VIRY.CZ

Ahoj, prosím o kontrolu lagujicího počítače. Děkuji

Logfile of random's system information tool 1.16 (written by random/random)
Run by winki at 2017-04-13 22:40:48
Microsoft Windows 10 Pro
System drive C: has 37 GB (32%) free of 114 GB
Total RAM: 32712 MB (83% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:40:49, on 13.04.2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.14393.0953)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Users\winki\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
C:\Users\winki\AppData\Roaming\Spotify\SpotifyWebHelper.exe
C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe
C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Plex\Plex Media Server\Plex Dlna Server.exe
C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
C:\Users\winki\AppData\Local\Amazon Drive\AmazonDrive.exe
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe
C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
C:\Program Files (x86)\Origin\Origin.exe
C:\Program Files (x86)\Origin\QtWebEngineProcess.exe
C:\Program Files (x86)\Origin\QtWebEngineProcess.exe
C:\Users\winki\AppData\Roaming\uTorrent\utorrent.exe
C:\Program Files\trend micro\winki_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Microsoft OneDrive for Business Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office16\GROOVEEX.DLL
O4 - HKLM\..\Run: [Adobe Creative Cloud] "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
O4 - HKLM\..\Run: [ZoneAlarm] "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\winki\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Google Update] C:\Users\winki\AppData\Local\Google\Update\1.3.33.3\GoogleUpdateCore.exe
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\winki\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [Plex Media Server] "C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Amazon Drive] "C:\Users\winki\AppData\Local\Amazon Drive\AmazonDrive.exe" --source-autostart
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do Microsoft Excelu - res://C:\PROGRA~1\MICROS~1\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Poslat do On&eNotu - res://C:\PROGRA~1\MICROS~1\Office16\ONBttnIE.dll/105
O9 - Extra button: Poslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Poslat do On&eNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: AdobeUpdateService - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: aswbIDSAgent - AVAST Software s.r.o. - C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Futuremark SystemInfo Service - Futuremark - C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Služba Kaspersky Secure Connection 1.0.0 (KSDE1.0.0) - AO Kaspersky Lab - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Origin Web Helper Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginWebHelperService.exe
O23 - Service: Plex Update Service (PlexUpdateService) - Plex, Inc. - C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 12 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\Windows\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies Ltd. - C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZoneAlarm Privacy Service (ZAPrivacyService) - Check Point Software Technologies, Ltd. - C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZaPrivacyService.exe
O23 - Service: ZoneAlarm ICM Service - Check Point Software Technologies Ltd. - C:\Program Files (x86)\CheckPoint\ZoneAlarm\ICM-Service.exe

--
End of file - 13092 bytes

====== Enumerating Processes ======

C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
C:\Windows\System32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted
"C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe" -service
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k appmodel
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe"
"C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe"
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000
"C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"
"C:\Program Files (x86)\Origin\OriginWebHelperService.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe"
"C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe" -r
"C:\Program Files (x86)\CheckPoint\ZoneAlarm\ICM-Service.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\WinLogon.exe -SpecialSession
C:\Windows\System32\dwm.exe
"C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -f "C:\ProgramData\NVIDIA\DisplaySessionContainer%d.log" -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\Session" -r -l 3 -p 30000 -c
"C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA\NvContainerUser%d.log" -d "C:\Program Files (x86)\NVIDIA Corporation\NvContainer\plugins\User" -r -l 3 -p 30000 -c
C:\Windows\system32\sihost.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup
C:\Windows\system32\taskhostw.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\Explorer.EXE
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe" -hidden
"C:\Program Files\Logitech\LogiOptions\LogiOptions.exe" /noui
"C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.exe"
C:\Program Files\AVAST Software\Avast\AvastUI.exe
"C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe" -Embedding
"C:\Users\winki\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe" --type=renderer --disable-gpu-compositing --no-sandbox --primordial-pipe-token=B8525931E9996FC7BBB2AB038719F9C3 --lang=en-US --lang=en-US --log-file="C:\Users\winki\AppData\Local\NVIDIA Corporation\NVIDIA Share\CefCache\debug.log" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --service-request-channel-token=B8525931E9996FC7BBB2AB038719F9C3 --renderer-client-id=2 --mojo-platform-channel-handle=1848 /prefetch:1
"C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe" index.js
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
"C:\Users\winki\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
"C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe"
"C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe" "C:\Program Files (x86)\Plex\Plex Media Server\Resources\Plug-ins-03e4cfa35\Framework.bundle\Contents\Resources\Versions\2\Python/bootstrap.py" "C:\Program Files (x86)\Plex\Plex Media Server\Resources\Plug-ins-03e4cfa35\System.bundle"
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files (x86)\Plex\Plex Media Server\Plex Dlna Server.exe"
"C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe" -Embedding
"C:\Users\winki\AppData\Local\Amazon Drive\AmazonDrive.exe" --source-autostart
"C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe" "-launchedbyvulcan-13416 C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe"
"C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"
C:\Windows\System32\fontdrvhost.exe
"C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe" --onOSstartup=true --showwindow=false --waitForRegistration=true
"C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe" --type=renderer --disable-3d-apis --disable-pinch --no-sandbox --disable-databases --primordial-pipe-token=479AC5D03905F6C6A9F72F5D6EB4DF2E --lang=en-US --lang=en-US --locales-dir-path="C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\locales" --log-file="C:\Users\winki\AppData\Local\Temp\CreativeCloud\ACC\CEF.log" --log-severity=warning --user-agent="Mozilla/5.0 (Windows NT 10.0.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/537.36 CreativeCloud/4.0.0.185" --device-scale-factor=1 --num-raster-threads=4 --content-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --video-image-texture-target=3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553,3553 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="13416.0.1780504321\1035802563" --mojo-platform-channel-handle=2280 /prefetch:1
"C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe"
"C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe"
"C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe" "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\main.js"
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe"
"C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe" "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\server.js"
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\system32\DllHost.exe /Processid:{49F6E667-6658-4BD1-9DE9-6AF87F9FAF85}
"C:\Program Files (x86)\Steam\Steam.exe"
"C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe" "-cachedir=C:\Users\winki\AppData\Local\Steam\htmlcache" "-steampid=12524" "-buildid=1490911112" "-steamid=0" --disable-gpu-compositing --disable-gpu --process-per-tab --disable-spell-checking --disable-out-of-process-pac --disable-smooth-scrolling --enable-direct-write "--log-file=C:\Program Files (x86)\Steam\logs\cef_log.txt"
"C:\Users\winki\AppData\Local\Google\Chrome\Application\chrome.exe"
C:\Users\winki\AppData\Local\Google\Chrome\Application\chrome.exe --type=crashpad-handler /prefetch:7 "--database=C:\Users\winki\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\winki\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=57.0.2987.133 --initial-client-data=0x1a8,0x1ac,0x1b0,0x1a4,0x1b4,0x7ff96a963970,0x7ff96a963960,0x7ff96a963980
"C:\Users\winki\AppData\Local\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=680 --on-initialized-event-handle=588 --parent-handle=592 /prefetch:6
"C:\Users\winki\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1380 --supports-dual-gpus=false --gpu-driver-bug-workarounds=7,10,19,20,23,41,74 --disable-gl-extensions="GL_KHR_blend_equation_advanced GL_KHR_blend_equation_advanced_coherent" --gpu-vendor-id=0x10de --gpu-device-id=0x13c2 --gpu-driver-vendor=NVIDIA --gpu-driver-version=22.21.13.8165 --gpu-driver-date=3-31-2017 --service-request-channel-token=3007CF8BFB8AB1A076CEFA56F075E0A1 --mojo-platform-channel-handle=1404 --ignored=" --type=renderer " /prefetch:2
"C:\Users\winki\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1380 --primordial-pipe-token=1AE7E3E537B11F6CEEAE87F5C1D5855C --lang=cs --extension-process --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-gpu-rasterization --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=1AE7E3E537B11F6CEEAE87F5C1D5855C --renderer-client-id=4 --mojo-platform-channel-handle=2876 /prefetch:1
"C:\Users\winki\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1380 --primordial-pipe-token=A545A208900C39C4B9B317398F6CA5C5 --lang=cs --extension-process --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-gpu-rasterization --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=A545A208900C39C4B9B317398F6CA5C5 --renderer-client-id=5 --mojo-platform-channel-handle=2644 /prefetch:1
"C:\Users\winki\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1380 --primordial-pipe-token=67FB7FEC30F93C126B517E44E4356103 --lang=cs --extension-process --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-gpu-rasterization --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=67FB7FEC30F93C126B517E44E4356103 --renderer-client-id=6 --mojo-platform-channel-handle=2984 /prefetch:1
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
"C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe" --type=renderer --disable-gpu-compositing --disable-smooth-scrolling --enable-pinch --primordial-pipe-token=7ACCE8A3AC606F5B26564D5ED8CD0613 --lang=en-US --lang=cs-CZ --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --product-version="Valve Steam Client" --disable-spell-checking --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --service-request-channel-token=7ACCE8A3AC606F5B26564D5ED8CD0613 --renderer-client-id=2 --mojo-platform-channel-handle=1844 /prefetch:1
C:\Windows\system32\ApplicationFrameHost.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
"C:\Windows\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
"C:\Program Files (x86)\Origin\Origin.exe"
"C:\Program Files (x86)\Origin\QtWebEngineProcess.exe" --type=renderer --enable-threaded-compositing --no-sandbox --disable-databases --lang=en --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=4 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --disable-gpu-compositing --channel="1792.4.239395675\1640609747" /prefetch:673131151
"C:\Program Files (x86)\Origin\QtWebEngineProcess.exe" --type=renderer --enable-threaded-compositing --no-sandbox --lang=en --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=4 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --disable-gpu-compositing --channel="1792.8.210531040\671445965" /prefetch:673131151
"C:\Users\winki\AppData\Roaming\uTorrent\utorrent.exe" "C:\Users\winki\Downloads\[CzT]Hitman_2016_.torrent"
"C:\Users\winki\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1380 --primordial-pipe-token=9B626E5BB7BA0F93D79A467A576683F5 --lang=cs --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-gpu-rasterization --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=9B626E5BB7BA0F93D79A467A576683F5 --renderer-client-id=180 --mojo-platform-channel-handle=5436 /prefetch:1
"C:\Users\winki\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1380 --primordial-pipe-token=F9AC4AA3E7D48177F29D9A4B869DF51A --lang=cs --extension-process --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-gpu-rasterization --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=F9AC4AA3E7D48177F29D9A4B869DF51A --renderer-client-id=184 --mojo-platform-channel-handle=8916 /prefetch:1
"C:\Users\winki\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1380 --primordial-pipe-token=790AB7BC4E354B68EF9D40A6639F831F --lang=cs --disable-client-side-phishing-detection --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-gpu-rasterization --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=790AB7BC4E354B68EF9D40A6639F831F --renderer-client-id=191 --mojo-platform-channel-handle=9512 /prefetch:1
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe15_ Global\UsGthrCtrlFltPipeMssGthrPipe15 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 656 660 668 8192 664
C:\Windows\System32\smartscreen.exe -Embedding
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\winki\Downloads\RSITx64.exe"

====== Scheduled tasks folder ======

C:\Windows\system32\tasks\Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Windows\system32\tasks\AdobeAAMUpdater-1.0-DESKTOP-0S50FER-winki - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe -mode=scheduled
C:\Windows\system32\tasks\AutoKMS - C:\Windows\AutoKMS\AutoKMS.exe
C:\Windows\system32\tasks\Avast Emergency Update - C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
C:\Windows\system32\tasks\GoogleUpdateTaskUserS-1-5-21-116116240-444440880-2871013289-1001Core - C:\Users\winki\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\system32\tasks\GoogleUpdateTaskUserS-1-5-21-116116240-444440880-2871013289-1001UA - C:\Users\winki\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
C:\Windows\system32\tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe --launcher=TaskScheduler
C:\Windows\system32\tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
C:\Windows\system32\tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
C:\Windows\system32\tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe
C:\Windows\system32\tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe --logon
C:\Windows\system32\tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe
C:\Windows\system32\tasks\OneDrive Standalone Update Task v2 - %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
C:\Windows\system32\tasks\Red Giant Link - "C:\Program Files\Red Giant Link\Red Giant Link.exe" --silent
C:\Windows\system32\tasks\SafeZone scheduled Autoupdate 1491403712 - C:\Program Files\AVAST Software\SZBrowser\launcher.exe --scheduledautoupdate $(Arg0)
C:\Windows\system32\tasks\Microsoft\XblGameSave\XblGameSaveTask - %windir%\System32\XblGameSaveTask.exe standby
C:\Windows\system32\tasks\Microsoft\XblGameSave\XblGameSaveTaskLogon - %windir%\System32\XblGameSaveTask.exe logon
C:\Windows\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join - %SystemRoot%\System32\dsregcmd.exe
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start - C:\Windows\system32\sc.exe start wuauserv
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\sih - %systemroot%\System32\sihclient.exe
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\sihboot - %systemroot%\System32\sihclient.exe /boot
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -upload
C:\Windows\system32\tasks\Microsoft\Windows\WCM\WiFiTask - %SystemRoot%\System32\WiFiTask.exe
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Maintenance Install - %systemroot%\system32\usoclient.exe StartInstall
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Policy Install - %systemroot%\system32\usoclient.exe StartInstall
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Reboot - %systemroot%\system32\MusNotification.exe RebootDialog
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Refresh Settings - %systemroot%\system32\usoclient.exe RefreshSettings
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Resume On Boot - %systemroot%\system32\usoclient.exe ResumeUpdate
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan - %systemroot%\system32\usoclient.exe StartScan
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display - %systemroot%\system32\MusNotification.exe Display
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot - %systemroot%\system32\MusNotification.exe ReadyToReboot
C:\Windows\system32\tasks\Microsoft\Windows\UNP\RunCampaignManager - %windir%\System32\UNP\UNPCampaignManager.exe
C:\Windows\system32\tasks\Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Logon - %windir%\system32\UNP\UNPUXLauncher.exe /campaignId {91be532c-f9f1-406a-9858-43697c6f437a} /launchtype scheduled /trigger Logon
C:\Windows\system32\tasks\Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OnIdle - %windir%\system32\UNP\UNPUXLauncher.exe /campaignId {91be532c-f9f1-406a-9858-43697c6f437a} /launchtype scheduled /trigger OnIdle
C:\Windows\system32\tasks\Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OutOfIdle - %windir%\system32\UNP\UNPUXLauncher.exe /campaignId {91be532c-f9f1-406a-9858-43697c6f437a} /launchtype scheduled /trigger OutOfIdle
C:\Windows\system32\tasks\Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\RunCampaignManager2 - C:\Windows\system32\UNP\UNPCampaignManager.exe
C:\Windows\system32\tasks\Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Time - %windir%\system32\UNP\UNPUXLauncher.exe /campaignId {91be532c-f9f1-406a-9858-43697c6f437a} /launchtype scheduled /trigger Time
C:\Windows\system32\tasks\Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Unlock - %windir%\system32\UNP\UNPUXLauncher.exe /campaignId {91be532c-f9f1-406a-9858-43697c6f437a} /launchtype scheduled /trigger Unlock
C:\Windows\system32\tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone - %windir%\system32\tzsync.exe
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask - %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
C:\Windows\system32\tasks\Microsoft\Windows\Subscription\EnableLicenseAcquisition - %SystemRoot%\system32\UpgradeSubscription.exe -e
C:\Windows\system32\tasks\Microsoft\Windows\Subscription\LicenseAcquisition - %SystemRoot%\system32\UpgradeSubscription.exe
C:\Windows\system32\tasks\Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization - %windir%\system32\defrag.exe -c -h -g -# -m 8 -i 13500
C:\Windows\system32\tasks\Microsoft\Windows\Speech\SpeechModelDownloadTask - %windir%\system32\speech_onecore\common\SpeechModelDownload.exe
C:\Windows\system32\tasks\Microsoft\Windows\SpacePort\SpaceAgentTask - %windir%\system32\SpaceAgent.exe
C:\Windows\system32\tasks\Microsoft\Windows\SpacePort\SpaceManagerTask - %windir%\system32\spaceman.exe /Work
C:\Windows\system32\tasks\Microsoft\Windows\Shell\FamilySafetyMonitor - %windir%\System32\wpcmon.exe
C:\Windows\system32\tasks\Microsoft\Windows\SharedPC\Account Cleanup - %windir%\System32\rundll32.exe %windir%\System32\Windows.SharedPC.AccountManager.dll,StartMaintenance
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - %SystemRoot%\System32\drvinst.exe 6
C:\Windows\system32\tasks\Microsoft\Windows\NlaSvc\WiFiTask - %SystemRoot%\System32\WiFiTask.exe nla
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - %SystemRoot%\System32\MbaeParserTask.exe
C:\Windows\system32\tasks\Microsoft\Windows\Management\Provisioning\Logon - %windir%\system32\ProvTool.exe /turn 5
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotificationWindows.exe
C:\Windows\system32\tasks\Microsoft\Windows\Location\WindowsActionDialog - %windir%\System32\WindowsActionDialog.exe
C:\Windows\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClient - %windir%\system32\dmclient.exe
C:\Windows\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload - %windir%\system32\dmclient.exe utcwnf
C:\Windows\system32\tasks\Microsoft\Windows\DUSM\dusmtask - %SystemRoot%\System32\dusmtask.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskFootprint\Diagnostics - %windir%\system32\disksnapshot.exe -z
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskCleanup\SilentCleanup - %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
C:\Windows\system32\tasks\Microsoft\Windows\Device Information\Device - %windir%\system32\devicecensus.exe
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c -h -o -$
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Clip\License Validation - %SystemRoot%\system32\ClipUp.exe -p -s -o
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup - %windir%\system32\rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
C:\Windows\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierdaily - %windir%\system32\AppHostRegistrationVerifier.exe
C:\Windows\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierinstall - %windir%\system32\AppHostRegistrationVerifier.exe
C:\Windows\system32\tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState - %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
C:\Windows\system32\tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup - %windir%\system32\dstokenclean.exe
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattelrunner.exe
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\StartupAppTask - %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\Windows\system32\tasks\Microsoft\Office\Office 15 Subscription Heartbeat - %ProgramFiles%\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe
C:\Windows\system32\tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 - "C:\Program Files\Microsoft Office\Office16\msoia.exe" scan upload mininterval:2880
C:\Windows\system32\tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 - "C:\Program Files\Microsoft Office\Office16\msoia.exe" scan upload
C:\Windows\system32\tasks\AVAST Software\Avast settings backup - C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe /backup /iavs

=========Mozilla firefox=========

ProfilePath - C:\Users\winki\AppData\Roaming\Mozilla\Firefox\Profiles\8k8cupjw.default

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF48
"sp@avast.com"=C:\Program Files\AVAST Software\Avast\SafePrice\FF48


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll


C:\Users\winki\AppData\Roaming\Mozilla\Firefox\Profiles\8k8cupjw.default\addons.json
Mozilla Firefox hotfix - extension - firefox-hotfix@mozilla.org

C:\Users\winki\AppData\Roaming\Mozilla\Firefox\Profiles\8k8cupjw.default\extensions.json
Application Update Service Helper - extension - aushelper@mozilla.org - C:\Program Files (x86)\Mozilla Firefox\browser\features\aushelper@mozilla.org.xpi
Site Deployment Checker - extension - deployment-checker@mozilla.org - C:\Program Files (x86)\Mozilla Firefox\browser\features\deployment-checker@mozilla.org.xpi
Multi-process staged rollout - extension - e10srollout@mozilla.org - C:\Program Files (x86)\Mozilla Firefox\browser\features\e10srollout@mozilla.org.xpi
Pocket - extension - firefox@getpocket.com - C:\Program Files (x86)\Mozilla Firefox\browser\features\firefox@getpocket.com.xpi
Web Compat - extension - webcompat@mozilla.org - C:\Program Files (x86)\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi
Default - theme - {972ce4c6-7e08-4474-a285-3208198ce6fd} - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi
Avast Online Security - webextension - wrc@avast.com - C:\Program Files\AVAST Software\Avast\WebRep\FF48
Avast SafePrice - webextension - sp@avast.com - C:\Program Files\AVAST Software\Avast\SafePrice\FF48
Disable Prefetch - extension - disable-prefetch@mozilla.org - C:\Users\winki\AppData\Roaming\Mozilla\Firefox\Profiles\8k8cupjw.default\features\{963f6099-798a-4d69-9045-b8f7eea7ca8e}\disable-prefetch@mozilla.org.xpi
Multi-process staged rollout - extension - e10srollout@mozilla.org - C:\Users\winki\AppData\Roaming\Mozilla\Firefox\Profiles\8k8cupjw.default\features\{963f6099-798a-4d69-9045-b8f7eea7ca8e}\e10srollout@mozilla.org.xpi

C:\Users\winki\AppData\Roaming\Mozilla\Firefox\Profiles\8k8cupjw.default\pluginreg.dat

=========Google Chrome=========

C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapbdbdomjkkjkaonfhkkikfgjllcleb 1 Překladač Google 2.0.6
Extension aapocclcgogkmnckokdopfmhonfmgoek 1 Prezentace Google 0.9
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Obchod Chrome 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Dokumenty Google 0.9
Extension apdfllckaahabafndbhieahigkjlhalf 1 Disk Google 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension bpiopmneeadfapifejkfpahpljkicpik
Extension ckibcdccnfeookdmbahgiakhnjcddpki 0
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension efaidnbmnnnibpcajpcglclefindmkaj 1 Adobe Acrobat 15.1.0.6
Extension elicpjhcidhpjomhibiffojpinpmmpil 0 Video Downloader professional 1.97.54
Extension fdpohaocaechififmbbbbbknoalclacl 1 Full Page Screen Capture 2.2
Extension felcaaldnbdncclmgdcncolpebgiejap 1 Tabulky Google 1.1
Extension fhoibnponjcgjgcnfacekaijdbbplhib 2 Ochrana Kaspersky 5.0.141.4
Extension fpniocchabmgenibceglhnfeimmdhdfm 1 Plex 2.12.9
Extension gbchcmhmhahfdphkhkmpfmihenigjmpp 0 Vzdálená plocha Chrome 57.0.2987.84
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Dokumenty Google offline 1.4
Extension ilfoopambfaclfjmpiaijnccgcmbeigi 1 FormApps Chrome Extension 1.5.0.20
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.46
Extension koiaokdomkpjdgniimnkhgbilbjgpeak 1 Auto HD For YouTube™ 6.91
Extension komhbcfkdcgmcdoenjcjheifdiabikfi 0 Google Play 3.1
Extension lneaknkopdijkpnocmklfnjbeapigfbh 0 Mapy Google 5.4.1
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mfffpogegjflfpflabcdkioaeobkgjik 1 GaiaAuthExtension 0.0.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension mpcddcfoblbgmnaklcpkbfajnfikinhn 0
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.2
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.2
Extension oadboiipflhobonjjffjbfekfjcgkhco
Extension okadibdjfemgnhjiembecghcbfknbfhg 1 Enhanced Steam 9.3
Extension pioclpoplcdbaefihamjohnefbikjilc 1 Evernote Web Clipper 6.12
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 5717.116.0.4
Homepage: http://seznam.cz/
default_search_provider.search_url:
C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj]
"Path"=


