 - Skype Technologies S.A.)
Sound Blaster Cinema (HKLM-x32\...\{8801CA65-921A-4CCC-9D63-879D1D0BAA97}) (Version: 1.00.05 - Creative Technology Limited)
STAR WARS™ Battlefront™ (HKLM-x32\...\{E402D891-4E45-4ce9-B41F-DD35864EF170}) (Version: 1.0.7.36460 - Electronic Arts)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.75813 - TeamViewer)
The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.0.0.0 - GOG.com)
TNod User & Password Finder (HKLM\...\TNod) (Version: 1.6.0.0 - Tukero[X]Team)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.52a - Ghisler Software GmbH)
Unreal Development Kit: 2012-07 (HKLM\...\UDK-3673a5de-78c2-4d04-8100-ff8b2734d314) (Version: - Epic Games, Inc.)
Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
VGA Boost (HKLM-x32\...\{809ACFAE-9A4D-4C60-9223-D8B615CD8CBA}}_is1) (Version: 1.0.0.7 - MSI)
VI Package Manager 2016 (HKLM-x32\...\{D4CCA3C0-8BAD-4632-AE94-8E9D17E0981F}) (Version: 16.0.1986 - JKI)
Viber (HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\{9574df79-44de-4a4a-8146-38d4900e15d0}) (Version: 6.3.0.1532 - Viber Media Inc.)
Viber (x32 Version: 6.3.0.1532 - Viber Media Inc.) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
vs_filehandler_amd64 (x32 Version: 15.0.26228 - Microsoft Corporation) Hidden
vs_filehandler_x86 (x32 Version: 15.0.26228 - Microsoft Corporation) Hidden
vs_minshellmsi (x32 Version: 15.0.26228 - Microsoft Corporation) Hidden
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
WCF Data Services 5.0 (for OData v3) Primary Components (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2012 (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden
WCF RIA Services V1.0 SP2 (HKLM-x32\...\{3A523AF9-D32F-4C85-8388-0335731F3405}) (Version: 4.1.61829.0 - Microsoft Corporation)
WinRAR 5.31 (64-bitová verzia) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3560770857-3083150776-1943231325-1001_Classes\CLSID\{6A221957-2D85-42A7-8E19-BE33950D1DEB}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2013\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3560770857-3083150776-1943231325-1001_Classes\CLSID\{BD0DEB94-63DB-4392-9420-6EEE05094B1F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2013\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3560770857-3083150776-1943231325-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2013\en-US\acadficn.dll (Autodesk, Inc.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {13BD9814-4BA4-4BB0-86DF-B603DC671A7B} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-03-23] (Adobe Systems Incorporated)
Task: {1637E5A7-369E-4D7A-A98E-9A9C2B00824F} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-10-25] (NVIDIA Corporation)
Task: {1BFBE738-64C3-44BE-9466-05ACC00EF09D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {350C3C12-66C3-469D-895B-05785B1C2D8C} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-10-25] (NVIDIA Corporation)
Task: {620827BA-D5A5-44B8-9F51-6A3190372669} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {6FE219F9-769F-4342-87C4-5045C9FCFD52} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-10-25] (NVIDIA Corporation)
Task: {75D00A8B-B310-4FBB-B7D1-494F8776B30D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-06-28] (Google Inc.)
Task: {7F9EC894-8F69-46A4-9B81-5437E55285CA} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {8049B3C8-563D-4B51-8383-1A05782F30C3} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_25_0_0_127_pepper.exe [2017-03-23] (Adobe Systems Incorporated)
Task: {97E80F51-286C-43B2-990D-2D634F7503BF} - System32\Tasks\NIUpdateServiceStartupTask => C:\Program Files (x86)\National Instruments\Shared\Update Service\NIUpdateService.exe
Task: {9A25A0B5-EFEA-4AAF-8F1A-5A25A9FA36DE} - System32\Tasks\{2979C5F7-5A82-460E-A40E-E344D9033130} => pcalua.exe -a "C:\ProgramData\Battle.net\Agent\Blizzard Uninstaller.exe" -c --lang=ruRU --uid=battle.net --displayname="Battle.net"
Task: {A9E65797-136D-4010-81C6-317B240CAEE6} - System32\Tasks\JKIUpdateTask => C:\Program Files (x86)\JKI\VI Package Manager\support\JKIUpdate.exe [2016-03-21] (JKI)
Task: {AE4A0614-46EC-4E2C-89D5-79136619E09E} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-10-25] (NVIDIA Corporation)
Task: {C13AD9D7-40AB-471D-B797-53390892BC31} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-10-25] (NVIDIA Corporation)
Task: {C657EE4F-2752-49A6-9394-0B97C9A2193D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-06-28] (Google Inc.)
Task: {D2AF6F22-E058-45A4-A53A-61CD3A61C714} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-08-20] (Piriform Ltd)
Task: {D5AFA49C-D848-4530-8CCA-DB7162761720} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {DB3D8B1F-D3E6-41EB-B23F-1B2AADD6EF1A} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-10-25] (NVIDIA Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

Na plose, tam kde mas umisteny FRST vytvor TXT soubor, ktery pojmenujes fixlist.txt a do nej vloz nasledujici text:

( Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopíruj).

start
CreateRestorePoint:

CloseProcesses:

Hosts:

EmptyTemp:

HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\MountPoints2: {46cb6183-4201-11e6-9cbb-448a5b9fdb03} - "L:\setup.exe"
HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\MountPoints2: {7ed7e4a3-5246-11e6-9cbd-448a5b9fdb03} - "L:\setup.exe"
HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\MountPoints2: {c97361f5-3d0f-11e6-9cb7-448a5b9fdb03} - "K:\AutoRun.exe" {D2D77DC2-8299-11D1-8949-444553540000} 5.2066.1.A14B04 PID_0083 {01D42BF0-ED08-463f-8A28-99EB6FEE962B}
GroupPolicy: Restriction <======= ATTENTION
GroupPolicyScripts: Restriction <======= ATTENTION
S3 MSICDSetup; \??\J:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\J:\NTIOLib_X64.sys [X]
end

Prikladám log po fixe


Fix result of Farbar Recovery Scan Tool (x64) Version: 15-03-2017
Ran by Mati (03-04-2017 21:33:34) Run:1
Running from C:\Users\Mati\Desktop
Loaded Profiles: Mati (Available Profiles: Mati)
Boot Mode: Normal
==============================================

fixlist content:
*****************
start
CreateRestorePoint:

CloseProcesses:

Hosts:

EmptyTemp:

HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\MountPoints2: {46cb6183-4201-11e6-9cbb-448a5b9fdb03} - "L:\setup.exe"
HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\MountPoints2: {7ed7e4a3-5246-11e6-9cbd-448a5b9fdb03} - "L:\setup.exe"
HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\...\MountPoints2: {c97361f5-3d0f-11e6-9cb7-448a5b9fdb03} - "K:\AutoRun.exe" {D2D77DC2-8299-11D1-8949-444553540000} 5.2066.1.A14B04 PID_0083 {01D42BF0-ED08-463f-8A28-99EB6FEE962B}
GroupPolicy: Restriction <======= ATTENTION
GroupPolicyScripts: Restriction <======= ATTENTION
S3 MSICDSetup; \??\J:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\J:\NTIOLib_X64.sys [X]
end
*****************

Restore point was successfully created.
Processes closed successfully.
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => value removed successfully
HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{46cb6183-4201-11e6-9cbb-448a5b9fdb03} => key removed successfully
HKCR\CLSID\{46cb6183-4201-11e6-9cbb-448a5b9fdb03} => key not found.
HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7ed7e4a3-5246-11e6-9cbd-448a5b9fdb03} => key removed successfully
HKCR\CLSID\{7ed7e4a3-5246-11e6-9cbd-448a5b9fdb03} => key not found.
HKU\S-1-5-21-3560770857-3083150776-1943231325-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c97361f5-3d0f-11e6-9cb7-448a5b9fdb03} => key removed successfully
HKCR\CLSID\{c97361f5-3d0f-11e6-9cb7-448a5b9fdb03} => key not found.
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
"C:\WINDOWS\system32\GroupPolicy\Machine" => not found.
HKLM\System\CurrentControlSet\Services\MSICDSetup => key removed successfully
MSICDSetup => service removed successfully
HKLM\System\CurrentControlSet\Services\NTIOLib_1_0_C => key removed successfully
NTIOLib_1_0_C => service removed successfully

=========== EmptyTemp: ==========

BITS transfer queue => 583648 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 53933167 B
Java, Flash, Steam htmlcache => 621766658 B
Windows/system/drivers => 3848539 B
Edge => 3291345 B
Chrome => 115581486 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 128 B
LocalService => 4062 B
NetworkService => 0 B
Mati => 178873300 B

RecycleBin => 0 B
EmptyTemp: => 932.6 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 21:34:25 ====

Stáhni AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Ulož na plochu
Ukonči všechny programy
Klikni nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vlož.


nasledne tento tool MBAM: http://forum.viry.cz/viewtopic.php?f=29&t=144868
-Nainstaluj,dej úplný sken

-Log zkopíruj sem.