======Registry dump ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\PROGRA~1\MICROS~1\Office16\GROOVEEX.DLL [2015-07-31 2165976]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\PROGRA~2\MICROS~1\Office16\GROOVEEX.DLL [2015-07-31 1512152]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2016-10-13 3942864]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2017-02-23 1880512]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01 508128]
"LogiOptions"=C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [2017-01-14 1739896]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvLaunch.exe [2017-04-05 213824]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\winki\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2017-04-12 1518808]
"Google Update"=C:\Users\winki\AppData\Local\Google\Update\1.3.33.3\GoogleUpdateCore.exe [2017-04-12 599632]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2017-03-23 3019552]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2017-02-07 4701888]
"Spotify Web Helper"=C:\Users\winki\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2017-03-24 1446000]
"Plex Media Server"=C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe [2017-03-01 14367208]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2017-03-14 27545048]
"Amazon Drive"=C:\Users\winki\AppData\Local\Amazon Drive\AmazonDrive.exe [2017-04-01 4828336]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Creative Cloud"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2017-03-27 2404952]
"ZoneAlarm"=C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [2017-03-24 145208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders" = credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"DSCAutomationHostEnabled"=2
"EnableCursorSuppression"=1
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux1"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv

====== File associations ======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== List of files/folders created in the last 1 month ======

2017-04-13 22:30:10 ----D---- C:\rsit
2017-04-13 22:30:10 ----D---- C:\Program Files\trend micro
2017-04-13 19:50:20 ----D---- C:\ProgramData\SWCUTemp
2017-04-13 17:57:25 ----D---- C:\Windows\system32\UNP
2017-04-13 17:57:25 ----D---- C:\Program Files\UNP
2017-04-12 12:19:57 ----A---- C:\Windows\SYSWOW64\WebcamUi.dll
2017-04-12 12:19:56 ----A---- C:\Windows\SYSWOW64\SyncSettings.dll
2017-04-12 12:19:56 ----A---- C:\Windows\SYSWOW64\RADCUI.dll
2017-04-12 12:19:56 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2017-04-12 12:19:56 ----A---- C:\Windows\SYSWOW64\AzureSettingSyncProvider.dll
2017-04-12 12:19:52 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2017-04-12 12:19:52 ----A---- C:\Windows\SYSWOW64\netshell.dll
2017-04-12 12:19:52 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2017-04-12 12:19:52 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2017-04-12 12:19:52 ----A---- C:\Windows\SYSWOW64\ipsecsnp.dll
2017-04-12 12:19:52 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2017-04-12 12:19:48 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2017-04-12 12:19:48 ----A---- C:\Windows\SYSWOW64\ieproxy.dll
2017-04-12 12:19:48 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2017-04-12 12:19:48 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2017-04-12 12:19:47 ----A---- C:\Windows\SYSWOW64\wininet.dll
2017-04-12 12:19:45 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2017-04-12 12:19:45 ----A---- C:\Windows\SYSWOW64\apds.dll
2017-04-12 12:19:44 ----A---- C:\Windows\SYSWOW64\Windows.Data.Pdf.dll
2017-04-12 12:19:41 ----A---- C:\Windows\SYSWOW64\Windows.Media.MediaControl.dll
2017-04-12 12:19:39 ----A---- C:\Windows\SYSWOW64\wlidcli.dll
2017-04-12 12:19:39 ----A---- C:\Windows\SYSWOW64\WinRtTracing.dll
2017-04-12 12:19:39 ----A---- C:\Windows\SYSWOW64\Windows.System.UserDeviceAssociation.dll
2017-04-12 12:19:39 ----A---- C:\Windows\SYSWOW64\Windows.Storage.ApplicationData.dll
2017-04-12 12:19:39 ----A---- C:\Windows\SYSWOW64\Windows.StateRepositoryClient.dll
2017-04-12 12:19:39 ----A---- C:\Windows\SYSWOW64\Windows.Media.Speech.dll
2017-04-12 12:19:39 ----A---- C:\Windows\SYSWOW64\Windows.Media.Ocr.dll
2017-04-12 12:19:39 ----A---- C:\Windows\SYSWOW64\Windows.Media.FaceAnalysis.dll
2017-04-12 12:19:39 ----A---- C:\Windows\SYSWOW64\Windows.Gaming.XboxLive.Storage.dll
2017-04-12 12:19:39 ----A---- C:\Windows\SYSWOW64\Windows.Gaming.Input.dll
2017-04-12 12:19:39 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Perception.dll
2017-04-12 12:19:39 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.dll
2017-04-12 12:19:39 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Core.dll
2017-04-12 12:19:39 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-04-12 12:19:39 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2017-04-12 12:19:39 ----A---- C:\Windows\SYSWOW64\AppContracts.dll
2017-04-12 12:19:38 ----A---- C:\Windows\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2017-04-12 12:19:37 ----A---- C:\Windows\SYSWOW64\xpsrchvw.exe
2017-04-12 12:19:37 ----A---- C:\Windows\SYSWOW64\XblAuthTokenBrokerExt.dll
2017-04-12 12:19:37 ----A---- C:\Windows\SYSWOW64\XblAuthManagerProxy.dll
2017-04-12 12:19:37 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2017-04-12 12:19:36 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2017-04-12 12:19:36 ----A---- C:\Windows\SYSWOW64\Windows.Web.Http.dll
2017-04-12 12:19:36 ----A---- C:\Windows\SYSWOW64\Windows.Web.dll
2017-04-12 12:19:36 ----A---- C:\Windows\SYSWOW64\Windows.UI.dll
2017-04-12 12:19:36 ----A---- C:\Windows\SYSWOW64\win32kfull.sys
2017-04-12 12:19:35 ----A---- C:\Windows\SYSWOW64\WwaApi.dll
2017-04-12 12:19:35 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Wallet.dll
2017-04-12 12:19:34 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2017-04-12 12:19:34 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2017-04-12 12:19:34 ----A---- C:\Windows\SYSWOW64\Windows.Web.Diagnostics.dll
2017-04-12 12:19:34 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.Phone.dll
2017-04-12 12:19:34 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.Maps.dll
2017-04-12 12:19:34 ----A---- C:\Windows\SYSWOW64\Windows.UI.Input.Inking.dll
2017-04-12 12:19:34 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Scanners.dll
2017-04-12 12:19:34 ----A---- C:\Windows\SYSWOW64\usoapi.dll
2017-04-12 12:19:34 ----A---- C:\Windows\SYSWOW64\UserDeviceRegistration.dll
2017-04-12 12:19:34 ----A---- C:\Windows\SYSWOW64\updatepolicy.dll
2017-04-12 12:19:34 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2017-04-12 12:19:34 ----A---- C:\Windows\SYSWOW64\StoreAgent.dll
2017-04-12 12:19:34 ----A---- C:\Windows\SYSWOW64\InstallAgentUserBroker.exe
2017-04-12 12:19:34 ----A---- C:\Windows\SYSWOW64\InstallAgent.exe
2017-04-12 12:19:33 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.InkControls.dll
2017-04-12 12:19:33 ----A---- C:\Windows\SYSWOW64\Windows.System.SystemManagement.dll
2017-04-12 12:19:33 ----A---- C:\Windows\SYSWOW64\UserDataTimeUtil.dll
2017-04-12 12:19:33 ----A---- C:\Windows\SYSWOW64\UserDataAccountApis.dll
2017-04-12 12:19:33 ----A---- C:\Windows\SYSWOW64\twinui.appcore.dll
2017-04-12 12:19:33 ----A---- C:\Windows\SYSWOW64\twinapi.appcore.dll
2017-04-12 12:19:33 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2017-04-12 12:19:33 ----A---- C:\Windows\SYSWOW64\sbe.dll
2017-04-12 12:19:33 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2017-04-12 12:19:33 ----A---- C:\Windows\SYSWOW64\ExSMime.dll
2017-04-12 12:19:33 ----A---- C:\Windows\SYSWOW64\AppointmentActivation.dll
2017-04-12 12:19:32 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2017-04-12 12:19:32 ----A---- C:\Windows\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2017-04-12 12:19:32 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Sensors.dll
2017-04-12 12:19:32 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.dll
2017-04-12 12:19:32 ----A---- C:\Windows\SYSWOW64\vaultcli.dll
2017-04-12 12:19:32 ----A---- C:\Windows\SYSWOW64\TokenBrokerUI.dll
2017-04-12 12:19:32 ----A---- C:\Windows\SYSWOW64\TokenBroker.dll
2017-04-12 12:19:32 ----A---- C:\Windows\SYSWOW64\shell32.dll
2017-04-12 12:19:32 ----A---- C:\Windows\SYSWOW64\SettingSyncCore.dll
2017-04-12 12:19:32 ----A---- C:\Windows\SYSWOW64\LicenseManager.dll
2017-04-12 12:19:32 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2017-04-12 12:19:32 ----A---- C:\Windows\SYSWOW64\aadtb.dll
2017-04-12 12:19:31 ----A---- C:\Windows\SYSWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-04-12 12:19:31 ----A---- C:\Windows\SYSWOW64\Windows.Media.dll
2017-04-12 12:19:31 ----A---- C:\Windows\SYSWOW64\RTMediaFrame.dll
2017-04-12 12:19:31 ----A---- C:\Windows\SYSWOW64\Chakra.dll
2017-04-12 12:19:31 ----A---- C:\Windows\SYSWOW64\efswrt.dll
2017-04-12 12:19:30 ----A---- C:\Windows\SYSWOW64\wpnapps.dll
2017-04-12 12:19:30 ----A---- C:\Windows\SYSWOW64\Windows.Perception.Stub.dll
2017-04-12 12:19:30 ----A---- C:\Windows\SYSWOW64\Windows.Media.Editing.dll
2017-04-12 12:19:30 ----A---- C:\Windows\SYSWOW64\Windows.Graphics.Printing.dll
2017-04-12 12:19:30 ----A---- C:\Windows\SYSWOW64\Windows.Graphics.Printing.3D.dll
2017-04-12 12:19:30 ----A---- C:\Windows\SYSWOW64\PlayToReceiver.dll
2017-04-12 12:19:30 ----A---- C:\Windows\SYSWOW64\PlayToManager.dll
2017-04-12 12:19:30 ----A---- C:\Windows\SYSWOW64\PlayToDevice.dll
2017-04-12 12:19:29 ----A---- C:\Windows\SYSWOW64\WpcWebFilter.dll
2017-04-12 12:19:29 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2017-04-12 12:19:29 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2017-04-12 12:19:29 ----A---- C:\Windows\SYSWOW64\AuthBroker.dll
2017-04-12 12:19:28 ----A---- C:\Windows\SYSWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-04-12 12:19:28 ----A---- C:\Windows\SYSWOW64\Windows.Networking.HostName.dll
2017-04-12 12:19:28 ----A---- C:\Windows\SYSWOW64\Windows.Networking.dll
2017-04-12 12:19:27 ----A---- C:\Windows\SYSWOW64\Windows.Networking.Connectivity.dll
2017-04-12 12:19:26 ----A---- C:\Windows\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2017-04-12 12:19:26 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2017-04-12 12:19:26 ----A---- C:\Windows\SYSWOW64\mspaint.exe
2017-04-12 12:19:26 ----A---- C:\Windows\SYSWOW64\MiracastReceiver.dll
2017-04-12 12:19:26 ----A---- C:\Windows\SYSWOW64\mfsrcsnk.dll
2017-04-12 12:19:26 ----A---- C:\Windows\SYSWOW64\mfnetsrc.dll
2017-04-12 12:19:26 ----A---- C:\Windows\SYSWOW64\mfnetcore.dll
2017-04-12 12:19:26 ----A---- C:\Windows\SYSWOW64\mfmpeg2srcsnk.dll
2017-04-12 12:19:26 ----A---- C:\Windows\SYSWOW64\mfmp4srcsnk.dll
2017-04-12 12:19:26 ----A---- C:\Windows\SYSWOW64\mfmjpegdec.dll
2017-04-12 12:19:25 ----A---- C:\Windows\SYSWOW64\Windows.Media.Streaming.dll
2017-04-12 12:19:25 ----A---- C:\Windows\SYSWOW64\Windows.Media.Import.dll
2017-04-12 12:19:25 ----A---- C:\Windows\SYSWOW64\Windows.Media.Devices.dll
2017-04-12 12:19:25 ----A---- C:\Windows\SYSWOW64\Windows.Media.Audio.dll
2017-04-12 12:19:25 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2017-04-12 12:19:25 ----A---- C:\Windows\SYSWOW64\mos.dll
2017-04-12 12:19:25 ----A---- C:\Windows\SYSWOW64\mfcore.dll
2017-04-12 12:19:25 ----A---- C:\Windows\SYSWOW64\mfasfsrcsnk.dll
2017-04-12 12:19:25 ----A---- C:\Windows\SYSWOW64\MCRecvSrc.dll
2017-04-12 12:19:24 ----A---- C:\Windows\SYSWOW64\windows.storage.dll
2017-04-12 12:19:24 ----A---- C:\Windows\SYSWOW64\MFMediaEngine.dll
2017-04-12 12:19:24 ----A---- C:\Windows\SYSWOW64\mbsmsapi.dll
2017-04-12 12:19:24 ----A---- C:\Windows\SYSWOW64\MbaeApiPublic.dll
2017-04-12 12:19:24 ----A---- C:\Windows\SYSWOW64\AboveLockAppHost.dll
2017-04-12 12:19:23 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2017-04-12 12:19:22 ----A---- C:\Windows\SYSWOW64\Windows.Internal.Bluetooth.dll
2017-04-12 12:19:22 ----A---- C:\Windows\SYSWOW64\InputService.dll
2017-04-12 12:19:21 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2017-04-12 12:19:20 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2017-04-12 12:19:19 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2017-04-12 12:19:19 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2017-04-12 12:19:19 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2017-04-12 12:19:19 ----A---- C:\Windows\SYSWOW64\edgehtml.dll
2017-04-12 12:19:19 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2017-04-12 12:19:15 ----A---- C:\Windows\SYSWOW64\Windows.Globalization.dll
2017-04-12 12:19:15 ----A---- C:\Windows\SYSWOW64\wer.dll
2017-04-12 12:19:15 ----A---- C:\Windows\SYSWOW64\Geolocation.dll
2017-04-12 12:19:15 ----A---- C:\Windows\SYSWOW64\gdi32full.dll
2017-04-12 12:19:15 ----A---- C:\Windows\SYSWOW64\fontdrvhost.exe
2017-04-12 12:19:15 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2017-04-12 12:19:15 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2017-04-12 12:19:14 ----A---- C:\Windows\SYSWOW64\Windows.Internal.Management.dll
2017-04-12 12:19:14 ----A---- C:\Windows\SYSWOW64\Windows.Devices.WiFiDirect.dll
2017-04-12 12:19:14 ----A---- C:\Windows\SYSWOW64\Windows.Devices.WiFi.dll
2017-04-12 12:19:14 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Usb.dll
2017-04-12 12:19:14 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Radios.dll
2017-04-12 12:19:14 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Midi.dll
2017-04-12 12:19:14 ----A---- C:\Windows\SYSWOW64\Windows.Devices.LowLevel.dll
2017-04-12 12:19:14 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Lights.dll
2017-04-12 12:19:14 ----A---- C:\Windows\SYSWOW64\quartz.dll
2017-04-12 12:19:14 ----A---- C:\Windows\SYSWOW64\enrollmentapi.dll
2017-04-12 12:19:14 ----A---- C:\Windows\SYSWOW64\dmenrollengine.dll
2017-04-12 12:19:14 ----A---- C:\Windows\SYSWOW64\DisplayManager.dll
2017-04-12 12:19:14 ----A---- C:\Windows\SYSWOW64\dialclient.dll
2017-04-12 12:19:14 ----A---- C:\Windows\SYSWOW64\D3DCompiler_47.dll
2017-04-12 12:19:13 ----A---- C:\Windows\SYSWOW64\WinTypes.dll
2017-04-12 12:19:13 ----A---- C:\Windows\SYSWOW64\Windows.Devices.SmartCards.dll
2017-04-12 12:19:13 ----A---- C:\Windows\SYSWOW64\Windows.Devices.SerialCommunication.dll
2017-04-12 12:19:13 ----A---- C:\Windows\SYSWOW64\Windows.Devices.PointOfService.dll
2017-04-12 12:19:13 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Picker.dll
2017-04-12 12:19:13 ----A---- C:\Windows\SYSWOW64\Windows.Devices.HumanInterfaceDevice.dll
2017-04-12 12:19:13 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Bluetooth.dll
2017-04-12 12:19:13 ----A---- C:\Windows\SYSWOW64\ole32.dll
2017-04-12 12:19:13 ----A---- C:\Windows\SYSWOW64\msdtcprx.dll
2017-04-12 12:19:13 ----A---- C:\Windows\SYSWOW64\CryptoWinRT.dll
2017-04-12 12:19:13 ----A---- C:\Windows\SYSWOW64\CredProvDataModel.dll
2017-04-12 12:19:13 ----A---- C:\Windows\SYSWOW64\CoreUIComponents.dll
2017-04-12 12:19:13 ----A---- C:\Windows\SYSWOW64\CompPkgSup.dll
2017-04-12 12:19:13 ----A---- C:\Windows\SYSWOW64\cdp.dll
2017-04-12 12:19:12 ----A---- C:\Windows\SYSWOW64\Windows.Devices.AllJoyn.dll
2017-04-12 12:19:12 ----A---- C:\Windows\SYSWOW64\Windows.AccountsControl.dll
2017-04-12 12:19:12 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2017-04-12 12:19:12 ----A---- C:\Windows\SYSWOW64\AppXDeploymentClient.dll
2017-04-12 12:19:12 ----A---- C:\Windows\SYSWOW64\apprepsync.dll
2017-04-12 12:19:12 ----A---- C:\Windows\SYSWOW64\apprepapi.dll
2017-04-12 12:19:12 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2017-04-12 12:19:11 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2017-04-12 12:19:11 ----A---- C:\Windows\SYSWOW64\UserMgrProxy.dll
2017-04-12 12:19:11 ----A---- C:\Windows\SYSWOW64\ShareHost.dll
2017-04-12 12:19:11 ----A---- C:\Windows\SYSWOW64\ErrorDetails.dll
2017-04-12 12:19:11 ----A---- C:\Windows\SYSWOW64\dlnashext.dll
2017-04-12 12:19:11 ----A---- C:\Windows\SYSWOW64\deviceaccess.dll
2017-04-12 12:19:11 ----A---- C:\Windows\SYSWOW64\CoreMessaging.dll
2017-04-12 12:19:11 ----A---- C:\Windows\SYSWOW64\CloudExperienceHostUser.dll
2017-04-12 12:19:11 ----A---- C:\Windows\SYSWOW64\CloudExperienceHostCommon.dll
2017-04-12 12:19:11 ----A---- C:\Windows\SYSWOW64\bcastdvr.exe
2017-04-12 12:13:38 ----A---- C:\Windows\system32\WinRtTracing.dll
2017-04-12 12:13:38 ----A---- C:\Windows\system32\Windows.System.UserDeviceAssociation.dll
2017-04-12 12:13:38 ----A---- C:\Windows\system32\Windows.Storage.ApplicationData.dll
2017-04-12 12:13:38 ----A---- C:\Windows\system32\Windows.StateRepositoryClient.dll
2017-04-12 12:13:38 ----A---- C:\Windows\system32\Windows.Media.Speech.dll
2017-04-12 12:13:38 ----A---- C:\Windows\system32\Windows.Media.Ocr.dll
2017-04-12 12:13:38 ----A---- C:\Windows\system32\Windows.Gaming.XboxLive.Storage.dll
2017-04-12 12:13:38 ----A---- C:\Windows\system32\Windows.Gaming.Input.dll
2017-04-12 12:13:38 ----A---- C:\Windows\system32\Windows.Devices.Perception.dll
2017-04-12 12:13:38 ----A---- C:\Windows\system32\mssprxy.dll
2017-04-12 12:13:37 ----A---- C:\Windows\system32\Windows.ApplicationModel.dll
2017-04-12 12:13:37 ----A---- C:\Windows\system32\Windows.ApplicationModel.Core.dll
2017-04-12 12:13:37 ----A---- C:\Windows\system32\AppContracts.dll
2017-04-12 12:13:18 ----A---- C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2017-04-12 12:13:10 ----A---- C:\Windows\system32\XblAuthTokenBrokerExt.dll
2017-04-12 12:13:10 ----A---- C:\Windows\system32\XblAuthManagerProxy.dll
2017-04-12 12:13:10 ----A---- C:\Windows\system32\GamePanel.exe
2017-04-12 12:13:09 ----A---- C:\Windows\system32\xpsrchvw.exe
2017-04-12 12:13:09 ----A---- C:\Windows\system32\CertEnroll.dll
2017-04-12 12:13:07 ----A---- C:\Windows\system32\winsrv.dll
2017-04-12 12:13:06 ----A---- C:\Windows\system32\WwaApi.dll
2017-04-12 12:13:06 ----A---- C:\Windows\system32\wuaueng.dll
2017-04-12 12:13:06 ----A---- C:\Windows\system32\WindowsCodecs.dll
2017-04-12 12:13:06 ----A---- C:\Windows\system32\Windows.Web.Http.dll
2017-04-12 12:13:06 ----A---- C:\Windows\system32\Windows.Web.dll
2017-04-12 12:13:06 ----A---- C:\Windows\system32\Windows.UI.dll
2017-04-12 12:13:06 ----A---- C:\Windows\system32\Windows.ApplicationModel.Wallet.dll
2017-04-12 12:13:06 ----A---- C:\Windows\system32\win32kfull.sys
2017-04-12 12:13:06 ----A---- C:\Windows\system32\win32kbase.sys
2017-04-12 12:13:06 ----A---- C:\Windows\system32\WebcamUi.dll
2017-04-12 12:13:04 ----A---- C:\Windows\system32\wuuhext.dll
2017-04-12 12:13:04 ----A---- C:\Windows\system32\wuapi.dll
2017-04-12 12:13:04 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2017-04-12 12:13:04 ----A---- C:\Windows\system32\Windows.Web.Diagnostics.dll
2017-04-12 12:13:04 ----A---- C:\Windows\system32\Windows.UI.Input.Inking.dll
2017-04-12 12:13:04 ----A---- C:\Windows\system32\Windows.Devices.Scanners.dll
2017-04-12 12:13:04 ----A---- C:\Windows\system32\vss_ps.dll
2017-04-12 12:13:04 ----A---- C:\Windows\system32\StoreAgent.dll
2017-04-12 12:13:04 ----A---- C:\Windows\system32\InstallAgentUserBroker.exe
2017-04-12 12:13:04 ----A---- C:\Windows\system32\InstallAgent.exe
2017-04-12 12:13:03 ----A---- C:\Windows\system32\Windows.UI.Xaml.Phone.dll
2017-04-12 12:13:03 ----A---- C:\Windows\system32\Windows.UI.Xaml.Maps.dll
2017-04-12 12:13:03 ----A---- C:\Windows\system32\Windows.UI.Xaml.InkControls.dll
2017-04-12 12:13:03 ----A---- C:\Windows\system32\Windows.UI.Search.dll
2017-04-12 12:13:03 ----A---- C:\Windows\system32\Windows.UI.Cred.dll
2017-04-12 12:13:03 ----A---- C:\Windows\system32\UserDeviceRegistration.Ngc.dll
2017-04-12 12:13:03 ----A---- C:\Windows\system32\UserDeviceRegistration.dll
2017-04-12 12:13:03 ----A---- C:\Windows\system32\updatepolicy.dll
2017-04-12 12:13:03 ----A---- C:\Windows\system32\UIRibbonRes.dll
2017-04-12 12:13:03 ----A---- C:\Windows\system32\MusUpdateHandlers.dll
2017-04-12 12:13:03 ----A---- C:\Windows\system32\MusNotificationUx.exe
2017-04-12 12:13:02 ----A---- C:\Windows\system32\Windows.UI.BlockedShutdown.dll
2017-04-12 12:13:02 ----A---- C:\Windows\system32\usocore.dll
2017-04-12 12:13:02 ----A---- C:\Windows\system32\updatehandlers.dll
2017-04-12 12:13:02 ----A---- C:\Windows\system32\MusNotification.exe
2017-04-12 12:13:00 ----A---- C:\Windows\system32\UserDataTimeUtil.dll
2017-04-12 12:13:00 ----A---- C:\Windows\system32\twinui.dll
2017-04-12 12:13:00 ----A---- C:\Windows\system32\twinapi.appcore.dll
2017-04-12 12:13:00 ----A---- C:\Windows\system32\musdialoghandlers.dll
2017-04-12 12:13:00 ----A---- C:\Windows\system32\EmailApis.dll
2017-04-12 12:13:00 ----A---- C:\Windows\system32\drivers\tcpip.sys
2017-04-12 12:13:00 ----A---- C:\Windows\system32\diagtrack.dll
2017-04-12 12:12:59 ----A---- C:\Windows\system32\TSWorkspace.dll
2017-04-12 12:12:59 ----A---- C:\Windows\system32\rdpshell.exe
2017-04-12 12:12:59 ----A---- C:\Windows\system32\RdpRelayTransport.dll
2017-04-12 12:12:59 ----A---- C:\Windows\system32\rdpinit.exe
2017-04-12 12:12:59 ----A---- C:\Windows\system32\rdpencom.dll
2017-04-12 12:12:59 ----A---- C:\Windows\system32\mstscax.dll
2017-04-12 12:12:58 ----A---- C:\Windows\system32\Windows.System.SystemManagement.dll
2017-04-12 12:12:58 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.dll
2017-04-12 12:12:58 ----A---- C:\Windows\system32\SyncSettings.dll
2017-04-12 12:12:58 ----A---- C:\Windows\system32\sbe.dll
2017-04-12 12:12:58 ----A---- C:\Windows\system32\LicenseManager.dll
2017-04-12 12:12:57 ----A---- C:\Windows\system32\smartscreen.exe
2017-04-12 12:12:57 ----A---- C:\Windows\system32\shell32.dll
2017-04-12 12:12:57 ----A---- C:\Windows\system32\SharedStartModel.dll
2017-04-12 12:12:57 ----A---- C:\Windows\system32\Family.Client.dll
2017-04-12 12:12:56 ----A---- C:\Windows\system32\wscapi.dll
2017-04-12 12:12:56 ----A---- C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2017-04-12 12:12:56 ----A---- C:\Windows\system32\Windows.Devices.Sensors.dll
2017-04-12 12:12:56 ----A---- C:\Windows\system32\vaultcli.dll
2017-04-12 12:12:56 ----A---- C:\Windows\system32\TokenBrokerUI.dll
2017-04-12 12:12:56 ----A---- C:\Windows\system32\TokenBroker.dll
2017-04-12 12:12:56 ----A---- C:\Windows\system32\SettingSyncCore.dll
2017-04-12 12:12:56 ----A---- C:\Windows\system32\LsaIso.exe
2017-04-12 12:12:56 ----A---- C:\Windows\system32\kerberos.dll
2017-04-12 12:12:56 ----A---- C:\Windows\system32\AzureSettingSyncProvider.dll
2017-04-12 12:12:56 ----A---- C:\Windows\system32\aadtb.dll
2017-04-12 12:12:55 ----A---- C:\Windows\system32\Windows.Security.Credentials.UI.CredentialPicker.dll
2017-04-12 12:12:55 ----A---- C:\Windows\system32\sppobjs.dll
2017-04-12 12:12:55 ----A---- C:\Windows\system32\Chakra.dll
2017-04-12 12:12:54 ----A---- C:\Windows\system32\SettingsHandlers_nt.dll
2017-04-12 12:12:54 ----A---- C:\Windows\system32\OneBackupHandler.dll
2017-04-12 12:12:54 ----A---- C:\Windows\system32\aadcloudap.dll
2017-04-12 12:12:53 ----A---- C:\Windows\system32\SettingsHandlers_ClosedCaptioning.dll
2017-04-12 12:12:51 ----A---- C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2017-04-12 12:12:51 ----A---- C:\Windows\system32\SystemSettings.DeviceEncryptionHandlers.dll
2017-04-12 12:12:51 ----A---- C:\Windows\system32\DeveloperOptionsSettingsHandlers.dll
2017-04-12 12:12:50 ----A---- C:\Windows\system32\SystemSettingsAdminFlows.exe
2017-04-12 12:12:50 ----A---- C:\Windows\system32\Family.SyncEngine.dll
2017-04-12 12:12:50 ----A---- C:\Windows\system32\efswrt.dll
2017-04-12 12:12:47 ----A---- C:\Windows\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-04-12 12:12:46 ----A---- C:\Windows\system32\RDXTaskFactory.dll
2017-04-12 12:12:45 ----A---- C:\Windows\system32\Windows.Media.dll
2017-04-12 12:12:45 ----A---- C:\Windows\system32\RTMediaFrame.dll
2017-04-12 12:12:44 ----A---- C:\Windows\system32\Windows.Media.Editing.dll
2017-04-12 12:12:44 ----A---- C:\Windows\system32\rdpudd.dll
2017-04-12 12:12:44 ----A---- C:\Windows\system32\rdpcorets.dll
2017-04-12 12:12:43 ----A---- C:\Windows\system32\Windows.Graphics.Printing.dll
2017-04-12 12:12:43 ----A---- C:\Windows\system32\Windows.Graphics.Printing.3D.dll
2017-04-12 12:12:43 ----A---- C:\Windows\system32\RDXService.dll
2017-04-12 12:12:43 ----A---- C:\Windows\system32\qedit.dll
2017-04-12 12:12:43 ----A---- C:\Windows\system32\psmsrv.dll
2017-04-12 12:12:43 ----A---- C:\Windows\system32\PlayToReceiver.dll
2017-04-12 12:12:43 ----A---- C:\Windows\system32\PlayToManager.dll
2017-04-12 12:12:42 ----A---- C:\Windows\system32\wpnapps.dll
2017-04-12 12:12:42 ----A---- C:\Windows\system32\Windows.Perception.Stub.dll
2017-04-12 12:12:42 ----A---- C:\Windows\system32\PlayToDevice.dll
2017-04-12 12:12:41 ----A---- C:\Windows\system32\localspl.dll
2017-04-12 12:12:40 ----A---- C:\Windows\system32\wpninprc.dll
2017-04-12 12:12:40 ----A---- C:\Windows\system32\WpcWebFilter.dll
2017-04-12 12:12:40 ----A---- C:\Windows\system32\puiobj.dll
2017-04-12 12:12:39 ----A---- C:\Windows\system32\oleaut32.dll
2017-04-12 12:12:39 ----A---- C:\Windows\system32\oleacc.dll
2017-04-12 12:12:39 ----A---- C:\Windows\system32\ntoskrnl.exe
2017-04-12 12:12:39 ----A---- C:\Windows\system32\cscui.dll
2017-04-12 12:12:39 ----A---- C:\Windows\system32\AuthBroker.dll
2017-04-12 12:12:39 ----A---- C:\Windows\system32\asycfilt.dll
2017-04-12 12:12:37 ----A---- C:\Windows\system32\Windows.Networking.dll
2017-04-12 12:12:37 ----A---- C:\Windows\system32\NetworkBindingEngineMigPlugin.dll
2017-04-12 12:12:37 ----A---- C:\Windows\system32\drivers\ndis.sys