Lod z AdwCleaner:

# AdwCleaner v6.045 - Logfile created 09/04/2017 at 17:20:07
# Updated on 28/03/2017 by Malwarebytes
# Database : 2017-04-06.1 [Server]
# Operating System : Windows 10 Education (X64)
# Username : Mati - DESKTOP-8RU3FLP
# Running from : C:\Users\Mati\Desktop\adwcleaner_6.045.exe
# Mode: Clean
# Support : https://www.malwarebytes.com/support



***** [ Services ] *****



***** [ Folders ] *****



***** [ Files ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Shortcuts ] *****



***** [ Scheduled Tasks ] *****



***** [ Registry ] *****



***** [ Web browsers ] *****



*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [760 Bytes] - [09/04/2017 17:20:07]
C:\AdwCleaner\AdwCleaner[S0].txt - [1152 Bytes] - [09/04/2017 17:20:00]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [905 Bytes] ##########



Log z MBAM:


Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 09.04.17
Čas skenování: 17:29
Logovací soubor: sken.txt
Správce: Ano

-Informace o softwaru-
Verze: 3.0.6.1469
Verze komponentů: 1.0.96
Aktualizovat verzi balíku komponent: 1.0.1693
Licence: Zkušební

-Systémová informace-
OS: Windows 10
CPU: x64
Systém souborů: NTFS
Uživatel: DESKTOP-8RU3FLP\Mati

-Shrnutí skenování-
Typ skenování: Vlastní skenování
Výsledek: Dokončeno
Skenované objekty: 683506
Uplynulý čas: 2 hod, 27 min, 45 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Povoleno
Heuristika: Povoleno
Potenciálně nežádoucí program: Povoleno
Potenciálně nežádoucí modifikace: Povoleno

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 1
RiskWare.Agent, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\TNod, Žádná uživatelská akce, [383], [352776],1.0.1693

Hodnota v registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)

Soubor: 7
Unknown.Rootkit.Driver, C:\WINDOWS\System32\drivers\WUDFRd.sys, Žádná uživatelská akce, [0], [0],0.0.0
HackTool.FilePatch, C:\PROGRAM FILES\ADOBE\ADOBE PHOTOSHOP CS6 (64 BIT)\ADOBE.PHOTOSHOP.CS6-PATCH.EXE, Žádná uživatelská akce, [8215], [281135],1.0.1693
RiskWare.Tool.CK, C:\PROGRAM FILES\AUTODESK\AUTOCAD 2013\XF-ADSK2013_X64.EXE, Žádná uživatelská akce, [248], [36579],1.0.1693
RiskWare.Agent, C:\PROGRAM FILES (X86)\TNOD\UNINST-TNOD.EXE, Žádná uživatelská akce, [383], [352776],1.0.1693
RiskWare.Agent, C:\USERS\MATI\DESKTOP\TNOD USER & PASSWORD FINDER 1.6.0 FINAL SETUP & PORTABLE\TNOD USER & PASSWORD FINDER 1.6.0 FINAL PORTABLE.RAR, Žádná uživatelská akce, [383], [352776],1.0.1693
RiskWare.Agent, C:\USERS\MATI\DESKTOP\TNOD USER & PASSWORD FINDER 1.6.0 FINAL SETUP & PORTABLE\TNOD USER & PASSWORD FINDER 1.6.0 FINAL PORTABLE\TNODUP-PORTABLE.EXE, Žádná uživatelská akce, [383], [352776],1.0.1693
RiskWare.Agent, C:\USERS\MATI\DESKTOP\TNOD USER & PASSWORD FINDER 1.6.0 FINAL SETUP & PORTABLE\TNOD USER & PASSWORD FINDER 1.6.0 FINAL SETUP\TNOD USER & PASSWORD FINDER 1.6.0 FINAL SETUP.EXE, Žádná uživatelská akce, [383], [352776],1.0.1693

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)

muzes prosim tento soubor nechat proskenovat na www.virustotal.com
- pokud uz byl soubor otestovany, zvol Reanalyse.

C:\WINDOWS\System32\drivers\WUDFRd.sys

Dal som skenovať, tu sú výsledky:

https://www.virustotal.com/sk/file/9d2b ... 491914150/

dobre,
Muzes znovu pustit MBAM a odstran vse krome

Unknown.Rootkit.Driver, C:\WINDOWS\System32\drivers\WUDFRd.sys, Žádná uživatelská akce, [0], [0],0.0.0

vysledek vloz sem.