2017-04-12 12:12:36 ----A---- C:\Windows\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-04-12 12:12:36 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2017-04-12 12:12:35 ----A---- C:\Windows\system32\Windows.Networking.Connectivity.dll
2017-04-12 12:12:33 ----A---- C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2017-04-12 12:12:33 ----A---- C:\Windows\system32\msxml6.dll
2017-04-12 12:12:33 ----A---- C:\Windows\system32\MSVP9DEC.dll
2017-04-12 12:12:32 ----A---- C:\Windows\system32\SensorsApi.dll
2017-04-12 12:12:32 ----A---- C:\Windows\system32\MiracastReceiver.dll
2017-04-12 12:12:31 ----A---- C:\Windows\system32\wmpps.dll
2017-04-12 12:12:31 ----A---- C:\Windows\system32\Windows.Media.Streaming.dll
2017-04-12 12:12:31 ----A---- C:\Windows\system32\Windows.Media.Import.dll
2017-04-12 12:12:31 ----A---- C:\Windows\system32\Windows.Media.Devices.dll
2017-04-12 12:12:31 ----A---- C:\Windows\system32\Windows.Media.Audio.dll
2017-04-12 12:12:31 ----A---- C:\Windows\system32\mfsrcsnk.dll
2017-04-12 12:12:31 ----A---- C:\Windows\system32\mfnetcore.dll
2017-04-12 12:12:31 ----A---- C:\Windows\system32\mfmpeg2srcsnk.dll
2017-04-12 12:12:31 ----A---- C:\Windows\system32\mfmp4srcsnk.dll
2017-04-12 12:12:31 ----A---- C:\Windows\system32\mfmjpegdec.dll
2017-04-12 12:12:31 ----A---- C:\Windows\system32\mfcore.dll
2017-04-12 12:12:31 ----A---- C:\Windows\system32\mfasfsrcsnk.dll
2017-04-12 12:12:30 ----A---- C:\Windows\system32\mos.dll
2017-04-12 12:12:30 ----A---- C:\Windows\system32\MCRecvSrc.dll
2017-04-12 12:12:30 ----A---- C:\Windows\system32\AccountsRt.dll
2017-04-12 12:12:29 ----RA---- C:\Windows\system32\SecureAssessmentHandlers.dll
2017-04-12 12:12:29 ----A---- C:\Windows\system32\odbcconf.dll
2017-04-12 12:12:28 ----A---- C:\Windows\system32\windows.storage.dll
2017-04-12 12:12:28 ----A---- C:\Windows\system32\MFMediaEngine.dll
2017-04-12 12:12:28 ----A---- C:\Windows\system32\mbsmsapi.dll
2017-04-12 12:12:28 ----A---- C:\Windows\system32\MbaeApiPublic.dll
2017-04-12 12:12:27 ----A---- C:\Windows\system32\drivers\cng.sys
2017-04-12 12:12:26 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2017-04-12 12:12:26 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2017-04-12 12:12:26 ----A---- C:\Windows\system32\AboveLockAppHost.dll
2017-04-12 12:12:23 ----A---- C:\Windows\system32\KernelBase.dll
2017-04-12 12:12:22 ----A---- C:\Windows\system32\Windows.Internal.Bluetooth.dll
2017-04-12 12:12:21 ----A---- C:\Windows\system32\ieframe.dll
2017-04-12 12:12:20 ----A---- C:\Windows\system32\webcheck.dll
2017-04-12 12:12:20 ----A---- C:\Windows\system32\indexeddbserver.dll
2017-04-12 12:12:20 ----A---- C:\Windows\system32\iertutil.dll
2017-04-12 12:12:20 ----A---- C:\Windows\system32\ie4uinit.exe
2017-04-12 12:12:19 ----A---- C:\Windows\system32\mshtmled.dll
2017-04-12 12:12:19 ----A---- C:\Windows\system32\msfeeds.dll
2017-04-12 12:12:19 ----A---- C:\Windows\system32\iedkcs32.dll
2017-04-12 12:12:19 ----A---- C:\Windows\system32\ieapfltr.dll
2017-04-12 12:12:19 ----A---- C:\Windows\system32\edgehtml.dll
2017-04-12 12:12:19 ----A---- C:\Windows\system32\dxtrans.dll
2017-04-12 12:12:18 ----A---- C:\Windows\system32\wininet.dll
2017-04-12 12:12:18 ----A---- C:\Windows\system32\mshtml.dll
2017-04-12 12:12:11 ----A---- C:\Windows\system32\urlmon.dll
2017-04-12 12:12:09 ----A---- C:\Windows\HelpPane.exe
2017-04-12 12:12:08 ----A---- C:\Windows\system32\Windows.Globalization.dll
2017-04-12 12:12:08 ----A---- C:\Windows\system32\Geolocation.dll
2017-04-12 12:12:08 ----A---- C:\Windows\system32\gdi32full.dll
2017-04-12 12:12:08 ----A---- C:\Windows\system32\fontdrvhost.exe
2017-04-12 12:12:08 ----A---- C:\Windows\system32\atmlib.dll
2017-04-12 12:12:08 ----A---- C:\Windows\system32\atmfd.dll
2017-04-12 12:12:07 ----A---- C:\Windows\system32\flvprophandler.dll
2017-04-12 12:12:07 ----A---- C:\Windows\system32\FlightSettings.dll
2017-04-12 12:12:03 ----A---- C:\Windows\system32\WpAXHolder.dll
2017-04-12 12:12:03 ----A---- C:\Windows\system32\wer.dll
2017-04-12 12:12:03 ----A---- C:\Windows\system32\enrollmentapi.dll
2017-04-12 12:12:02 ----A---- C:\Windows\system32\Windows.Internal.Management.dll
2017-04-12 12:12:01 ----A---- C:\Windows\system32\Windows.Devices.WiFiDirect.dll
2017-04-12 12:12:01 ----A---- C:\Windows\system32\Windows.Devices.WiFi.dll
2017-04-12 12:12:01 ----A---- C:\Windows\system32\Windows.Devices.Usb.dll
2017-04-12 12:12:01 ----A---- C:\Windows\system32\quartz.dll
2017-04-12 12:12:01 ----A---- C:\Windows\system32\DisplayManager.dll
2017-04-12 12:12:01 ----A---- C:\Windows\system32\D3DCompiler_47.dll
2017-04-12 12:12:00 ----A---- C:\Windows\system32\Windows.Devices.Radios.dll
2017-04-12 12:12:00 ----A---- C:\Windows\system32\Windows.Devices.Printers.dll
2017-04-12 12:12:00 ----A---- C:\Windows\system32\Windows.Devices.Midi.dll
2017-04-12 12:12:00 ----A---- C:\Windows\system32\Windows.Devices.LowLevel.dll
2017-04-12 12:12:00 ----A---- C:\Windows\system32\Windows.Devices.Lights.dll
2017-04-12 12:12:00 ----A---- C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2017-04-12 12:12:00 ----A---- C:\Windows\system32\Windows.Devices.Bluetooth.dll
2017-04-12 12:12:00 ----A---- C:\Windows\system32\Windows.Data.Pdf.dll
2017-04-12 12:12:00 ----A---- C:\Windows\system32\FontProvider.dll
2017-04-12 12:12:00 ----A---- C:\Windows\system32\dosvc.dll
2017-04-12 12:12:00 ----A---- C:\Windows\system32\d2d1.dll
2017-04-12 12:11:59 ----A---- C:\Windows\system32\Windows.Devices.SmartCards.Phone.dll
2017-04-12 12:11:59 ----A---- C:\Windows\system32\Windows.Devices.PointOfService.dll
2017-04-12 12:11:59 ----A---- C:\Windows\system32\enterprisecsps.dll
2017-04-12 12:11:58 ----A---- C:\Windows\system32\Windows.Devices.SmartCards.dll
2017-04-12 12:11:58 ----A---- C:\Windows\system32\Windows.Devices.SerialCommunication.dll
2017-04-12 12:11:58 ----A---- C:\Windows\system32\Windows.Devices.Picker.dll
2017-04-12 12:11:58 ----A---- C:\Windows\system32\DeviceDirectoryClient.dll
2017-04-12 12:11:58 ----A---- C:\Windows\system32\DdcWnsListener.dll
2017-04-12 12:11:57 ----A---- C:\Windows\system32\WinTypes.dll
2017-04-12 12:11:57 ----A---- C:\Windows\system32\ole32.dll
2017-04-12 12:11:57 ----A---- C:\Windows\system32\msdtctm.dll
2017-04-12 12:11:57 ----A---- C:\Windows\system32\dmcertinst.exe
2017-04-12 12:11:57 ----A---- C:\Windows\system32\dafpos.dll
2017-04-12 12:11:57 ----A---- C:\Windows\system32\CryptoWinRT.dll
2017-04-12 12:11:57 ----A---- C:\Windows\system32\CoreUIComponents.dll
2017-04-12 12:11:57 ----A---- C:\Windows\system32\appraiser.dll
2017-04-12 12:11:57 ----A---- C:\Windows\system32\acmigration.dll
2017-04-12 12:11:56 ----A---- C:\Windows\system32\CloudExperienceHostBroker.dll
2017-04-12 12:11:56 ----A---- C:\Windows\system32\CloudExperienceHost.dll
2017-04-12 12:11:56 ----A---- C:\Windows\system32\cdp.dll
2017-04-12 12:11:56 ----A---- C:\Windows\system32\CastLaunch.dll
2017-04-12 12:11:54 ----A---- C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2017-04-12 12:11:54 ----A---- C:\Windows\system32\CompPkgSup.dll
2017-04-12 12:11:52 ----A---- C:\Windows\system32\CloudDomainJoinDataModelServer.dll
2017-04-12 12:11:52 ----A---- C:\Windows\system32\CellularAPI.dll
2017-04-12 12:11:46 ----A---- C:\Windows\system32\Windows.Media.MediaControl.dll
2017-04-12 12:11:46 ----A---- C:\Windows\system32\Windows.Devices.AllJoyn.dll
2017-04-12 12:11:46 ----A---- C:\Windows\system32\AppXDeploymentServer.dll
2017-04-12 12:11:46 ----A---- C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2017-04-12 12:11:46 ----A---- C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2017-04-12 12:11:46 ----A---- C:\Windows\system32\AppXDeploymentClient.dll
2017-04-12 12:11:46 ----A---- C:\Windows\system32\apprepsync.dll
2017-04-12 12:11:46 ----A---- C:\Windows\system32\apprepapi.dll
2017-04-12 12:11:46 ----A---- C:\Windows\system32\actxprxy.dll
2017-04-12 12:11:45 ----A---- C:\Windows\system32\Windows.AccountsControl.dll
2017-04-12 12:11:44 ----A---- C:\Windows\system32\invagent.dll
2017-04-12 12:11:44 ----A---- C:\Windows\system32\devinv.dll
2017-04-12 12:11:44 ----A---- C:\Windows\system32\aeinv.dll
2017-04-12 12:11:43 ----A---- C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2017-04-12 12:11:43 ----A---- C:\Windows\system32\AppVOrchestration.dll
2017-04-12 12:11:43 ----A---- C:\Windows\system32\AppVCatalog.dll
2017-04-12 12:11:41 ----A---- C:\Windows\system32\UserMgrProxy.dll
2017-04-12 12:11:41 ----A---- C:\Windows\system32\deviceaccess.dll
2017-04-12 12:11:40 ----A---- C:\Windows\system32\ShareHost.dll
2017-04-12 12:11:40 ----A---- C:\Windows\system32\dlnashext.dll
2017-04-12 12:11:40 ----A---- C:\Windows\system32\CoreMessaging.dll
2017-04-12 12:11:40 ----A---- C:\Windows\system32\CloudExperienceHostUser.dll
2017-04-12 12:11:40 ----A---- C:\Windows\system32\CloudExperienceHostCommon.dll
2017-04-12 12:11:38 ----A---- C:\Windows\system32\hvix64.exe
2017-04-12 12:11:38 ----A---- C:\Windows\system32\hvax64.exe
2017-04-12 12:11:37 ----A---- C:\Windows\system32\ErrorDetails.dll
2017-04-12 12:11:37 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2017-04-12 12:11:20 ----A---- C:\Windows\system32\drivers\BasicRender.sys
2017-04-12 12:11:19 ----A---- C:\Windows\system32\drivers\BasicDisplay.sys
2017-04-10 17:04:25 ----D---- C:\Users\winki\AppData\Roaming\ZHP
2017-04-10 14:16:38 ----D---- C:\Program Files (x86)\BinarySense
2017-04-10 14:12:06 ----D---- C:\ProgramData\Binarysense
2017-04-09 21:06:28 ----AD---- C:\Program Files\Core Temp
2017-04-08 23:50:29 ----D---- C:\ProgramData\GOG.com
2017-04-08 14:41:15 ----A---- C:\Windows\NvTelemetryContainerRecovery.bat
2017-04-08 14:40:52 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2017-04-08 14:40:46 ----A---- C:\Windows\SYSWOW64\vulkaninfo.exe
2017-04-08 14:40:46 ----A---- C:\Windows\SYSWOW64\vulkan-1.dll
2017-04-08 14:40:46 ----A---- C:\Windows\system32\vulkaninfo.exe
2017-04-08 14:40:46 ----A---- C:\Windows\system32\vulkan-1.dll
2017-04-08 14:40:45 ----D---- C:\Program Files (x86)\VulkanRT
2017-04-08 14:38:43 ----A---- C:\Windows\SYSWOW64\nvptxJitCompiler.dll
2017-04-08 14:38:43 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2017-04-08 14:38:43 ----A---- C:\Windows\SYSWOW64\NvIFROpenGL.dll
2017-04-08 14:38:43 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2017-04-08 14:38:43 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2017-04-08 14:38:43 ----A---- C:\Windows\SYSWOW64\nvfatbinaryLoader.dll
2017-04-08 14:38:43 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2017-04-08 14:38:43 ----A---- C:\Windows\SYSWOW64\nvEncMFThevc.dll
2017-04-08 14:38:43 ----A---- C:\Windows\SYSWOW64\nvEncMFTH264.dll
2017-04-08 14:38:43 ----A---- C:\Windows\SYSWOW64\nvDecMFTMjpeg.dll
2017-04-08 14:38:43 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2017-04-08 14:38:43 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2017-04-08 14:38:43 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2017-04-08 14:38:43 ----A---- C:\Windows\system32\nvptxJitCompiler.dll
2017-04-08 14:38:43 ----A---- C:\Windows\system32\nvopencl.dll
2017-04-08 14:38:43 ----A---- C:\Windows\system32\nvoglv64.dll
2017-04-08 14:38:43 ----A---- C:\Windows\system32\nvmcumd.dll
2017-04-08 14:38:43 ----A---- C:\Windows\system32\NvIFROpenGL.dll
2017-04-08 14:38:43 ----A---- C:\Windows\system32\NvIFR64.dll
2017-04-08 14:38:43 ----A---- C:\Windows\system32\nvhdap64.dll
2017-04-08 14:38:43 ----A---- C:\Windows\system32\NvFBC64.dll
2017-04-08 14:38:43 ----A---- C:\Windows\system32\nvfatbinaryLoader.dll
2017-04-08 14:38:43 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2017-04-08 14:38:43 ----A---- C:\Windows\system32\nvEncMFThevc.dll
2017-04-08 14:38:43 ----A---- C:\Windows\system32\nvEncMFTH264.dll
2017-04-08 14:38:43 ----A---- C:\Windows\system32\nvdispgenco6438165.dll
2017-04-08 14:38:43 ----A---- C:\Windows\system32\nvdispco6438165.dll
2017-04-08 14:38:43 ----A---- C:\Windows\system32\nvDecMFTMjpeg.dll
2017-04-08 14:38:43 ----A---- C:\Windows\system32\nvcuvid.dll
2017-04-08 14:38:43 ----A---- C:\Windows\system32\nvcuda.dll
2017-04-08 14:38:43 ----A---- C:\Windows\system32\nvcompiler.dll
2017-04-07 17:40:08 ----D---- C:\Users\winki\AppData\Roaming\Amazon Cloud Drive
2017-04-07 11:43:45 ----D---- C:\Users\winki\AppData\Roaming\Mozilla
2017-04-07 11:43:37 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2017-04-07 11:43:34 ----AD---- C:\Program Files (x86)\Mozilla Firefox
2017-04-06 12:12:09 ----D---- C:\Windows\Minidump
2017-04-05 16:48:20 ----A---- C:\Windows\system32\drivers\aswKbd.sys
2017-04-05 16:45:46 ----D---- C:\Program Files (x86)\CheckPoint
2017-04-05 16:45:22 ----D---- C:\ProgramData\CheckPoint
2017-04-05 16:43:49 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2017-04-05 16:42:37 ----D---- C:\Users\winki\AppData\Roaming\AVAST Software
2017-04-05 16:42:15 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2017-04-05 16:42:15 ----A---- C:\Windows\system32\drivers\aswStm.sys
2017-04-05 16:42:15 ----A---- C:\Windows\system32\drivers\aswSP.sys
2017-04-05 16:42:15 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2017-04-05 16:42:15 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2017-04-05 16:42:15 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2017-04-05 16:42:15 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2017-04-05 16:42:15 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2017-04-05 16:42:15 ----A---- C:\Windows\system32\drivers\aswbuniva.sys
2017-04-05 16:42:15 ----A---- C:\Windows\system32\drivers\aswbloga.sys
2017-04-05 16:42:15 ----A---- C:\Windows\system32\drivers\aswbidsha.sys
2017-04-05 16:42:15 ----A---- C:\Windows\system32\drivers\aswbidsdrivera.sys
2017-04-05 16:42:12 ----A---- C:\Windows\system32\aswBoot.exe
2017-04-05 16:38:23 ----D---- C:\Program Files\AVAST Software
2017-04-05 16:37:06 ----D---- C:\ProgramData\AVAST Software
2017-04-02 08:15:32 ----A---- C:\Windows\system32\UNPUXWorker.exe
2017-03-31 17:44:08 ----HD---- C:\ProgramData\RWBYTE
2017-03-30 16:36:10 ----RD---- C:\Program Files (x86)\Skype
2017-03-30 16:36:08 ----D---- C:\ProgramData\Skype
2017-03-29 02:07:46 ----N---- C:\Windows\system32\MpSigStub.exe
2017-03-24 20:04:38 ----A---- C:\Windows\system32\drivers\vsdatant.sys
2017-03-24 01:03:00 ----A---- C:\Windows\system32\nvdispgenco6437892.dll
2017-03-24 01:03:00 ----A---- C:\Windows\system32\nvdispco6437892.dll
2017-03-23 19:27:11 ----D---- C:\Program Files (x86)\4KDownload
2017-03-23 18:32:45 ----D---- C:\Users\winki\AppData\Roaming\ArcticLine
2017-03-23 18:32:38 ----AD---- C:\Program Files (x86)\Folder Marker
2017-03-21 13:33:55 ----D---- C:\Users\winki\AppData\Roaming\obs-studio
2017-03-21 13:32:07 ----D---- C:\Program Files (x86)\obs-studio
2017-03-15 15:50:58 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.dll
2017-03-15 15:50:58 ----A---- C:\Windows\SYSWOW64\BingMaps.dll
2017-03-15 15:50:57 ----A---- C:\Windows\SYSWOW64\tquery.dll
2017-03-15 15:50:57 ----A---- C:\Windows\SYSWOW64\explorer.exe
2017-03-15 15:50:56 ----A---- C:\Windows\SYSWOW64\twinui.dll
2017-03-15 15:50:56 ----A---- C:\Windows\SYSWOW64\storagewmi.dll
2017-03-15 15:50:56 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2017-03-15 15:50:56 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2017-03-15 15:50:55 ----A---- C:\Windows\SYSWOW64\mispace.dll
2017-03-15 15:50:55 ----A---- C:\Windows\SYSWOW64\MapRouter.dll
2017-03-15 15:50:55 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2017-03-15 15:50:55 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2017-03-15 15:50:55 ----A---- C:\Windows\SYSWOW64\CloudBackupSettings.dll
2017-03-15 15:50:54 ----A---- C:\Windows\SYSWOW64\WWAHost.exe
2017-03-15 15:50:54 ----A---- C:\Windows\SYSWOW64\wsp_health.dll
2017-03-15 15:50:54 ----A---- C:\Windows\SYSWOW64\wsp_fs.dll
2017-03-15 15:50:54 ----A---- C:\Windows\SYSWOW64\Windows.UI.Immersive.dll
2017-03-15 15:50:54 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2017-03-15 15:50:54 ----A---- C:\Windows\SYSWOW64\msctf.dll
2017-03-15 15:50:54 ----A---- C:\Windows\SYSWOW64\MapGeocoder.dll
2017-03-15 15:50:54 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2017-03-15 15:50:54 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2017-03-15 15:50:53 ----A---- C:\Windows\SYSWOW64\Windows.UI.Search.dll
2017-03-15 15:50:53 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2017-03-15 15:50:53 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2017-03-15 15:50:53 ----A---- C:\Windows\SYSWOW64\hevcdecoder.dll
2017-03-15 15:50:53 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2017-03-15 15:50:53 ----A---- C:\Windows\SYSWOW64\comsvcs.dll
2017-03-15 15:50:53 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2017-03-15 15:50:52 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2017-03-15 15:50:52 ----A---- C:\Windows\SYSWOW64\TextInputFramework.dll
2017-03-15 15:50:52 ----A---- C:\Windows\SYSWOW64\schannel.dll
2017-03-15 15:50:52 ----A---- C:\Windows\SYSWOW64\resutils.dll
2017-03-15 15:50:52 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2017-03-15 15:50:52 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2017-03-15 15:50:52 ----A---- C:\Windows\SYSWOW64\mfsvr.dll
2017-03-15 15:50:51 ----A---- C:\Windows\SYSWOW64\Windows.UI.Logon.dll
2017-03-15 15:50:51 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2017-03-15 15:50:51 ----A---- C:\Windows\SYSWOW64\uReFS.dll
2017-03-15 15:50:51 ----A---- C:\Windows\SYSWOW64\twinapi.dll
2017-03-15 15:50:51 ----A---- C:\Windows\SYSWOW64\SettingSyncHost.exe
2017-03-15 15:50:51 ----A---- C:\Windows\SYSWOW64\Search.ProtocolHandler.MAPI2.dll
2017-03-15 15:50:51 ----A---- C:\Windows\SYSWOW64\OneDriveSettingSyncProvider.dll
2017-03-15 15:50:51 ----A---- C:\Windows\SYSWOW64\mf.dll
2017-03-15 15:50:51 ----A---- C:\Windows\SYSWOW64\GdiPlus.dll
2017-03-15 15:50:51 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2017-03-15 15:50:51 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll
2017-03-15 15:50:51 ----A---- C:\Windows\SYSWOW64\authui.dll
2017-03-15 15:50:51 ----A---- C:\Windows\system32\drivers\spaceport.sys
2017-03-15 15:50:50 ----A---- C:\Windows\SYSWOW64\winmde.dll
2017-03-15 15:50:50 ----A---- C:\Windows\SYSWOW64\TpmCoreProvisioning.dll
2017-03-15 15:50:50 ----A---- C:\Windows\SYSWOW64\policymanager.dll
2017-03-15 15:50:50 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2017-03-15 15:50:50 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2017-03-15 15:50:50 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2017-03-15 15:50:50 ----A---- C:\Windows\SYSWOW64\LockAppHost.exe
2017-03-15 15:50:50 ----A---- C:\Windows\SYSWOW64\gameux.dll
2017-03-15 15:50:50 ----A---- C:\Windows\SYSWOW64\daxexec.dll
2017-03-15 15:50:50 ----A---- C:\Windows\SYSWOW64\AppVEntSubsystems32.dll
2017-03-15 15:50:50 ----A---- C:\Windows\SYSWOW64\AppointmentApis.dll
2017-03-15 15:50:50 ----A---- C:\Windows\system32\drivers\storahci.sys
2017-03-15 15:50:49 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2017-03-15 15:50:49 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2017-03-15 15:50:49 ----A---- C:\Windows\SYSWOW64\SHCore.dll
2017-03-15 15:50:49 ----A---- C:\Windows\SYSWOW64\PCPTpm12.dll
2017-03-15 15:50:49 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2017-03-15 15:50:49 ----A---- C:\Windows\SYSWOW64\mmc.exe
2017-03-15 15:50:49 ----A---- C:\Windows\SYSWOW64\mfds.dll
2017-03-15 15:50:49 ----A---- C:\Windows\SYSWOW64\LogonController.dll
2017-03-15 15:50:49 ----A---- C:\Windows\SYSWOW64\EmailApis.dll
2017-03-15 15:50:48 ----A---- C:\Windows\SYSWOW64\wlanapi.dll
2017-03-15 15:50:48 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.Resources.dll
2017-03-15 15:50:48 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2017-03-15 15:50:48 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2017-03-15 15:50:48 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2017-03-15 15:50:48 ----A---- C:\Windows\SYSWOW64\gpapi.dll
2017-03-15 15:50:48 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2017-03-15 15:50:48 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2017-03-15 15:50:47 ----A---- C:\Windows\SYSWOW64\wsp_sr.dll
2017-03-15 15:50:47 ----A---- C:\Windows\SYSWOW64\WMPDMC.exe
2017-03-15 15:50:47 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2017-03-15 15:50:47 ----A---- C:\Windows\SYSWOW64\mssph.dll
2017-03-15 15:50:47 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2017-03-15 15:50:47 ----A---- C:\Windows\SYSWOW64\input.dll
2017-03-15 15:50:47 ----A---- C:\Windows\SYSWOW64\evr.dll
2017-03-15 15:50:46 ----A---- C:\Windows\SYSWOW64\Windows.Media.BackgroundMediaPlayback.dll
2017-03-15 15:50:46 ----A---- C:\Windows\SYSWOW64\rasgcw.dll
2017-03-15 15:50:46 ----A---- C:\Windows\SYSWOW64\netiougc.exe
2017-03-15 15:50:46 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2017-03-15 15:50:46 ----A---- C:\Windows\SYSWOW64\MCCSEngineShared.dll
2017-03-15 15:50:46 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2017-03-15 15:50:46 ----A---- C:\Windows\SYSWOW64\icm32.dll
2017-03-15 15:50:45 ----A---- C:\Windows\SYSWOW64\wlidprov.dll
2017-03-15 15:50:45 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2017-03-15 15:50:45 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2017-03-15 15:50:45 ----A---- C:\Windows\SYSWOW64\scksp.dll
2017-03-15 15:50:45 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2017-03-15 15:50:44 ----A---- C:\Windows\SYSWOW64\wfdprov.dll
2017-03-15 15:50:44 ----A---- C:\Windows\SYSWOW64\sud.dll
2017-03-15 15:50:44 ----A---- C:\Windows\SYSWOW64\SettingSync.dll
2017-03-15 15:50:44 ----A---- C:\Windows\SYSWOW64\PrintDialogs.dll
2017-03-15 15:50:44 ----A---- C:\Windows\SYSWOW64\Pimstore.dll
2017-03-15 15:50:44 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2017-03-15 15:50:44 ----A---- C:\Windows\SYSWOW64\MSVPXENC.dll
2017-03-15 15:50:44 ----A---- C:\Windows\SYSWOW64\msutb.dll
2017-03-15 15:50:44 ----A---- C:\Windows\SYSWOW64\mscms.dll
2017-03-15 15:50:44 ----A---- C:\Windows\SYSWOW64\mfmkvsrcsnk.dll
2017-03-15 15:50:44 ----A---- C:\Windows\SYSWOW64\ChatApis.dll
2017-03-15 15:50:44 ----A---- C:\Windows\SYSWOW64\BcastDVRHelper.dll
2017-03-15 15:50:43 ----A---- C:\Windows\SYSWOW64\WsmWmiPl.dll
2017-03-15 15:50:43 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2017-03-15 15:50:43 ----A---- C:\Windows\SYSWOW64\Windows.UI.Core.TextInput.dll
2017-03-15 15:50:43 ----A---- C:\Windows\SYSWOW64\Windows.Storage.Search.dll
2017-03-15 15:50:43 ----A---- C:\Windows\SYSWOW64\UserLanguagesCpl.dll
2017-03-15 15:50:43 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2017-03-15 15:50:43 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2017-03-15 15:50:43 ----A---- C:\Windows\SYSWOW64\regedit.exe
2017-03-15 15:50:43 ----A---- C:\Windows\SYSWOW64\MSPhotography.dll
2017-03-15 15:50:43 ----A---- C:\Windows\SYSWOW64\msdtcuiu.dll
2017-03-15 15:50:43 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2017-03-15 15:50:43 ----A---- C:\Windows\SYSWOW64\DevicePairing.dll
2017-03-15 15:50:43 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2017-03-15 15:50:43 ----A---- C:\Windows\SYSWOW64\ActiveSyncProvider.dll
2017-03-15 15:50:43 ----A---- C:\Windows\system32\drivers\xboxgip.sys
2017-03-15 15:50:42 ----A---- C:\Windows\SYSWOW64\wcnwiz.dll
2017-03-15 15:50:42 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2017-03-15 15:50:42 ----A---- C:\Windows\SYSWOW64\Unistore.dll
2017-03-15 15:50:42 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2017-03-15 15:50:42 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2017-03-15 15:50:42 ----A---- C:\Windows\SYSWOW64\puiapi.dll
2017-03-15 15:50:42 ----A---- C:\Windows\SYSWOW64\ProximityCommon.dll
2017-03-15 15:50:42 ----A---- C:\Windows\SYSWOW64\mscandui.dll
2017-03-15 15:50:42 ----A---- C:\Windows\SYSWOW64\MapConfiguration.dll
2017-03-15 15:50:42 ----A---- C:\Windows\SYSWOW64\LockAppBroker.dll
2017-03-15 15:50:42 ----A---- C:\Windows\SYSWOW64\findnetprinters.dll
2017-03-15 15:50:42 ----A---- C:\Windows\SYSWOW64\BrowserSettingSync.dll
2017-03-15 15:50:41 ----A---- C:\Windows\SYSWOW64\XInputUap.dll
2017-03-15 15:50:41 ----A---- C:\Windows\SYSWOW64\WMVSENCD.DLL
2017-03-15 15:50:41 ----A---- C:\Windows\SYSWOW64\Windows.Gaming.UI.GameBar.dll
2017-03-15 15:50:41 ----A---- C:\Windows\SYSWOW64\tbauth.dll
2017-03-15 15:50:41 ----A---- C:\Windows\SYSWOW64\MSVP9DEC.dll
2017-03-15 15:50:41 ----A---- C:\Windows\SYSWOW64\mssitlb.dll
2017-03-15 15:50:41 ----A---- C:\Windows\SYSWOW64\DavSyncProvider.dll
2017-03-15 15:50:41 ----A---- C:\Windows\SYSWOW64\DafPrintProvider.dll
2017-03-15 15:50:41 ----A---- C:\Windows\SYSWOW64\ContactApis.dll
2017-03-15 15:50:41 ----A---- C:\Windows\SYSWOW64\cemapi.dll
2017-03-15 15:50:41 ----A---- C:\Windows\SYSWOW64\CameraCaptureUI.dll
2017-03-15 15:50:41 ----A---- C:\Windows\SYSWOW64\accountaccessor.dll
2017-03-15 15:50:40 ----A---- C:\Windows\SYSWOW64\Windows.Shell.Search.UriHandler.dll
2017-03-15 15:50:40 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-03-15 15:50:40 ----A---- C:\Windows\SYSWOW64\UserDeviceRegistration.Ngc.dll
2017-03-15 15:50:40 ----A---- C:\Windows\SYSWOW64\TokenBrokerCookies.exe
2017-03-15 15:50:40 ----A---- C:\Windows\SYSWOW64\tapi32.dll
2017-03-15 15:50:40 ----A---- C:\Windows\SYSWOW64\msctfui.dll
2017-03-15 15:50:40 ----A---- C:\Windows\SYSWOW64\msctfp.dll
2017-03-15 15:50:40 ----A---- C:\Windows\SYSWOW64\fontext.dll
2017-03-15 15:50:40 ----A---- C:\Windows\SYSWOW64\ddrawex.dll
2017-03-15 15:50:39 ----A---- C:\Windows\SYSWOW64\VCardParser.dll
2017-03-15 15:50:39 ----A---- C:\Windows\SYSWOW64\LaunchWinApp.exe
2017-03-15 15:50:39 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2017-03-15 15:50:39 ----A---- C:\Windows\SYSWOW64\GamePanelExternalHook.dll
2017-03-15 15:50:39 ----A---- C:\Windows\SYSWOW64\ddraw.dll
2017-03-15 15:50:36 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2017-03-15 15:50:36 ----A---- C:\Windows\system32\WWAHost.exe
2017-03-15 15:50:36 ----A---- C:\Windows\system32\wmpmde.dll
2017-03-15 15:50:36 ----A---- C:\Windows\system32\tquery.dll
2017-03-15 15:50:36 ----A---- C:\Windows\system32\mssrch.dll
2017-03-15 15:50:35 ----A---- C:\Windows\system32\WWanAPI.dll
2017-03-15 15:50:35 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2017-03-15 15:50:35 ----A---- C:\Windows\system32\SearchIndexer.exe
2017-03-15 15:50:34 ----A---- C:\Windows\system32\Search.ProtocolHandler.MAPI2.dll
2017-03-15 15:50:33 ----A---- C:\Windows\system32\XblGameSaveExt.dll
2017-03-15 15:50:31 ----A---- C:\Windows\system32\WMPDMC.exe
2017-03-15 15:50:31 ----A---- C:\Windows\system32\SearchFilterHost.exe
2017-03-15 15:50:31 ----A---- C:\Windows\system32\mssvp.dll
2017-03-15 15:50:31 ----A---- C:\Windows\system32\mssphtb.dll
2017-03-15 15:50:30 ----A---- C:\Windows\SYSWOW64\WPDShServiceObj.dll
2017-03-15 15:50:30 ----A---- C:\Windows\system32\wwansvc.dll
2017-03-15 15:50:30 ----A---- C:\Windows\system32\wwanmm.dll
2017-03-15 15:50:30 ----A---- C:\Windows\system32\wlanui.dll
2017-03-15 15:50:30 ----A---- C:\Windows\system32\Windows.Media.FaceAnalysis.dll
2017-03-15 15:50:30 ----A---- C:\Windows\system32\Windows.Gaming.UI.GameBar.dll
2017-03-15 15:50:30 ----A---- C:\Windows\system32\wcnwiz.dll
2017-03-15 15:50:30 ----A---- C:\Windows\system32\nshwfp.dll
2017-03-15 15:50:30 ----A---- C:\Windows\system32\mssph.dll
2017-03-15 15:50:29 ----A---- C:\Windows\system32\wwanconn.dll
2017-03-15 15:50:29 ----A---- C:\Windows\system32\wmp.dll
2017-03-15 15:50:29 ----A---- C:\Windows\system32\mssitlb.dll
2017-03-15 15:50:28 ----A---- C:\Windows\SYSWOW64\wmp.dll
2017-03-15 15:50:26 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2017-03-15 15:50:26 ----A---- C:\Windows\system32\mfnetsrc.dll
2017-03-15 15:50:26 ----A---- C:\Windows\system32\BingMaps.dll
2017-03-15 15:50:25 ----A---- C:\Windows\system32\Wpc.dll
2017-03-15 15:50:25 ----A---- C:\Windows\system32\MapsStore.dll
2017-03-15 15:50:25 ----A---- C:\Windows\system32\MapRouter.dll
2017-03-15 15:50:25 ----A---- C:\Windows\system32\MapGeocoder.dll
2017-03-15 15:50:24 ----A---- C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-03-15 15:50:24 ----A---- C:\Windows\system32\mfplat.dll
2017-03-15 15:50:24 ----A---- C:\Windows\system32\ContactApis.dll
2017-03-15 15:50:23 ----A---- C:\Windows\system32\wpncore.dll
2017-03-15 15:50:23 ----A---- C:\Windows\system32\WpcMon.exe
2017-03-15 15:50:23 ----A---- C:\Windows\system32\wlansec.dll
2017-03-15 15:50:23 ----A---- C:\Windows\system32\win32spl.dll
2017-03-15 15:50:23 ----A---- C:\Windows\system32\usercpl.dll
2017-03-15 15:50:23 ----A---- C:\Windows\system32\TextInputFramework.dll
2017-03-15 15:50:23 ----A---- C:\Windows\system32\SpeechPal.dll
2017-03-15 15:50:23 ----A---- C:\Windows\system32\msxml3.dll
2017-03-15 15:50:23 ----A---- C:\Windows\system32\mmc.exe
2017-03-15 15:50:23 ----A---- C:\Windows\system32\LockAppBroker.dll
2017-03-15 15:50:23 ----A---- C:\Windows\system32\hevcdecoder.dll
2017-03-15 15:50:22 ----A---- C:\Windows\SYSWOW64\Wpc.dll
2017-03-15 15:50:22 ----A---- C:\Windows\system32\wlansvc.dll
2017-03-15 15:50:22 ----A---- C:\Windows\system32\Windows.Networking.UX.EapRequestHandler.dll
2017-03-15 15:50:22 ----A---- C:\Windows\system32\spoolsv.exe
2017-03-15 15:50:22 ----A---- C:\Windows\system32\SpaceControl.dll
2017-03-15 15:50:22 ----A---- C:\Windows\system32\PimIndexMaintenance.dll
2017-03-15 15:50:22 ----A---- C:\Windows\system32\ntshrui.dll
2017-03-15 15:50:22 ----A---- C:\Windows\system32\NgcCtnrSvc.dll
2017-03-15 15:50:22 ----A---- C:\Windows\system32\mprddm.dll
2017-03-15 15:50:22 ----A---- C:\Windows\system32\MMDevAPI.dll
2017-03-15 15:50:22 ----A---- C:\Windows\system32\MFCaptureEngine.dll
2017-03-15 15:50:22 ----A---- C:\Windows\system32\mf.dll
2017-03-15 15:50:22 ----A---- C:\Windows\system32\drivers\WdiWiFi.sys
2017-03-15 15:50:22 ----A---- C:\Windows\system32\drivers\srv.sys
2017-03-15 15:50:21 ----A---- C:\Windows\system32\WMVDECOD.DLL
2017-03-15 15:50:21 ----A---- C:\Windows\system32\WlanMediaManager.dll
2017-03-15 15:50:21 ----A---- C:\Windows\system32\wlanapi.dll
2017-03-15 15:50:21 ----A---- C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2017-03-15 15:50:21 ----A---- C:\Windows\system32\UserDataService.dll
2017-03-15 15:50:21 ----A---- C:\Windows\system32\TpmCoreProvisioning.dll
2017-03-15 15:50:21 ----A---- C:\Windows\system32\rasgcw.dll
2017-03-15 15:50:21 ----A---- C:\Windows\system32\Pimstore.dll
2017-03-15 15:50:21 ----A---- C:\Windows\system32\moshost.dll
2017-03-15 15:50:21 ----A---- C:\Windows\system32\mfds.dll
2017-03-15 15:50:21 ----A---- C:\Windows\system32\LockAppHost.exe
2017-03-15 15:50:21 ----A---- C:\Windows\system32\InputService.dll
2017-03-15 15:50:21 ----A---- C:\Windows\system32\ChatApis.dll
2017-03-15 15:50:21 ----A---- C:\Windows\system32\drivers\nwifi.sys
2017-03-15 15:50:21 ----A---- C:\Windows\system32\AuthHost.exe
2017-03-15 15:50:21 ----A---- C:\Windows\system32\AppointmentApis.dll
2017-03-15 15:50:20 ----A---- C:\Windows\system32\usoapi.dll
2017-03-15 15:50:20 ----A---- C:\Windows\system32\SearchFolder.dll
2017-03-15 15:50:20 ----A---- C:\Windows\system32\RADCUI.dll
2017-03-15 15:50:20 ----A---- C:\Windows\system32\MSPhotography.dll
2017-03-15 15:50:20 ----A---- C:\Windows\system32\mfsvr.dll
2017-03-15 15:50:20 ----A---- C:\Windows\system32\MCCSEngineShared.dll
2017-03-15 15:50:20 ----A---- C:\Windows\system32\internetmail.dll
2017-03-15 15:50:20 ----A---- C:\Windows\system32\FrameServer.dll
2017-03-15 15:50:20 ----A---- C:\Windows\system32\drivers\tdx.sys
2017-03-15 15:50:20 ----A---- C:\Windows\system32\drivers\pdc.sys
2017-03-15 15:50:20 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2017-03-15 15:50:20 ----A---- C:\Windows\system32\drivers\csc.sys
2017-03-15 15:50:20 ----A---- C:\Windows\system32\ActiveSyncProvider.dll
2017-03-15 15:50:19 ----A---- C:\Windows\system32\Windows.Storage.Search.dll
2017-03-15 15:50:19 ----A---- C:\Windows\system32\wfdprov.dll
2017-03-15 15:50:19 ----A---- C:\Windows\system32\sdengin2.dll
2017-03-15 15:50:19 ----A---- C:\Windows\system32\RelPost.exe
2017-03-15 15:50:19 ----A---- C:\Windows\system32\PrintDialogs3D.dll
2017-03-15 15:50:19 ----A---- C:\Windows\system32\PrintDialogs.dll
2017-03-15 15:50:19 ----A---- C:\Windows\system32\ppcsnap.dll
2017-03-15 15:50:19 ----A---- C:\Windows\system32\pmcsnap.dll
2017-03-15 15:50:19 ----A---- C:\Windows\system32\netshell.dll
2017-03-15 15:50:19 ----A---- C:\Windows\system32\mfmkvsrcsnk.dll
2017-03-15 15:50:19 ----A---- C:\Windows\system32\MapConfiguration.dll
2017-03-15 15:50:19 ----A---- C:\Windows\system32\iprtrmgr.dll
2017-03-15 15:50:19 ----A---- C:\Windows\system32\ExSMime.dll
2017-03-15 15:50:18 ----A---- C:\Windows\system32\Windows.Security.Credentials.UI.UserConsentVerifier.dll
2017-03-15 15:50:18 ----A---- C:\Windows\system32\Windows.Internal.Management.SecureAssessment.dll
2017-03-15 15:50:18 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-03-15 15:50:18 ----A---- C:\Windows\system32\Unistore.dll
2017-03-15 15:50:18 ----A---- C:\Windows\system32\tapi32.dll
2017-03-15 15:50:18 ----A---- C:\Windows\system32\sdshext.dll
2017-03-15 15:50:18 ----A---- C:\Windows\system32\puiapi.dll
2017-03-15 15:50:18 ----A---- C:\Windows\system32\PrintRenderAPIHost.DLL
2017-03-15 15:50:18 ----A---- C:\Windows\system32\pnidui.dll
2017-03-15 15:50:18 ----A---- C:\Windows\system32\netiougc.exe
2017-03-15 15:50:18 ----A---- C:\Windows\system32\MSVPXENC.dll
2017-03-15 15:50:18 ----A---- C:\Windows\system32\DuCsps.dll
2017-03-15 15:50:18 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2017-03-15 15:50:18 ----A---- C:\Windows\system32\DavSyncProvider.dll
2017-03-15 15:50:18 ----A---- C:\Windows\system32\DafPrintProvider.dll
2017-03-15 15:50:18 ----A---- C:\Windows\system32\cemapi.dll
2017-03-15 15:50:18 ----A---- C:\Windows\system32\accountaccessor.dll
2017-03-15 15:50:17 ----A---- C:\Windows\system32\VCardParser.dll
2017-03-15 15:50:15 ----A---- C:\Windows\system32\Windows.UI.Xaml.dll
2017-03-15 15:50:13 ----A---- C:\Windows\system32\jscript9.dll
2017-03-15 15:50:13 ----A---- C:\Windows\system32\drivers\dam.sys
2017-03-15 15:50:12 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2017-03-15 15:50:12 ----A---- C:\Windows\system32\dwmcore.dll
2017-03-15 15:50:12 ----A---- C:\Windows\system32\d3d11.dll
2017-03-15 15:50:11 ----A---- C:\Windows\system32\Windows.UI.Logon.dll
2017-03-15 15:50:11 ----A---- C:\Windows\system32\wifinetworkmanager.dll
2017-03-15 15:50:11 ----A---- C:\Windows\system32\DWrite.dll
2017-03-15 15:50:11 ----A---- C:\Windows\system32\comsvcs.dll
2017-03-15 15:50:10 ----A---- C:\Windows\system32\workfolderssvc.dll
2017-03-15 15:50:10 ----A---- C:\Windows\system32\vbscript.dll
2017-03-15 15:50:10 ----A---- C:\Windows\system32\schannel.dll
2017-03-15 15:50:10 ----A---- C:\Windows\system32\iphlpsvc.dll
2017-03-15 15:50:10 ----A---- C:\Windows\system32\inetcomm.dll
2017-03-15 15:50:10 ----A---- C:\Windows\system32\FntCache.dll
2017-03-15 15:50:10 ----A---- C:\Windows\system32\dxgi.dll
2017-03-15 15:50:10 ----A---- C:\Windows\system32\drivers\dxgmms2.sys
2017-03-15 15:50:10 ----A---- C:\Windows\system32\dnsapi.dll
2017-03-15 15:50:10 ----A---- C:\Windows\system32\CredProvDataModel.dll
2017-03-15 15:50:10 ----A---- C:\Windows\system32\CloudBackupSettings.dll
2017-03-15 15:50:09 ----A---- C:\Windows\system32\winmde.dll
2017-03-15 15:50:09 ----A---- C:\Windows\system32\Windows.Cortana.Desktop.dll
2017-03-15 15:50:09 ----A---- C:\Windows\system32\vpnike.dll
2017-03-15 15:50:09 ----A---- C:\Windows\system32\rasmans.dll
2017-03-15 15:50:09 ----A---- C:\Windows\system32\drivers\rdbss.sys
2017-03-15 15:50:09 ----A---- C:\Windows\system32\dhcpcore6.dll
2017-03-15 15:50:08 ----A---- C:\Windows\system32\XboxNetApiSvc.dll
2017-03-15 15:50:08 ----A---- C:\Windows\system32\WorkfoldersControl.dll
2017-03-15 15:50:08 ----A---- C:\Windows\system32\werconcpl.dll
2017-03-15 15:50:08 ----A---- C:\Windows\system32\uDWM.dll
2017-03-15 15:50:08 ----A---- C:\Windows\system32\twinui.appcore.dll
2017-03-15 15:50:08 ----A---- C:\Windows\system32\srmclient.dll
2017-03-15 15:50:08 ----A---- C:\Windows\system32\SHCore.dll
2017-03-15 15:50:08 ----A---- C:\Windows\system32\SettingSync.dll
2017-03-15 15:50:08 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2017-03-15 15:50:08 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2017-03-15 15:50:08 ----A---- C:\Windows\system32\drivers\dfsc.sys
2017-03-15 15:50:08 ----A---- C:\Windows\system32\DMRServer.dll
2017-03-15 15:50:07 ----A---- C:\Windows\SYSWOW64\srmclient.dll
2017-03-15 15:50:07 ----A---- C:\Windows\system32\WorkFoldersGPExt.dll
2017-03-15 15:50:07 ----A---- C:\Windows\system32\srmscan.dll
2017-03-15 15:50:07 ----A---- C:\Windows\system32\msftedit.dll
2017-03-15 15:50:06 ----A---- C:\Windows\system32\wlidprov.dll
2017-03-15 15:50:06 ----A---- C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2017-03-15 15:50:06 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2017-03-15 15:50:06 ----A---- C:\Windows\system32\evr.dll
2017-03-15 15:50:04 ----A---- C:\Windows\system32\thumbcache.dll
2017-03-15 15:50:04 ----A---- C:\Windows\system32\PhotoScreensaver.scr
2017-03-15 15:50:04 ----A---- C:\Windows\system32\MFPlay.dll
2017-03-15 15:50:04 ----A---- C:\Windows\system32\LogonController.dll
2017-03-15 15:50:03 ----A---- C:\Windows\system32\Tabbtn.dll
2017-03-15 15:50:03 ----A---- C:\Windows\system32\shutdownux.dll
2017-03-15 15:50:03 ----A---- C:\Windows\system32\SettingsHandlers_WorkAccess.dll
2017-03-15 15:50:03 ----A---- C:\Windows\system32\icm32.dll
2017-03-15 15:50:03 ----A---- C:\Windows\system32\drivers\mskssrv.sys
2017-03-15 15:50:03 ----A---- C:\Windows\system32\drivers\ks.sys
2017-03-15 15:50:03 ----A---- C:\Windows\system32\dnsrslvr.dll
2017-03-15 15:50:03 ----A---- C:\Windows\system32\dialclient.dll
2017-03-15 15:50:03 ----A---- C:\Windows\system32\dggpext.dll
2017-03-15 15:50:02 ----A---- C:\Windows\SYSWOW64\PhotoScreensaver.scr
2017-03-15 15:50:02 ----A---- C:\Windows\SYSWOW64\Chakradiag.dll
2017-03-15 15:50:02 ----A---- C:\Windows\system32\WorkFoldersShell.dll
2017-03-15 15:50:02 ----A---- C:\Windows\system32\WorkFolders.exe
2017-03-15 15:50:02 ----A---- C:\Windows\system32\Windows.Cortana.OneCore.dll
2017-03-15 15:50:02 ----A---- C:\Windows\system32\tbauth.dll
2017-03-15 15:50:02 ----A---- C:\Windows\system32\StructuredQuery.dll
2017-03-15 15:50:02 ----A---- C:\Windows\system32\fhcfg.dll
2017-03-15 15:50:02 ----A---- C:\Windows\system32\BrowserSettingSync.dll
2017-03-15 15:50:01 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2017-03-15 15:50:01 ----A---- C:\Windows\SYSWOW64\indexeddbserver.dll
2017-03-15 15:50:01 ----A---- C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
2017-03-15 15:50:01 ----A---- C:\Windows\system32\Windows.Networking.HostName.dll
2017-03-15 15:50:01 ----A---- C:\Windows\system32\TokenBrokerCookies.exe
2017-03-15 15:50:01 ----A---- C:\Windows\system32\ipnathlp.dll
2017-03-15 15:50:01 ----A---- C:\Windows\system32\ddrawex.dll
2017-03-15 15:50:01 ----A---- C:\Windows\system32\CameraCaptureUI.dll
2017-03-15 15:50:00 ----A---- C:\Windows\system32\ddraw.dll
2017-03-15 15:49:55 ----A---- C:\Windows\SYSWOW64\aepic.dll
2017-03-15 15:49:55 ----A---- C:\Windows\system32\dbgeng.dll
2017-03-15 15:49:55 ----A---- C:\Windows\system32\CompatTelRunner.exe
2017-03-15 15:49:55 ----A---- C:\Windows\system32\aepic.dll
2017-03-15 15:49:54 ----A---- C:\Windows\system32\Windows.UI.Immersive.dll
2017-03-15 15:49:54 ----A---- C:\Windows\system32\mispace.dll
2017-03-15 15:49:54 ----A---- C:\Windows\system32\bisrv.dll
2017-03-15 15:49:54 ----A---- C:\Windows\explorer.exe
2017-03-15 15:49:53 ----A---- C:\Windows\system32\wsp_health.dll
2017-03-15 15:49:53 ----A---- C:\Windows\system32\storagewmi.dll
2017-03-15 15:49:53 ----A---- C:\Windows\system32\msctf.dll
2017-03-15 15:49:53 ----A---- C:\Windows\system32\ExplorerFrame.dll
2017-03-15 15:49:53 ----A---- C:\Windows\system32\drivers\ntfs.sys
2017-03-15 15:49:53 ----A---- C:\Windows\system32\bootux.dll
2017-03-15 15:49:52 ----A---- C:\Windows\system32\XblAuthManager.dll
2017-03-15 15:49:52 ----A---- C:\Windows\system32\wsp_fs.dll
2017-03-15 15:49:52 ----A---- C:\Windows\system32\winload.exe
2017-03-15 15:49:52 ----A---- C:\Windows\system32\generaltel.dll
2017-03-15 15:49:52 ----A---- C:\Windows\system32\EnterpriseAPNCsp.dll
2017-03-15 15:49:52 ----A---- C:\Windows\system32\DeviceCensus.exe
2017-03-15 15:49:52 ----A---- C:\Windows\system32\dcntel.dll
2017-03-15 15:49:52 ----A---- C:\Windows\system32\DataSenseHandlers.dll
2017-03-15 15:49:52 ----A---- C:\Windows\system32\CspCellularSettings.dll
2017-03-15 15:49:52 ----A---- C:\Windows\system32\CfgSPCellular.dll
2017-03-15 15:49:52 ----A---- C:\Windows\system32\AppVEntSubsystems64.dll
2017-03-15 15:49:51 ----A---- C:\Windows\system32\winresume.exe
2017-03-15 15:49:51 ----A---- C:\Windows\system32\ResetEngine.dll
2017-03-15 15:49:51 ----A---- C:\Windows\system32\ReAgent.dll
2017-03-15 15:49:51 ----A---- C:\Windows\system32\modernexecserver.dll
2017-03-15 15:49:51 ----A---- C:\Windows\system32\clusapi.dll
2017-03-15 15:49:50 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2017-03-15 15:49:50 ----A---- C:\Windows\system32\wcmsvc.dll
2017-03-15 15:49:50 ----A---- C:\Windows\system32\uReFS.dll
2017-03-15 15:49:50 ----A---- C:\Windows\system32\twinapi.dll
2017-03-15 15:49:50 ----A---- C:\Windows\system32\SettingSyncHost.exe
2017-03-15 15:49:50 ----A---- C:\Windows\system32\resutils.dll
2017-03-15 15:49:50 ----A---- C:\Windows\system32\imapi2fs.dll
2017-03-15 15:49:50 ----A---- C:\Windows\system32\hvloader.exe
2017-03-15 15:49:50 ----A---- C:\Windows\system32\GdiPlus.dll
2017-03-15 15:49:50 ----A---- C:\Windows\system32\gameux.dll
2017-03-15 15:49:49 ----A---- C:\Windows\system32\wintrust.dll
2017-03-15 15:49:49 ----A---- C:\Windows\system32\WinSetupUI.dll
2017-03-15 15:49:49 ----A---- C:\Windows\system32\UIRibbon.dll
2017-03-15 15:49:49 ----A---- C:\Windows\system32\ubpm.dll
2017-03-15 15:49:49 ----A---- C:\Windows\system32\themecpl.dll
2017-03-15 15:49:49 ----A---- C:\Windows\system32\lsasrv.dll
2017-03-15 15:49:48 ----A---- C:\Windows\system32\winhttp.dll
2017-03-15 15:49:48 ----A---- C:\Windows\system32\stobject.dll
2017-03-15 15:49:48 ----A---- C:\Windows\system32\reseteng.dll
2017-03-15 15:49:48 ----A---- C:\Windows\system32\policymanager.dll
2017-03-15 15:49:48 ----A---- C:\Windows\system32\drivers\storport.sys
2017-03-15 15:49:48 ----A---- C:\Windows\system32\daxexec.dll
2017-03-15 15:49:48 ----A---- C:\Windows\system32\ci.dll
2017-03-15 15:49:48 ----A---- C:\Windows\system32\authui.dll
2017-03-15 15:49:48 ----A---- C:\Windows\system32\AppXApplicabilityBlob.dll
2017-03-15 15:49:47 ----A---- C:\Windows\system32\wsp_sr.dll
2017-03-15 15:49:47 ----A---- C:\Windows\system32\VSSVC.exe
2017-03-15 15:49:47 ----A---- C:\Windows\system32\UserLanguagesCpl.dll
2017-03-15 15:49:47 ----A---- C:\Windows\system32\SystemSettings.UserAccountsHandlers.dll
2017-03-15 15:49:47 ----A---- C:\Windows\system32\SpaceAgent.exe
2017-03-15 15:49:47 ----A---- C:\Windows\system32\SensorDataService.exe
2017-03-15 15:49:47 ----A---- C:\Windows\system32\PCPTpm12.dll
2017-03-15 15:49:47 ----A---- C:\Windows\system32\icsvcext.dll
2017-03-15 15:49:47 ----A---- C:\Windows\system32\DXP.dll
2017-03-15 15:49:47 ----A---- C:\Windows\system32\dui70.dll
2017-03-15 15:49:47 ----A---- C:\Windows\system32\drivers\vmbkmcl.sys
2017-03-15 15:49:47 ----A---- C:\Windows\system32\drivers\partmgr.sys
2017-03-15 15:49:47 ----A---- C:\Windows\system32\combase.dll
2017-03-15 15:49:46 ----A---- C:\Windows\system32\WsmWmiPl.dll
2017-03-15 15:49:46 ----A---- C:\Windows\system32\wbengine.exe
2017-03-15 15:49:46 ----A---- C:\Windows\system32\vssapi.dll
2017-03-15 15:49:46 ----A---- C:\Windows\system32\systemreset.exe
2017-03-15 15:49:46 ----A---- C:\Windows\system32\sud.dll
2017-03-15 15:49:46 ----A---- C:\Windows\system32\OneDriveSettingSyncProvider.dll
2017-03-15 15:49:46 ----A---- C:\Windows\system32\icfupgd.dll
2017-03-15 15:49:46 ----A---- C:\Windows\system32\gpapi.dll
2017-03-15 15:49:46 ----A---- C:\Windows\system32\drivers\hvsocket.sys
2017-03-15 15:49:46 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2017-03-15 15:49:46 ----A---- C:\Windows\system32\DevicePairing.dll
2017-03-15 15:49:46 ----A---- C:\Windows\system32\certprop.dll
2017-03-15 15:49:46 ----A---- C:\Windows\system32\BootMenuUX.dll
2017-03-15 15:49:46 ----A---- C:\Windows\system32\basecsp.dll
2017-03-15 15:49:46 ----A---- C:\Windows\system32\AppReadiness.dll
2017-03-15 15:49:45 ----A---- C:\Windows\system32\SystemSettings.Handlers.dll
2017-03-15 15:49:45 ----A---- C:\Windows\system32\spaceman.exe
2017-03-15 15:49:45 ----A---- C:\Windows\system32\scksp.dll
2017-03-15 15:49:45 ----A---- C:\Windows\system32\netiohlp.dll
2017-03-15 15:49:45 ----A---- C:\Windows\system32\input.dll
2017-03-15 15:49:45 ----A---- C:\Windows\system32\drivers\vmbkmclr.sys
2017-03-15 15:49:45 ----A---- C:\Windows\system32\drivers\netvsc.sys
2017-03-15 15:49:45 ----A---- C:\Windows\system32\AudioSes.dll
2017-03-15 15:49:45 ----A---- C:\Windows\system32\appinfo.dll
2017-03-15 15:49:44 ----A---- C:\Windows\system32\wups.dll
2017-03-15 15:49:44 ----A---- C:\Windows\system32\tzautoupdate.dll
2017-03-15 15:49:44 ----A---- C:\Windows\system32\tabcal.exe
2017-03-15 15:49:44 ----A---- C:\Windows\system32\SettingsHandlers_Flights.dll
2017-03-15 15:49:44 ----A---- C:\Windows\system32\MultiDigiMon.exe
2017-03-15 15:49:44 ----A---- C:\Windows\system32\msutb.dll
2017-03-15 15:49:44 ----A---- C:\Windows\system32\MPSSVC.dll
2017-03-15 15:49:44 ----A---- C:\Windows\system32\MediaFoundation.DefaultPerceptionProvider.dll
2017-03-15 15:49:44 ----A---- C:\Windows\system32\hgcpl.dll
2017-03-15 15:49:44 ----A---- C:\Windows\system32\gpsvc.dll
2017-03-15 15:49:44 ----A---- C:\Windows\system32\ApplicationFrame.dll
2017-03-15 15:49:43 ----A---- C:\Windows\system32\XInputUap.dll
2017-03-15 15:49:43 ----A---- C:\Windows\system32\werui.dll
2017-03-15 15:49:43 ----A---- C:\Windows\system32\vds.exe
2017-03-15 15:49:43 ----A---- C:\Windows\system32\mspaint.exe
2017-03-15 15:49:43 ----A---- C:\Windows\system32\mscandui.dll
2017-03-15 15:49:43 ----A---- C:\Windows\system32\BluetoothDesktopHandlers.dll
2017-03-15 15:49:43 ----A---- C:\Windows\regedit.exe
2017-03-15 15:49:42 ----A---- C:\Windows\system32\Windows.UI.Shell.dll
2017-03-15 15:49:42 ----A---- C:\Windows\system32\Windows.StateRepositoryBroker.dll
2017-03-15 15:49:42 ----A---- C:\Windows\system32\rascustom.dll
2017-03-15 15:49:42 ----A---- C:\Windows\system32\msctfui.dll
2017-03-15 15:49:42 ----A---- C:\Windows\system32\msctfp.dll
2017-03-15 15:49:42 ----A---- C:\Windows\system32\LaunchWinApp.exe
2017-03-15 15:49:42 ----A---- C:\Windows\system32\GamePanelExternalHook.dll
2017-03-15 15:49:07 ----A---- C:\Windows\SYSWOW64\OneDriveSetup.exe
2017-03-14 19:00:58 ----D---- C:\Users\winki\AppData\Roaming\Logishrd
2017-03-14 19:00:54 ----D---- C:\Program Files\Logitech
2017-03-14 18:12:20 ----D---- C:\ProgramData\LogiShrd
2017-03-14 18:12:17 ----D---- C:\Program Files\Common Files\LogiShrd

====== List of files/folders modified in the last 1 month ======

2017-04-13 22:40:39 ----D---- C:\Users\winki\AppData\Roaming\uTorrent
2017-04-13 22:36:29 ----D---- C:\Users\winki\AppData\Roaming\Origin
2017-04-13 22:35:34 ----D---- C:\Windows\Temp
2017-04-13 22:33:42 ----D---- C:\Windows\Prefetch
2017-04-13 22:30:10 ----RD---- C:\Program Files
2017-04-13 22:27:17 ----D---- C:\Users\winki\AppData\Roaming\vlc
2017-04-13 22:06:29 ----D---- C:\ProgramData\Origin
2017-04-13 21:47:00 ----D---- C:\Windows\system32\sru
2017-04-13 21:14:54 ----D---- C:\ProgramData\Kaspersky Lab
2017-04-13 21:08:17 ----D---- C:\Program Files (x86)\Steam
2017-04-13 20:07:47 ----D---- C:\Users\winki\AppData\Roaming\Skype
2017-04-13 19:50:20 ----HD---- C:\ProgramData
2017-04-13 19:45:43 ----D---- C:\ProgramData\NVIDIA
2017-04-13 18:01:22 ----D---- C:\Windows\system32\drivers
2017-04-13 17:59:09 ----D---- C:\Windows\system32\config
2017-04-13 17:57:27 ----SHD---- C:\Windows\Installer
2017-04-13 17:57:25 ----D---- C:\Windows\System32
2017-04-13 17:57:24 ----D---- C:\Windows\system32\catroot2
2017-04-13 17:57:23 ----SHD---- C:\System Volume Information
2017-04-13 17:57:08 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-04-13 17:56:08 ----D---- C:\Windows\AppReadiness
2017-04-13 17:51:43 ----D---- C:\ProgramData\boost_interprocess
2017-04-13 17:51:03 ----D---- C:\Windows\system32\SleepStudy
2017-04-13 13:08:06 ----D---- C:\Windows\WinSxS
2017-04-13 13:08:06 ----D---- C:\Windows\system32\DriverStore
2017-04-13 13:02:56 ----RD---- C:\Windows\Microsoft.NET
2017-04-13 11:30:30 ----HD---- C:\Program Files\WindowsApps
2017-04-13 11:24:12 ----D---- C:\Windows\INF
2017-04-13 03:48:12 ----SD---- C:\Windows\SYSWOW64\F12
2017-04-13 03:48:12 ----SD---- C:\Windows\system32\F12
2017-04-13 03:48:12 ----D---- C:\Windows\SYSWOW64\sr-Latn-CS
2017-04-13 03:48:12 ----D---- C:\Windows\SYSWOW64\setup
2017-04-13 03:48:12 ----D---- C:\Windows\SYSWOW64\cs-CZ
2017-04-13 03:48:12 ----D---- C:\Windows\SysWOW64
2017-04-13 03:48:12 ----D---- C:\Windows\system32\wbem
2017-04-13 03:48:12 ----D---- C:\Windows\system32\sr-Latn-CS
2017-04-13 03:48:12 ----D---- C:\Windows\system32\setup
2017-04-13 03:48:12 ----D---- C:\Windows\system32\migration
2017-04-13 03:48:12 ----D---- C:\Windows\system32\Dism
2017-04-13 03:48:12 ----D---- C:\Windows\system32\cs-CZ
2017-04-13 03:48:12 ----D---- C:\Windows\system32\appraiser
2017-04-13 03:48:11 ----RD---- C:\Windows\ImmersiveControlPanel
2017-04-13 03:48:11 ----RD---- C:\Program Files\Windows Defender
2017-04-13 03:48:11 ----D---- C:\Windows\ShellExperiences
2017-04-13 03:48:11 ----D---- C:\Windows\Provisioning
2017-04-13 03:48:11 ----D---- C:\Windows\PolicyDefinitions
2017-04-13 03:48:11 ----D---- C:\Windows
2017-04-13 03:48:11 ----D---- C:\Program Files\Windows Photo Viewer
2017-04-13 03:48:11 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2017-04-13 03:48:11 ----D---- C:\Program Files (x86)\Windows Defender
2017-04-12 20:57:13 ----D---- C:\Windows\system32\Tasks
2017-04-12 13:01:19 ----D---- C:\Windows\system32\MRT
2017-04-12 13:00:00 ----AC---- C:\Windows\system32\MRT.exe
2017-04-12 12:59:58 ----D---- C:\Windows\CbsTemp
2017-04-10 14:21:41 ----SD---- C:\ProgramData\Microsoft
2017-04-10 14:16:38 ----RD---- C:\Program Files (x86)
2017-04-08 15:13:10 ----D---- C:\Users\winki\AppData\Roaming\Spotify
2017-04-08 14:42:23 ----D---- C:\Windows\system32\CatRoot
2017-04-08 14:41:16 ----D---- C:\Program Files\NVIDIA Corporation
2017-04-08 14:41:15 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2017-04-08 14:41:14 ----D---- C:\ProgramData\NVIDIA Corporation
2017-04-05 21:20:16 ----AD---- C:\Program Files (x86)\Origin
2017-04-05 16:49:03 ----D---- C:\Windows\system32\drivers\etc
2017-04-05 16:43:07 ----D---- C:\Temp
2017-04-05 16:42:19 ----D---- C:\Program Files\Common Files\AV
2017-04-05 16:42:19 ----D---- C:\Program Files (x86)\Common Files
2017-04-04 21:35:55 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2017-04-02 22:36:25 ----HD---- C:\Windows\ELAMBKUP
2017-04-02 22:36:25 ----D---- C:\Program Files (x86)\Kaspersky Lab
2017-04-02 18:12:15 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2017-04-01 20:52:38 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2017-04-01 05:27:00 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2017-04-01 05:27:00 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2017-04-01 05:27:00 ----A---- C:\Windows\system32\nvapi64.dll
2017-04-01 04:10:07 ----A---- C:\Windows\system32\nvsvc64.dll
2017-04-01 04:10:07 ----A---- C:\Windows\system32\nvcpl.dll
2017-04-01 04:10:06 ----A---- C:\Windows\system32\nvsvcr.dll
2017-04-01 04:10:06 ----A---- C:\Windows\system32\nvshext.dll
2017-04-01 04:10:06 ----A---- C:\Windows\system32\nvmctray.dll
2017-04-01 04:10:06 ----A---- C:\Windows\system32\nv3dappshextr.dll
2017-04-01 04:10:06 ----A---- C:\Windows\system32\nv3dappshext.dll
2017-04-01 04:09:40 ----A---- C:\Windows\NvContainerRecovery.bat
2017-03-31 00:00:23 ----D---- C:\ProgramData\Adobe
2017-03-30 23:58:38 ----D---- C:\Program Files\Common Files\Adobe
2017-03-30 23:58:04 ----AD---- C:\Program Files\Adobe
2017-03-30 23:57:53 ----D---- C:\Users\winki\AppData\Roaming\Adobe
2017-03-30 23:49:33 ----RSD---- C:\Windows\Fonts
2017-03-30 19:29:00 ----AD---- C:\Program Files (x86)\Adobe
2017-03-28 08:20:43 ----A---- C:\Windows\SYSWOW64\PrintConfig.dll
2017-03-22 23:50:09 ----SD---- C:\Users\winki\AppData\Roaming\Microsoft
2017-03-16 16:18:51 ----D---- C:\Windows\rescache
2017-03-16 01:54:50 ----D---- C:\Windows\SYSWOW64\migration
2017-03-16 01:54:50 ----D---- C:\Windows\SYSWOW64\en-US
2017-03-16 01:54:49 ----D---- C:\Windows\system32\oobe
2017-03-16 01:54:49 ----D---- C:\Windows\system32\en-US
2017-03-16 01:54:49 ----D---- C:\Windows\system32\drivers\cs-CZ
2017-03-16 01:54:49 ----D---- C:\Windows\system32\Boot
2017-03-16 01:54:48 ----RD---- C:\Windows\PrintDialog
2017-03-16 01:54:48 ----D---- C:\Windows\bcastdvr
2017-03-16 01:54:48 ----D---- C:\Windows\AppPatch
2017-03-16 01:54:48 ----D---- C:\Program Files\Windows Mail
2017-03-16 01:54:48 ----D---- C:\Program Files\Internet Explorer
2017-03-16 01:54:48 ----D---- C:\Program Files (x86)\Windows Mail
2017-03-16 01:54:48 ----D---- C:\Program Files (x86)\Internet Explorer
2017-03-15 02:08:53 ----D---- C:\Users\winki\AppData\Roaming\AIMP
2017-03-14 18:12:17 ----D---- C:\Program Files\Common Files
2017-03-14 01:15:55 ----D---- C:\Windows\LiveKernelReports

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

====== List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R0 aswbidsh;aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [2017-04-05 189768]
R0 aswblog;aswblog; C:\Windows\system32\drivers\aswbloga.sys [2017-04-05 334088]
R0 aswbuniv;aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [2017-04-05 48528]
R0 aswRvrt;aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [2017-04-05 75704]
R0 aswVmm;aswVmm; C:\Windows\system32\drivers\aswVmm.sys [2017-04-05 339696]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-100; C:\Windows\system32\drivers\iorate.sys [2016-11-21 48992]
R1 aswbidsdriver;aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [2017-04-05 307736]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2017-04-05 32600]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2017-04-05 101152]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2017-04-05 1005048]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2017-04-05 556784]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2017-04-05 127112]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2017-04-05 164064]
R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\Windows\System32\drivers\registry.sys [2016-07-16 70144]
R3 anvsnddrv;@oem32.inf,%anvsnddrv.SvcDesc%;AnvSoft Virtual Sound Device; C:\Windows\system32\drivers\anvsnddrv.sys [2016-03-24 34416]
R3 dtlitescsibus;@oem15.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\System32\drivers\dtlitescsibus.sys [2017-03-01 30264]
R3 dtliteusbbus;@oem30.inf,%DTLITEUSBBUS.DeviceDesc%;DAEMON Tools Lite Virtual USB Bus; C:\Windows\System32\drivers\dtliteusbbus.sys [2017-03-01 47672]
R3 kltap;@oem20.inf,%DeviceDescription%;Kaspersky Security Data Escort Adapter; C:\Windows\System32\drivers\kltap.sys [2016-06-07 52152]
R3 NVHDA;@oem17.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2017-04-02 218040]
R3 nvlddmkm;nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_e69a53b8ddde469c\nvlddmkm.sys [2017-04-03 14841784]
R3 nvvad_WaveExtensible;@oem9.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2017-02-08 46016]
R3 nvvhci;@oem11.inf,%ServiceDesc%;NVVHCI Enumerator Service; C:\Windows\System32\drivers\nvvhci.sys [2017-04-01 76840]
R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\Windows\System32\drivers\rt640x64.sys [2016-07-16 589824]
S0 megasas2i;megasas2i; C:\Windows\System32\drivers\MegaSas2i.sys [2016-11-21 64352]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\Windows\System32\drivers\scmbus.sys [2016-07-16 88416]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\Windows\System32\drivers\AcpiDev.sys [2016-07-16 18432]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\Windows\system32\drivers\applockerfltr.sys [2016-07-16 15360]
S3 AppvStrm;@%systemroot%\system32\drivers\AppvStrm.sys,-101; C:\Windows\system32\drivers\AppvStrm.sys [2016-11-21 127328]
S3 AppvVemgr;@%systemroot%\system32\drivers\AppvVemgr.sys,-101; C:\Windows\system32\drivers\AppvVemgr.sys [2016-11-21 157024]
S3 AppvVfs;@%systemroot%\system32\drivers\AppvVfs.sys,-101; C:\Windows\system32\drivers\AppvVfs.sys [2016-11-21 141152]
S3 aswHwid;aswHwid; C:\Windows\system32\drivers\aswHwid.sys [2017-04-05 38296]
S3 dc1-controller;@dc1-controller.inf,%dc1-controller.SvcDesc%;Xbox Peripherals Driver; C:\Windows\system32\DRIVERS\dc1-controller.sys [2016-07-16 57856]
S3 dg_ssudbus;@oem33.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2016-09-05 131712]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\Windows\system32\drivers\hvservice.sys [2016-11-21 73568]
S3 HyperVideo;HyperVideo; C:\Windows\system32\DRIVERS\HyperVideo.sys [2016-07-16 25088]
S3 cht4iscsi;cht4iscsi; C:\Windows\System32\drivers\cht4sx64.sys [2016-07-16 346976]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\Windows\System32\drivers\cht4vx64.sys [2016-07-16 2104160]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\Windows\System32\drivers\iagpio.sys [2016-07-16 33280]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2.sys [2016-07-16 64512]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\Windows\System32\drivers\IndirectKmd.sys [2016-07-16 35840]
S3 irda;IrDA; C:\Windows\system32\drivers\irda.sys [2016-07-16 120320]
S3 MsSecFlt;@%SystemRoot%\System32\Drivers\mssecflt.sys,-1001; C:\Windows\system32\drivers\mssecflt.sys [2016-11-21 179040]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\Windows\system32\drivers\NetAdapterCx.sys [2016-07-16 90624]
S3 netvsc;netvsc; C:\Windows\System32\drivers\netvsc.sys [2017-03-04 113152]
S3 NvStreamKms;NVIDIA KMS; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2017-02-23 27584]
S3 scmdisk0101;@scmdisk0101.inf,%scmdisk0101.SvcDesc%;Microsoft NVDIMM-N disk driver; C:\Windows\System32\drivers\scmdisk0101.sys [2016-07-16 123904]
S3 ssudmdm;@oem34.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2016-09-05 165504]
S3 tsusbhub;@tsusbhub.inf,%tsusbhub.SVCDESC%;Remote Desktop USB Hub; C:\Windows\System32\drivers\tsusbhub.sys [2016-11-21 123392]
S3 UcmTcpciCx0101;UCM-TCPCI KMDF Class Extension; C:\Windows\System32\Drivers\UcmTcpciCx.sys [2016-07-16 108544]

====== List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R2 AdobeUpdateService;AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [2017-03-14 771672]
R2 AGSService;Adobe Genuine Software Integrity Service; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2017-02-27 2227312]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2017-04-05 261712]
R2 CDPUserSvc_51f240;CDPUserSvc_51f240; C:\Windows\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R2 KSDE1.0.0;Služba Kaspersky Secure Connection 1.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe [2016-06-28 241544]
R2 NvContainerLocalSystem;NVIDIA LocalSystem Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-02-23 462784]
R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [2017-04-01 462784]
R2 NvTelemetryContainer;NVIDIA Telemetry Container; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [2017-04-01 427064]
R2 OneSyncSvc_51f240;Hostitel synchronizace_51f240; C:\Windows\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R2 Origin Web Helper Service;Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2017-04-05 2185232]
R2 PlexUpdateService;Plex Update Service; C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe [2017-03-01 1980392]
R2 TeamViewer;TeamViewer 12; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2016-12-15 10351856]
R3 aswbIDSAgent;aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [2017-04-05 7398336]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [2017-02-07 1471168]
R3 PimIndexMaintenanceSvc_51f240;Data kontaktů_51f240; C:\Windows\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2017-03-23 1590560]
R3 TimeBrokerSvc;@%windir%\system32\TimeBrokerServer.dll,-1001; %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\TimeBrokerServer.dll
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" = %SystemRoot%\System32\CDPUserSvc.dll
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2017-02-27 317400]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; %SystemRoot%\System32\svchost.exe -k Camera;"ServiceDll" = %SystemRoot%\system32\FrameServer.dll
S3 Futuremark SystemInfo Service;Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [2016-08-11 342456]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\hvhostsvc.dll
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\irmon.dll
S3 MessagingService_51f240;Služba zasílání zpráv_51f240; C:\Windows\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2017-03-23 172488]
S3 NvContainerNetworkService;NVIDIA NetworkService Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-02-23 462784]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2017-04-05 2124296]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2015-07-31 242864]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\RMapi.dll
S3 Sense;@%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2016-11-21 2889896]
S4 AppVClient;@%systemroot%\system32\AppVClient.exe,-102; C:\Windows\system32\AppVClient.exe [2016-12-14 822624]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; %SystemRoot%\System32\svchost.exe -k netsvcs;"ServiceDll" = %systemroot%\system32\Windows.SharedPC.AccountManager.dll

-----------------EOF-----------------

Zdravim


V pocitaci vidim Avast, ale i neco od Kaspersky. Pouzivate to? Nebo je to nejaky pozustatek?


Stahnete crystal disk info http://www.slunecnice.cz/sw/crystaldiskinfo/
Nainstalujte (pozor na pripadne doplnky, ty odmitnete zrusenim zatrzitka) a spustte jako spravce. Za chvili se zobrazi vysledek.
Kliknete nahore na napis Úpravy a pak na napis Kopírovat. To co se zkopiruje (ulozi se to do pameti) mi sem vlozte (ctrl + V)


Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner[C?].txt ). Ten mi sem zkopirujte.

Avast je teď aktuální a měly by být zbytky Kasperského. Jinak mohu poprosit o ohodnocení mého druhého SSD disku? (M4)
Díky


----------------------------------------------------------------------------
CrystalDiskInfo 7.0.5 (C) 2008-2016 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 10 Professional [10.0 Build 14393] (x64)
Date : 2017/04/14 17:53:55

-- Controller Map ----------------------------------------------------------
+ Standardní řadič SATA AHCI [ATA]
- Samsung SSD 850 EVO 120GB
- M4-CT128M4SSD2
- WDC WD20EZRX-00DC0B0
- ASUS DRW-24B5ST
- Řadič prostorů úložišť [SCSI]
+ DAEMON Tools Lite Virtual SCSI Bus [SCSI]
- DiscSoft Virtual SCSI CdRom Device
- DiscSoft Virtual SCSI CdRom Device
- DiscSoft Virtual SCSI CdRom Device
- DiscSoft Virtual SCSI CdRom Device
- DiscSoft Virtual SCSI CdRom Device

-- Disk List ---------------------------------------------------------------
(1) Samsung SSD 850 EVO 120GB : 120,0 GB [0/0/0, pd1] - sg
(2) M4-CT128M4SSD2 : 128,0 GB [1/0/0, pd1] - mi
(3) WDC WD20EZRX-00DC0B0 : 2000,3 GB [2/0/0, pd1] - wd

----------------------------------------------------------------------------
(1) Samsung SSD 850 EVO 120GB
----------------------------------------------------------------------------
Model : Samsung SSD 850 EVO 120GB
Firmware : EMT01B6Q
Serial Number : S21UNSAG178363N
Disk Size : 120,0 GB (8,4/120,0/120,0/120,0)
Buffer Size : Neznámy údaj
Queue Depth : 32
# of Sectors : 234441648
Rotation Rate : ---- (SSD)
Interface : Serial ATA
Major Version : ACS-2
Minor Version : ATA8-ACS version 4c
Transfer Mode : SATA/600 | SATA/600
Power On Hours : 7570 hod.
Power On Count : 1721 krát
Host Writes : 12358 GB
Wear Level Count : 142
Temperature : 27 C (80 F)
Health Status : Dobrý (100 %)
Features : S.M.A.R.T., 48bit LBA, NCQ, TRIM, DevSleep
APM Level : ----
AAM Level : ----
Drive Letter : C:

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
05 100 100 _10 000000000000 Reallocated Sector Count
09 _98 _98 __0 000000001D92 Power-on Hours
0C _98 _98 __0 0000000006B9 Power-on Count
B1 _93 _93 __0 00000000008E Wear Leveling Count
B3 100 100 _10 000000000000 Used Reserved Block Count (Total)
B5 100 100 _10 000000000000 Program Fail Count (Total)
B6 100 100 _10 000000000000 Erase Fail Count (Total)
B7 100 _99 _10 000000000000 Runtime Bad Block (Total)
BB 100 100 __0 000000000000 Uncorrectable Error Count
BE _73 _60 __0 00000000001B Airflow Temperature
C3 200 200 __0 000000000000 ECC Error Rate
C7 100 100 __0 000000000000 CRC Error Count
EB _99 _99 __0 00000000003B POR Recovery Count
F1 _99 _99 __0 000608DCA710 Total LBA Written

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0040 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 5332 3155 4E53 4147 3137 3833 3633 4E20 2020 2020
020: 0000 0000 0000 454D 5430 3142 3651 5361 6D73 756E
030: 6720 5353 4420 3835 3020 4556 4F20 3132 3047 4220
040: 2020 2020 2020 2020 2020 2020 2020 8001 4001 2F00
050: 4000 0200 0200 0007 3FFF 0010 003F FC10 00FB 0101
060: 4BB0 0DF9 0000 0007 0003 0078 0078 0078 0078 0F10
070: 0000 0000 0000 0000 0000 001F 850E 00C6 016C 0060
080: 03FC 0039 746B 7D01 4163 7469 BC01 4163 207F 0001
090: 0004 0000 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 4BB0 0DF9 0000 0000 0000 0008 4000 0000 5002 538D
110: A00F 48F1 0000 0000 0000 0000 0000 0000 0000 401E
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0001
170: 2020 2020 2020 2020 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 003D 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 0001 0000 0000
220: 0000 0000 107F 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0000 0800 0000 0000 0000 0000
240: 0000 0000 0000 4000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 81A5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 01 00 05 33 00 64 64 00 00 00 00 00 00 00 09 32
010: 00 62 62 92 1D 00 00 00 00 00 0C 32 00 62 62 B9
020: 06 00 00 00 00 00 B1 13 00 5D 5D 8E 00 00 00 00
030: 00 00 B3 13 00 64 64 00 00 00 00 00 00 00 B5 32
040: 00 64 64 00 00 00 00 00 00 00 B6 32 00 64 64 00
050: 00 00 00 00 00 00 B7 13 00 64 63 00 00 00 00 00
060: 00 00 BB 32 00 64 64 00 00 00 00 00 00 00 BE 32
070: 00 49 3C 1B 00 00 00 00 00 00 C3 1A 00 C8 C8 00
080: 00 00 00 00 00 00 C7 3E 00 64 64 00 00 00 00 00
090: 00 00 EB 12 00 63 63 3B 00 00 00 00 00 00 F1 32
0A0: 00 63 63 10 A7 DC 08 06 00 00 00 00 00 00 00 00
0B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53
170: 03 00 01 00 02 40 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 66

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 01 00 05 0A 00 00 00 00 00 00 00 00 00 00 09 00
010: 00 00 00 00 00 00 00 00 00 00 0C 00 00 00 00 00
020: 00 00 00 00 00 00 B1 00 00 00 00 00 00 00 00 00
030: 00 00 B3 0A 00 00 00 00 00 00 00 00 00 00 B5 0A
040: 00 00 00 00 00 00 00 00 00 00 B6 0A 00 00 00 00
050: 00 00 00 00 00 00 B7 0A 00 00 00 00 00 00 00 00
060: 00 00 BB 00 00 00 00 00 00 00 00 00 00 00 BE 00
070: 00 00 00 00 00 00 00 00 00 00 C3 00 00 00 00 00
080: 00 00 00 00 00 00 C7 00 00 00 00 00 00 00 00 00
090: 00 00 EB 00 00 00 00 00 00 00 00 00 00 00 F1 00
0A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4E

----------------------------------------------------------------------------
(2) M4-CT128M4SSD2
----------------------------------------------------------------------------
Model : M4-CT128M4SSD2
Firmware : 000F
Serial Number : 0000000012370915926E
Disk Size : 128,0 GB (8,4/128,0/128,0/128,0)
Buffer Size : Neznámy údaj
Queue Depth : 32
# of Sectors : 250069680
Rotation Rate : ---- (SSD)
Interface : Serial ATA
Major Version : ACS-2
Minor Version : ATA8-ACS version 6
Transfer Mode : SATA/600 | SATA/600
Power On Hours : 18490 hod.
Power On Count : 6404 krát
Wear Level Count : 1197
Temperature : Neznámy údaj
Health Status : Dobrý (61 %)
Features : S.M.A.R.T., APM, 48bit LBA, NCQ, TRIM
APM Level : 00FEh [ON]
AAM Level : ----
Drive Letter : I:

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 100 _50 000000000000 Raw Read Error Rate
05 100 100 _10 000000000000 Reallocated NAND Blocks
09 100 100 __1 00000000483A Power On Hours
0C 100 100 __1 000000001904 Power Cycle Count
AA 100 100 _10 000000000000 Reserved Block Count
AB 100 100 __1 000000000000 Program Fail Count
AC 100 100 __1 000000000000 Erase Fail Count
AD _61 _61 _10 0000000004AD Average Block-Erase Count
AE 100 100 __1 0000000000BA Unexpected Power Loss Count
B5 100 100 __1 FFFFF669448F Unaligned Access Count
B7 100 100 __1 000000000000 SATA Interface Downshift
B8 100 100 _50 000000000000 Error Correction Count
BB 100 100 __1 000000000000 Reported Uncorrectable Errors
BC 100 100 __1 000000000000 Command Timeout Count
BD 100 100 __1 000000000054 Factory Bad Block Count
C2 100 100 __0 000000000000 Temperature
C3 100 100 __1 000000000000 Cumulative ECC Bit Correction Count
C4 100 100 __1 000000000000 Reallocation Event Count
C5 100 100 __1 000000000000 Current Pending Sector Count
C6 100 100 __1 000000000000 Smart Off-line Scan Uncorrectable Error Count
C7 100 100 __1 000000000000 Ultra DMA CRC Error Rate
CA _61 _61 __1 000000000027 Percent Lifetime Used
CE 100 100 __1 000000000000 Write Error Rate

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0440 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 3030 3030 3030 3030 3132 3337 3039 3135 3932 3645
020: 0000 0000 0000 3030 3046 2020 2020 4D34 2D43 5431
030: 3238 4D34 5353 4432 2020 2020 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 4000 2F00
050: 4001 0000 0000 0007 3FFF 0010 003F FC10 00FB 0110
060: C2B0 0EE7 0000 0007 0003 0078 0078 0078 0078 4000
070: 0000 0000 0000 0000 0000 001F 170E 0006 004C 0040
080: 03F8 0028 746B 7D09 6163 7469 BC09 6163 203F 0001
090: 0001 00FE FFFE 0000 0000 0000 0000 0000 0000 0000
100: C2B0 0EE7 0000 0000 0000 0008 4000 0000 500A 0751
110: 0915 926E 0000 0000 0000 0000 0000 0000 0000 401E
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 3030
130: 3046 2E30 332E 3030 0000 0000 0000 3738 3835 2020
140: 2020 3341 4C37 3734 3934 2020 2020 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0001
160: 0000 0000 0000 0000 0000 0000 0000 0000 0003 0001
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 003D 0000 0000 4000
210: 0000 0000 0000 0001 0000 0000 0000 0001 0000 0000
220: 0000 0000 103F 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 00FF 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 40A5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 2F 00 64 64 00 00 00 00 00 00 00 05 33
010: 00 64 64 00 00 00 00 00 00 00 09 32 00 64 64 3A
020: 48 00 00 00 00 00 0C 32 00 64 64 04 19 00 00 00
030: 00 00 AA 33 00 64 64 00 00 00 00 00 00 00 AB 32
040: 00 64 64 00 00 00 00 00 00 00 AC 32 00 64 64 00
050: 00 00 00 00 00 00 AD 33 00 3D 3D AD 04 00 00 00
060: 00 00 AE 32 00 64 64 BA 00 00 00 00 00 00 B5 22
070: 00 64 64 8F 44 69 F6 FF FF 00 B7 32 00 64 64 00
080: 00 00 00 00 00 00 B8 33 00 64 64 00 00 00 00 00
090: 00 00 BB 32 00 64 64 00 00 00 00 00 00 00 BC 32
0A0: 00 64 64 00 00 00 00 00 00 00 BD 0E 00 64 64 54
0B0: 00 00 00 00 00 00 C2 22 00 64 64 00 00 00 00 00
0C0: 00 00 C3 3A 00 64 64 00 00 00 00 00 00 00 C4 32
0D0: 00 64 64 00 00 00 00 00 00 00 C5 32 00 64 64 00
0E0: 00 00 00 00 00 00 C6 30 00 64 64 00 00 00 00 00
0F0: 00 00 C7 32 00 64 64 00 00 00 00 00 00 00 CA 18
100: 00 3D 3D 27 00 00 00 00 00 00 CE 0E 00 64 64 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 53 02 00 7B
170: 03 00 01 00 02 09 03 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 F8

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 32 00 00 00 00 00 00 00 00 00 00 05 0A
010: 00 00 00 00 00 00 00 00 00 00 09 01 00 00 00 00
020: 00 00 00 00 00 00 0C 01 00 00 00 00 00 00 00 00
030: 00 00 AA 0A 00 00 00 00 00 00 00 00 00 00 AB 01
040: 00 00 00 00 00 00 00 00 00 00 AC 01 00 00 00 00
050: 00 00 00 00 00 00 AD 0A 00 00 00 00 00 00 00 00
060: 00 00 AE 01 00 00 00 00 00 00 00 00 00 00 B5 01
070: 00 00 00 00 00 00 00 00 00 00 B7 01 00 00 00 00
080: 00 00 00 00 00 00 B8 32 00 00 00 00 00 00 00 00
090: 00 00 BB 01 00 00 00 00 00 00 00 00 00 00 BC 01
0A0: 00 00 00 00 00 00 00 00 00 00 BD 01 00 00 00 00
0B0: 00 00 00 00 00 00 C2 00 00 00 00 00 00 00 00 00
0C0: 00 00 C3 01 00 00 00 00 00 00 00 00 00 00 C4 01
0D0: 00 00 00 00 00 00 00 00 00 00 C5 01 00 00 00 00
0E0: 00 00 00 00 00 00 C6 01 00 00 00 00 00 00 00 00
0F0: 00 00 C7 01 00 00 00 00 00 00 00 00 00 00 CA 01
100: 00 00 00 00 00 00 00 00 00 00 CE 01 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5B

----------------------------------------------------------------------------
(3) WDC WD20EZRX-00DC0B0
----------------------------------------------------------------------------
Model : WDC WD20EZRX-00DC0B0
Firmware : 80.00A80
Serial Number : WD-WCC1T1476536
Disk Size : 2000,3 GB (8,4/137,4/2000,3/2000,3)
Buffer Size : Neznámy údaj
Queue Depth : 32
# of Sectors : 3907029168
Rotation Rate : Neznámy údaj
Interface : Serial ATA
Major Version : ACS-2
Minor Version : ----
Transfer Mode : SATA/600 | SATA/600
Power On Hours : 15483 hod.
Power On Count : 4981 krát
Temperature : 20 C (68 F)
Health Status : Dobrý
Features : S.M.A.R.T., 48bit LBA, NCQ
APM Level : ----
AAM Level : ----
Drive Letter : D: F: G:

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 200 200 _51 000000000000 Počet chyb čtení
03 154 152 _21 000000001C5A Čas na roztočení ploten
04 _94 _94 __0 0000000019B3 Počet spuštění/zastavení
05 200 200 140 000000000000 Počet přemapovaných sektorů
07 200 200 __0 000000000000 Počet chybných hledání
09 _79 _79 __0 000000003C7B Hodin v činnosti
0A 100 100 __0 000000000000 Počet opakovaných pokusů o roztočení ploten
0B 100 100 __0 000000000000 Počet pokusů o překalibrování
0C _96 _96 __0 000000001375 Počet cyklů zapnutí zařízení
C0 200 200 __0 000000000064 Počet vypnutí disku
C1 __1 __1 __0 0000000CB86A Počet cyklů načítání/vymazání
C2 130 106 __0 000000000014 Teplota
C4 200 200 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 200 200 __0 000000000000 Počet podezřelých sektorů
C6 200 200 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
C8 200 200 __0 000000000000 Počet chyb při zápisu sektorů

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 427A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2057 442D 5743 4331 5431 3437 3635 3336
020: 0000 0000 0000 3830 2E30 3041 3830 5744 4320 5744
030: 3230 455A 5258 2D30 3044 4330 4230 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4001 0000 0000 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 970E 0006 004C 0040
080: 03FE 0000 746B 7D61 4123 7469 BC41 4123 207F 00A8
090: 00A8 0000 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 88B0 E8E0 0000 0000 0000 0000 6003 0000 5001 4EE2
110: 08DB ACC3 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 0400
130: 0001 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0004 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 70B5 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 103E 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 1000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 D8A5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 2F 00 C8 C8 00 00 00 00 00 00 00 03 27
010: 00 9A 98 5A 1C 00 00 00 00 00 04 32 00 5E 5E B3
020: 19 00 00 00 00 00 05 33 00 C8 C8 00 00 00 00 00
030: 00 00 07 2E 00 C8 C8 00 00 00 00 00 00 00 09 32
040: 00 4F 4F 7B 3C 00 00 00 00 00 0A 32 00 64 64 00
050: 00 00 00 00 00 00 0B 32 00 64 64 00 00 00 00 00
060: 00 00 0C 32 00 60 60 75 13 00 00 00 00 00 C0 32
070: 00 C8 C8 64 00 00 00 00 00 00 C1 32 00 01 01 6A
080: B8 0C 00 00 00 00 C2 22 00 82 6A 14 00 00 00 00
090: 00 00 C4 32 00 C8 C8 00 00 00 00 00 00 00 C5 32
0A0: 00 C8 C8 00 00 00 00 00 00 00 C6 30 00 C8 C8 00
0B0: 00 00 00 00 00 00 C7 32 00 C8 C8 00 00 00 00 00
0C0: 00 00 C8 08 00 C8 C8 00 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 02 00 C0 7B 01 7B
170: 03 00 01 00 02 FF 05 3F 01 00 00 00 00 00 00 00
180: 00 00 01 06 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 81

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 33 C8 C8 C8 C8 C8 C8 00 00 00 00 03 15
010: 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00
020: 00 00 00 00 00 00 05 8C 00 00 00 00 00 00 00 00
030: 00 00 07 00 C8 C8 C8 C8 C8 C8 00 00 00 00 09 00
040: 00 00 00 00 00 00 00 00 00 00 0A 00 00 00 00 00
050: 00 00 00 00 00 00 0B 00 00 00 00 00 00 00 00 00
060: 00 00 0C 00 00 00 00 00 00 00 00 00 00 00 C0 00
070: 00 00 00 00 00 00 00 00 00 00 C1 00 00 00 00 00
080: 00 00 00 00 00 00 C2 00 00 00 00 00 00 00 00 00
090: 00 00 C4 00 00 00 00 00 00 00 00 00 00 00 C5 00
0A0: 00 00 00 00 00 00 00 00 00 00 C6 00 00 00 00 00
0B0: 00 00 00 00 00 00 C7 00 00 00 00 00 00 00 00 00
0C0: 00 00 C8 00 C8 C8 C8 C8 C8 C8 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 AD

# AdwCleaner v6.045 - Log vytvořen 14/04/2017 v 18:02:00
# Aktualizováno dne 28/03/2017 z Malwarebytes
# Databáze : 2017-04-13.1 [Server]
# Operační systém : Windows 10 Pro (X64)
# Uživatelské jméno : winki - DESKTOP-0S50FER
# Spuštěno z : C:\Users\winki\Desktop\adwcleaner_6.045.exe
# Mod: Skenování
# Podpora : https://www.malwarebytes.com/support



***** [ Služby ] *****

Nebyly nalezeny žádné škodlivé služby.


***** [ Složky ] *****

Nebyly nalezeny žádné škodlivé složky.


***** [ Soubory ] *****

Nebyly nalezeny žádné škodlivé soubory.


***** [ DLL ] *****

Nebyly nalezeny žádné škodlivé DLL.


***** [ WMI ] *****

Nebyly nalezeny žádné škodlivé klíče.


***** [ Zástupci ] *****

Žádný infikovaný zástupce nenalezen.


***** [ Naplánované úlohy ] *****

Žádná nebezpečná úloha nenalezena.


***** [ Registry ] *****

Nebyly nalezeny žádné škodlivé položky registru.


***** [ Internetové prohlížeče ] *****

Nebyly nalezeny žádné škodlivé položky prohlížeče Firefox.
Nebyly nalezeny žádné škodlivé položky prohlížeče Chromium.

*************************

C:\AdwCleaner\AdwCleaner[S0].txt - [1217 Bajty] - [14/04/2017 18:02:00]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1290 Bajty] ##########

windyOMG píše:Jinak mohu poprosit o ohodnocení mého druhého SSD disku?

Tak ve 100% kondici uz neni.

Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu (cili Vlastni sken vsech disku) http://forum.viry.cz/viewtopic.php?f=29&t=144868 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 15.04.17
Čas skenování: 12:35
Logovací soubor:
Správce: Ano

-Informace o softwaru-
Verze: 3.0.6.1469
Verze komponentů: 1.0.103
Aktualizovat verzi balíku komponent: 1.0.1713
Licence: Zkušební

-Systémová informace-
OS: Windows 10
CPU: x64
Systém souborů: NTFS
Uživatel: DESKTOP-0S50FER\winki

-Shrnutí skenování-
Typ skenování: Vlastní skenování
Výsledek: Dokončeno
Skenované objekty: 933211
Uplynulý čas: 3 hod, 35 min, 7 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Povoleno
Heuristika: Povoleno
Potenciálně nežádoucí program: Povoleno
Potenciálně nežádoucí modifikace: Povoleno

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Hodnota v registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)

Soubor: 7
PUP.Optional.OpenCandy.Generic, C:\USERS\WINKI\PICTURES\FREEFILESYNC_8.9_WINDOWS_SETUP.EXE, Žádná uživatelská akce, [9060], [123493],1.0.1713
RiskWare.GameHack, G:\HRY\BEHOLDER\CRACK\STEAM_API.DLL, Žádná uživatelská akce, [405], [305544],1.0.1713
PUP.Optional.AdBundle, G:\PROGRAMY - OVLADA\u00c4\u008dE\OVLADA\u00c4\u008dE\XBOX OVALDA\u00c4\u008d\FUTURE-3D.EXE, Žádná uživatelská akce, [750], [85918],1.0.1713
RiskWare.DontStealOurSoftware, G:\PROGRAMY - OVLADA\u00c4\u008dE\PROGRAMY\MALWAREBYTES PREMIUM\MALWAREBYTES PREMIUM 3.0.6.1469\MALWAREBYTES PREMIUM 3.0.6.1469\KEYGEN.RAR, Žádná uživatelská akce, [644], [77941],1.0.1713
RiskWare.DontStealOurSoftware, G:\PROGRAMY - OVLADA\u00c4\u008dE\PROGRAMY\MALWAREBYTES PREMIUM\MALWAREBYTES PREMIUM 3.0.6.1469\MALWAREBYTES PREMIUM 3.0.6.1469\KEYGEN\MALWAREBYTES_ANTI-MALWARE_KEYGEN_V1.5_URET.EXE, Žádná uživatelská akce, [644], [77941],1.0.1713
RiskWare.GameHack, G:\HRY\BEHOLDER\CRACK\BEHOLDER_DATA\PLUGINS\STEAM_API.DLL, Žádná uživatelská akce, [405], [305544],1.0.1713
Adware.AdLoad, G:\PROGRAMY - OVLADA\u00c4\u008dE\PROGRAMY\CAMTASIA STUDIO\CAMTASIA KEYGEN.EXE, Žádná uživatelská akce, [768], [124442],1.0.1713

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)

Vsechny nalezy nechte odstranit. Po odstraneni a restartu pc test s MBAM zopakujte, at vime, jestli se to nevraci. Napiste vysledek testu a podle nej zvolim dalsi postup.

Díky, nenalezl už nic, ale ještě si nejsem jistý zda problém přetrvává nebo ne.

Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 16.04.17
Čas skenování: 16:45
Logovací soubor:
Správce: Ano

-Informace o softwaru-
Verze: 3.0.6.1469
Verze komponentů: 1.0.103
Aktualizovat verzi balíku komponent: 1.0.1742
Licence: Zkušební

-Systémová informace-
OS: Windows 10
CPU: x64
Systém souborů: NTFS
Uživatel: DESKTOP-0S50FER\winki

-Shrnutí skenování-
Typ skenování: Vlastní skenování
Výsledek: Dokončeno
Skenované objekty: 934087
Uplynulý čas: 3 hod, 41 min, 34 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Povoleno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Povoleno
Heuristika: Povoleno
Potenciálně nežádoucí program: Povoleno
Potenciálně nežádoucí modifikace: Povoleno

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Hodnota v registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)

Soubor: 0
(Nebyly zjištěny žádné škodlivé položky)

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)

Tak problém stále přetrvává. Takže to asi bude HW problém že?

Jeste jsme neskoncili

MBAM odinstalujte.

Dejte logy podle tohoto navodu http://forum.viry.cz/viewtopic.php?f=13&t=133100 - vypnete na chvili antivir, je mozne, ze to bude blokovat jako skodnou, ale pouzivame to porad, jedna se o falesny poplach
(Kdyby nesel Launcher stahnout, dejte logy jen ze samotneho FRST, tedy bez pouziti Launcheru)

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17-04-2017 01
Ran by winki (administrator) on DESKTOP-0S50FER (17-04-2017 14:57:22)
Running from C:\Users\winki\Desktop
Loaded Profiles: winki (Available Profiles: defaultuser0 & winki)
Platform: Windows 10 Pro Version 1607 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe
(Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\ICM-Service.exe
Failed to access process -> utorrent.exe
Failed to access process -> NVDisplay.Container.exe
Failed to access process -> NVDisplay.Container.exe
Failed to access process -> NVDisplay.Container.exe
Failed to access process -> NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
Failed to access process -> NVDisplay.Container.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe
(Google Inc.) C:\Users\winki\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\winki\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\winki\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\winki\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\winki\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\winki\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\winki\AppData\Local\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Logitech, Inc.) C:\Program Files\Logitech\LogiOptions\LogiOptions.exe
(Google Inc.) C:\Users\winki\AppData\Local\Google\Chrome\Application\chrome.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Logitech, Inc.) C:\ProgramData\LogiShrd\LogiOptions\Software\Current\LogiOptionsMgr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTAgent.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Spotify Ltd) C:\Users\winki\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
(Amazon.com Inc.) C:\Users\winki\AppData\Local\Amazon Drive\AmazonDrive.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe
(Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\Plex DLNA Server.exe
(Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(Google Inc.) C:\Users\winki\AppData\Local\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
Failed to access process -> explorer.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(forum.viry.cz) C:\Users\winki\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [1739896 2017-01-14] (Logitech, Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-04-05] (AVAST Software)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2404952 2017-03-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ZoneAlarm] => C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [145208 2017-03-24] (Check Point Software Technologies Ltd.)
HKU\S-1-5-21-116116240-444440880-2871013289-1001\...\Run: [Google Update] => C:\Users\winki\AppData\Local\Google\Update\1.3.33.3\GoogleUpdateCore.exe [599632 2017-04-12] (Google Inc.)
HKU\S-1-5-21-116116240-444440880-2871013289-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3019552 2017-03-23] (Valve Corporation)
HKU\S-1-5-21-116116240-444440880-2871013289-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4701888 2017-02-07] (Disc Soft Ltd)
HKU\S-1-5-21-116116240-444440880-2871013289-1001\...\Run: [Spotify Web Helper] => C:\Users\winki\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-03-24] (Spotify Ltd)
HKU\S-1-5-21-116116240-444440880-2871013289-1001\...\Run: [Plex Media Server] => C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe [14367208 2017-03-01] (Plex, Inc.)
HKU\S-1-5-21-116116240-444440880-2871013289-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27545048 2017-03-14] (Skype Technologies S.A.)
HKU\S-1-5-21-116116240-444440880-2871013289-1001\...\Run: [Amazon Drive] => C:\Users\winki\AppData\Local\Amazon Drive\AmazonDrive.exe [4828336 2017-04-01] (Amazon.com Inc.)
HKU\S-1-5-21-116116240-444440880-2871013289-1001\...\MountPoints2: {51189ca2-fea3-11e6-84cd-d43d7ebdf362} - "K:\SETUP.EXE"
HKU\S-1-5-21-116116240-444440880-2871013289-1001\...\MountPoints2: {a8ce4539-01ce-11e7-84cf-d43d7ebdf362} - "L:\SETUP.EXE"
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-04-05] (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.5.1 8.8.8.8
Tcpip\..\Interfaces\{f6f79c62-3dd4-4c57-afbc-ad196e28e681}: [DhcpNameServer] 192.168.5.1 8.8.8.8

Internet Explorer:
==================
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation)
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: 8k8cupjw.default
FF ProfilePath: C:\Users\winki\AppData\Roaming\Mozilla\Firefox\Profiles\8k8cupjw.default [2017-04-10]
FF Extension: (Disable Prefetch) - C:\Users\winki\AppData\Roaming\Mozilla\Firefox\Profiles\8k8cupjw.default\features\{963f6099-798a-4d69-9045-b8f7eea7ca8e}\disable-prefetch@mozilla.org.xpi [2017-04-07]
FF Extension: (Site Deployment Checker) - C:\Program Files (x86)\Mozilla Firefox\browser\features\deployment-checker@mozilla.org.xpi [2017-03-24] [not signed]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF48
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF48 [2017-04-05]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF48
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF48 [2017-04-05]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF48
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF48
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2017-03-27] (Adobe Systems)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-04-01] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-04-01] (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2017-03-27] (Adobe Systems)
FF Plugin HKU\S-1-5-21-116116240-444440880-2871013289-1001: @tools.google.com/Google Update;version=3 -> C:\Users\winki\AppData\Local\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-12] (Google Inc.)
FF Plugin HKU\S-1-5-21-116116240-444440880-2871013289-1001: @tools.google.com/Google Update;version=9 -> C:\Users\winki\AppData\Local\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-12] (Google Inc.)

Chrome:
=======
CHR HomePage: Default -> hxxp://seznam.cz/
CHR StartupUrls: Default -> "hxxp://seznam.cz/"
CHR Profile: C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default [2017-04-17]
CHR Extension: (Překladač Google) - C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2017-02-26]
CHR Extension: (Prezentace Google) - C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-02-26]
CHR Extension: (Dokumenty Google) - C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-02-26]
CHR Extension: (Disk Google) - C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-02-26]
CHR Extension: (YouTube) - C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-02-26]
CHR Extension: (Adobe Acrobat) - C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-03]
CHR Extension: (Video Downloader professional) - C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2017-02-26]
CHR Extension: (Full Page Screen Capture) - C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl [2017-02-26]
CHR Extension: (Tabulky Google) - C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-02-26]
CHR Extension: (Plex) - C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpniocchabmgenibceglhnfeimmdhdfm [2017-03-13]
CHR Extension: (Vzdálená plocha Chrome) - C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2017-03-22]
CHR Extension: (Dokumenty Google offline) - C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-02-26]
CHR Extension: (FormApps Chrome Extension) - C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilfoopambfaclfjmpiaijnccgcmbeigi [2017-02-26]
CHR Extension: (Auto HD For YouTube™) - C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default\Extensions\koiaokdomkpjdgniimnkhgbilbjgpeak [2017-02-26]
CHR Extension: (Google Play) - C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2017-02-26]
CHR Extension: (Mapy Google) - C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2017-02-26]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-08]
CHR Extension: (Enhanced Steam) - C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default\Extensions\okadibdjfemgnhjiembecghcbfknbfhg [2017-04-13]
CHR Extension: (Evernote Web Clipper) - C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2017-04-05]
CHR Extension: (Gmail) - C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-02-26]
CHR Extension: (Chrome Media Router) - C:\Users\winki\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-04-07]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [771672 2017-03-14] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-02-27] (Adobe Systems, Incorporated)
S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7398336 2017-04-05] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [261712 2017-04-05] (AVAST Software)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2017-02-07] (Disc Soft Ltd)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [342456 2016-08-11] (Futuremark)
R2 KSDE1.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe [241544 2016-06-28] (AO Kaspersky Lab)
U4 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-02-23] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-02-23] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462784 2017-04-01] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [427064 2017-04-01] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2124296 2017-04-05] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2185232 2017-04-05] (Electronic Arts)
R2 PlexUpdateService; C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe [1980392 2017-03-01] (Plex, Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-11-21] (Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10351856 2016-12-15] (TeamViewer GmbH)
R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [4107680 2017-03-24] (Check Point Software Technologies Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2017-03-28] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2017-03-28] (Microsoft Corporation)
S3 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZaPrivacyService.exe [114936 2016-11-01] (Check Point Software Technologies, Ltd.)
R2 ZoneAlarm ICM Service; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ICM-Service.exe [1058616 2017-03-24] (Check Point Software Technologies Ltd.)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 anvsnddrv; C:\Windows\system32\drivers\anvsnddrv.sys [34416 2016-03-24] (AnvSoft Inc.)
R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [307736 2017-04-05] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [189768 2017-04-05] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [334088 2017-04-05] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [48528 2017-04-05] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [38296 2017-04-05] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [32600 2017-04-05] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [127112 2017-04-05] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [101152 2017-04-05] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [75704 2017-04-05] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1005048 2017-04-05] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [556784 2017-04-05] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [164064 2017-04-05] (AVAST Software)
R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [339696 2017-04-05] (AVAST Software)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2017-03-01] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2017-03-01] (Disc Soft Ltd)
R3 kltap; C:\Windows\System32\drivers\kltap.sys [52152 2016-06-07] (The OpenVPN Project)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_e69a53b8ddde469c\nvlddmkm.sys [14841784 2017-04-03] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2017-02-23] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [46016 2017-02-08] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [76840 2017-04-01] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek )
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
R1 Vsdatant; C:\Windows\System32\drivers\vsdatant.sys [461240 2017-03-24] (Check Point Software Technologies Ltd.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
U3 iswSvc; no ImagePath
R0 MBAMSwissArmy; system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-04-17 14:57 - 2017-04-17 14:57 - 00023818 _____ C:\Users\winki\Desktop\FRST.txt
2017-04-17 14:56 - 2017-04-17 14:57 - 00000000 ____D C:\FRST
2017-04-17 14:55 - 2017-04-17 14:56 - 00112640 _____ (forum.viry.cz) C:\Users\winki\Desktop\FRSTLauncher.exe
2017-04-17 14:55 - 2017-04-17 14:55 - 02424832 _____ (Farbar) C:\Users\winki\Desktop\FRST64.exe
2017-04-15 23:55 - 2017-04-15 23:55 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign82a1b2c28878c142
2017-04-15 23:55 - 2017-04-15 23:55 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign532b3a60df8327ad
2017-04-15 23:54 - 2017-04-15 23:54 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigna88fd5c09267b552
2017-04-15 23:54 - 2017-04-15 23:54 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign63c4c41de35fd02d
2017-04-15 23:28 - 2017-04-15 23:28 - 00002627 _____ C:\Users\winki\Desktop\1.txt
2017-04-15 12:34 - 2017-04-15 12:34 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-04-15 12:34 - 2017-04-15 12:34 - 00000000 ____D C:\Program Files\Malwarebytes
2017-04-15 12:30 - 2017-04-15 12:33 - 60107896 _____ (Malwarebytes ) C:\Users\winki\Downloads\mb3-setup-consumer-3.0.6.1469-10103.exe
2017-04-14 18:00 - 2017-04-14 17:57 - 04089296 _____ C:\Users\winki\Desktop\adwcleaner_6.045.exe
2017-04-14 17:57 - 2017-04-14 18:02 - 00000000 ____D C:\AdwCleaner
2017-04-14 17:52 - 2017-04-14 17:57 - 04089296 _____ C:\Users\winki\Downloads\adwcleaner_6.045.exe
2017-04-14 17:52 - 2017-04-14 17:53 - 00001269 _____ C:\Users\winki\Desktop\CrystalDiskInfo.lnk
2017-04-14 17:52 - 2017-04-14 17:53 - 00000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2017-04-14 17:52 - 2017-04-14 17:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2017-04-14 17:51 - 2017-04-14 17:52 - 11418272 _____ C:\Users\winki\Downloads\CrystalDiskInfo7_0_5.exe
2017-04-13 22:30 - 2017-04-13 22:40 - 00000000 ____D C:\Program Files\trend micro
2017-04-13 22:30 - 2017-04-13 22:30 - 00000000 ____D C:\rsit
2017-04-13 22:29 - 2017-04-13 22:29 - 01329152 _____ C:\Users\winki\Downloads\RSITx64.exe
2017-04-13 22:06 - 2017-04-13 22:06 - 00115488 _____ C:\Users\winki\Downloads\[CzT]Hitman_2016_.torrent
2017-04-13 19:50 - 2017-04-13 19:50 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-04-13 19:45 - 2017-04-13 19:45 - 00001252 _____ C:\Users\winki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aktualizace a nastavení ochrany osobních údajů.lnk
2017-04-13 19:45 - 2017-04-13 19:45 - 00000000 ____D C:\Users\winki\AppData\Local\UNP
2017-04-13 17:57 - 2017-04-13 17:58 - 00000000 ____D C:\Program Files\UNP
2017-04-13 17:57 - 2017-04-13 17:57 - 00000000 ____D C:\Windows\system32\UNP
2017-04-13 15:41 - 2017-04-13 15:41 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignb767f4b623b325d9
2017-04-13 15:41 - 2017-04-13 15:41 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigna83afe740525862e
2017-04-13 15:41 - 2017-04-13 15:41 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign43d1939fae0696f2
2017-04-13 15:30 - 2017-04-13 15:30 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign85d3892c942d9208
2017-04-13 15:30 - 2017-04-13 15:30 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign5f3089cfa237e7d7
2017-04-13 15:30 - 2017-04-13 15:30 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign5cf8ade1d6b8aad0
2017-04-13 15:09 - 2017-04-13 15:09 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignfd49ce953c8a2521
2017-04-13 15:09 - 2017-04-13 15:09 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigne4eb32e3b4ec2e2c
2017-04-13 15:09 - 2017-04-13 15:09 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign8adea922451ddd68
2017-04-13 15:06 - 2017-04-13 15:06 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign3b144d89692dcc29
2017-04-13 15:06 - 2017-04-13 15:06 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign14f53681f521fcc5
2017-04-13 15:06 - 2017-04-13 15:06 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign070460a37814e74d
2017-04-13 15:00 - 2017-04-13 15:00 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign5e1431507a75eceb
2017-04-13 15:00 - 2017-04-13 15:00 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign47b640065c481c7f
2017-04-13 15:00 - 2017-04-13 15:00 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign0e76400517397021
2017-04-13 14:45 - 2017-04-13 14:45 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignab2c2a66010bcc45
2017-04-13 14:45 - 2017-04-13 14:45 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigna53f1c0f5c9b2af7
2017-04-13 14:45 - 2017-04-13 14:45 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign7acd63cae1065a06
2017-04-13 12:04 - 2017-04-13 12:04 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignc5ff2466dd13de2b
2017-04-13 12:04 - 2017-04-13 12:04 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign500f2b145b5e389d
2017-04-13 12:04 - 2017-04-13 12:04 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign379aa9d74c125caf
2017-04-13 11:54 - 2017-04-13 11:54 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignd759b37ac8f17f0d
2017-04-13 11:54 - 2017-04-13 11:54 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign5a3c198f34d7334b
2017-04-13 11:54 - 2017-04-13 11:54 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign26bcd4f6bdb0a222
2017-04-13 11:43 - 2017-04-13 11:43 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigna4f74bf0e575ed2d
2017-04-13 11:43 - 2017-04-13 11:43 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign18d32c31cea25401
2017-04-13 11:42 - 2017-04-13 11:42 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignd93b67d35e93995f
2017-04-13 11:42 - 2017-04-13 11:42 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign4b5fc1c0fb2202f2
2017-04-13 11:31 - 2017-04-13 11:31 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign56876570c5f60b97
2017-04-13 11:31 - 2017-04-13 11:31 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign216a972f6b7fabed
2017-04-13 11:31 - 2017-04-13 11:31 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign05121e6fe6096096
2017-04-13 11:29 - 2017-04-13 11:29 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignbc6cf380dfc1cc1b
2017-04-13 11:29 - 2017-04-13 11:29 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign8131629f17ab5279
2017-04-13 11:29 - 2017-04-13 11:29 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign7148b7533d8d78dc
2017-04-13 03:27 - 2017-04-16 18:40 - 00011989 _____ C:\Users\winki\Desktop\Internet.xlsx
2017-04-13 01:07 - 2017-04-13 01:07 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign954286b7de26bb43
2017-04-13 01:07 - 2017-04-13 01:07 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign852e62d82f8774e3
2017-04-13 01:07 - 2017-04-13 01:07 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign45eb034f16a601d2
2017-04-12 20:58 - 2017-04-12 20:58 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigndd1e3b3685170164
2017-04-12 20:15 - 2017-04-12 20:15 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign988231f6005fda7c
2017-04-12 20:15 - 2017-04-12 20:15 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign82c4993fbd6a9cf7
2017-04-12 20:15 - 2017-04-12 20:15 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign4055102c2e37837d
2017-04-12 20:08 - 2017-04-12 20:08 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignaf94ee73417f5886
2017-04-12 20:08 - 2017-04-12 20:08 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign393953e95a0b30c9
2017-04-12 20:08 - 2017-04-12 20:08 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign105676554b0b1acb
2017-04-12 20:05 - 2017-04-12 20:05 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigned768715fba1e61b
2017-04-12 20:05 - 2017-04-12 20:05 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignb5f1a41081d32fec
2017-04-12 20:05 - 2017-04-12 20:05 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign699614f4cd018988
2017-04-12 19:56 - 2017-04-12 19:56 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignab6c5181f3dc51fc
2017-04-12 19:56 - 2017-04-12 19:56 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign88e1b73d2a132c7f
2017-04-12 19:56 - 2017-04-12 19:56 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign349a818ca00dfcc3
2017-04-12 19:24 - 2017-04-12 19:24 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign94e05d58b8c4cdb0
2017-04-12 19:24 - 2017-04-12 19:24 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign94076fc16554ebd4
2017-04-12 19:24 - 2017-04-12 19:24 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign7aedb03094d7a44a
2017-04-12 19:17 - 2017-04-12 19:17 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignf4856f732bb35d41
2017-04-12 19:17 - 2017-04-12 19:17 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignc2fd9c6bd2038deb
2017-04-12 19:17 - 2017-04-12 19:17 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignc27812454c86b165
2017-04-12 19:17 - 2017-04-12 19:17 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign9d800cda1b0d6f45
2017-04-12 19:17 - 2017-04-12 19:17 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign502d606d52381fd6
2017-04-12 19:17 - 2017-04-12 19:17 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign08667dc0ab9a4b12
2017-04-12 19:16 - 2017-04-12 19:16 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign9654d00490f6252e
2017-04-12 19:16 - 2017-04-12 19:16 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign79b47518553ff141
2017-04-12 19:16 - 2017-04-12 19:16 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign4b1eab61214b93f3
2017-04-12 19:15 - 2017-04-12 19:15 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigna92a28c7ce7ed675
2017-04-12 19:15 - 2017-04-12 19:15 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigna42f42935078c181
2017-04-12 19:15 - 2017-04-12 19:15 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign54d5826122794c0d
2017-04-12 19:10 - 2017-04-12 19:10 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigna506358171ca1974
2017-04-12 19:10 - 2017-04-12 19:10 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign41aa2dc25a4c99c0
2017-04-12 19:10 - 2017-04-12 19:10 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign19da67cf081b98ed
2017-04-12 19:03 - 2017-04-12 19:03 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignfad56b134d2237a2
2017-04-12 19:03 - 2017-04-12 19:03 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigne888688de2eeaa5e
2017-04-12 19:03 - 2017-04-12 19:03 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigne3352d95800681cf
2017-04-12 19:03 - 2017-04-12 19:03 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign8729674fccb769a0
2017-04-12 19:03 - 2017-04-12 19:03 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign40d6a17325743732
2017-04-12 19:03 - 2017-04-12 19:03 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign36c5db15c543fca1
2017-04-12 18:33 - 2017-04-12 18:33 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigne49753ea27c6a518
2017-04-12 18:33 - 2017-04-12 18:33 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign6936241a3f332491
2017-04-12 18:33 - 2017-04-12 18:33 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign40730c518c6a9bd5
2017-04-12 18:30 - 2017-04-12 18:30 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignf4342953508f5ae1
2017-04-12 18:30 - 2017-04-12 18:30 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignc74843cba2c064f9
2017-04-12 18:30 - 2017-04-12 18:30 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigna43dde0432cde901
2017-04-12 18:30 - 2017-04-12 18:30 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign2f6b4739b437c959
2017-04-12 18:30 - 2017-04-12 18:30 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign2b99cbd72f1c7760
2017-04-12 18:30 - 2017-04-12 18:30 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign1d7a723794d791f0
2017-04-12 18:29 - 2017-04-12 18:29 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignfa05b4a70e8e4286
2017-04-12 18:29 - 2017-04-12 18:29 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign871158c9375003cf
2017-04-12 18:29 - 2017-04-12 18:29 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign4c197fc81e041a83
2017-04-12 18:23 - 2017-04-12 18:23 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignf807fbacbb3c4b72
2017-04-12 18:23 - 2017-04-12 18:23 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign68fb75190d025828
2017-04-12 18:23 - 2017-04-12 18:23 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign48814de976a60dc4
2017-04-12 18:22 - 2017-04-12 18:22 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignf597d757e6126134
2017-04-12 18:22 - 2017-04-12 18:22 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigne0eab43853398e09
2017-04-12 18:22 - 2017-04-12 18:22 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign6d41beccd677db89
2017-04-12 18:21 - 2017-04-12 18:21 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign996537d5e23cdebf
2017-04-12 18:21 - 2017-04-12 18:21 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign30107a5f9f79da38
2017-04-12 18:21 - 2017-04-12 18:21 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign2fe2877beaaac619
2017-04-12 18:10 - 2017-04-12 18:10 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign97dc3c6d39cd3ddc
2017-04-12 18:10 - 2017-04-12 18:10 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign7ffe888b48a2bfa2
2017-04-12 18:10 - 2017-04-12 18:10 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign1dc75d0fbaf88ae6
2017-04-12 17:50 - 2017-04-12 17:50 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigne753f21cf40305a2
2017-04-12 17:50 - 2017-04-12 17:50 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigndfbc485af8083a0f
2017-04-12 17:50 - 2017-04-12 17:50 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigndeaf54bff4c17aab
2017-04-12 17:50 - 2017-04-12 17:50 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign88eee0aba8e8f874
2017-04-12 17:50 - 2017-04-12 17:50 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign8600952cc976d6e9
2017-04-12 17:50 - 2017-04-12 17:50 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign68105a1d48ce43db
2017-04-12 17:35 - 2017-04-12 17:35 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignbb1f30e61ed79ea9
2017-04-12 17:35 - 2017-04-12 17:35 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigna4c3ec4e90bb01b6
2017-04-12 17:35 - 2017-04-12 17:35 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign52fd5de2b78aa99e
2017-04-12 17:31 - 2017-04-12 17:31 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignbb3f5a5fdd2c54a4
2017-04-12 17:31 - 2017-04-12 17:31 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign857802607a639aa0
2017-04-12 17:31 - 2017-04-12 17:31 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign80147a3070597355
2017-04-12 17:26 - 2017-04-12 17:26 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignf7ab36f905121cf3
2017-04-12 17:26 - 2017-04-12 17:26 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign7eaafb48313001ec
2017-04-12 17:26 - 2017-04-12 17:26 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign2fba74cb816f503e
2017-04-12 17:19 - 2017-04-12 17:19 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignf83c7c1edd73eb7c
2017-04-12 17:19 - 2017-04-12 17:19 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign91091cb7257ae353
2017-04-12 17:19 - 2017-04-12 17:19 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign46c90982bee80c55
2017-04-12 16:46 - 2017-04-12 16:46 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignb60f499861a24130
2017-04-12 16:46 - 2017-04-12 16:46 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign4130b697d20c8472
2017-04-12 16:46 - 2017-04-12 16:46 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign0a6be21ca069a788
2017-04-12 15:45 - 2017-04-12 15:45 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignc9e57664ce380aef
2017-04-12 15:45 - 2017-04-12 15:45 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign770ea78ed5078f5a
2017-04-12 15:45 - 2017-04-12 15:45 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign49b49a743c14153a
2017-04-12 15:41 - 2017-04-12 15:41 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignfe712d57f6e2978c
2017-04-12 15:41 - 2017-04-12 15:41 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign4c85634b7fd78f44
2017-04-12 15:41 - 2017-04-12 15:41 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign1ed19918cd6a6d6e
2017-04-12 14:26 - 2017-04-12 14:26 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigneafb42f57ee59551
2017-04-12 14:26 - 2017-04-12 14:26 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign85567eff0575792c
2017-04-12 14:26 - 2017-04-12 14:26 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign3d1b9559a366296b
2017-04-12 14:25 - 2017-04-12 14:25 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigne05c1bf043f65c7d
2017-04-12 14:25 - 2017-04-12 14:25 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignd9d1cc40b9c9878a
2017-04-12 14:25 - 2017-04-12 14:25 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign7ce0b48d3e9e71f6
2017-04-12 12:42 - 2017-04-12 12:42 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigne5b51ca33010e869
2017-04-12 12:42 - 2017-04-12 12:42 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignd4895fe43c15bb4b
2017-04-12 12:42 - 2017-04-12 12:42 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignad024f3af479b729
2017-04-12 12:19 - 2017-03-28 09:10 - 00484584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2017-04-12 12:19 - 2017-03-28 09:10 - 00315744 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-04-12 12:19 - 2017-03-28 08:21 - 00167848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2017-04-12 12:19 - 2017-03-28 08:19 - 00601712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2017-04-12 12:19 - 2017-03-28 08:18 - 01705976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-04-12 12:19 - 2017-03-28 08:15 - 02048496 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
2017-04-12 12:19 - 2017-03-28 08:07 - 00263472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.ApplicationData.dll
2017-04-12 12:19 - 2017-03-28 08:05 - 01504056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2017-04-12 12:19 - 2017-03-28 08:04 - 05721808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2017-04-12 12:19 - 2017-03-28 08:04 - 02262776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-04-12 12:19 - 2017-03-28 08:04 - 01431232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2017-04-12 12:19 - 2017-03-28 08:04 - 00975744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2017-04-12 12:19 - 2017-03-28 08:04 - 00861024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2017-04-12 12:19 - 2017-03-28 08:04 - 00136032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostUser.dll
2017-04-12 12:19 - 2017-03-28 08:04 - 00116568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostCommon.dll
2017-04-12 12:19 - 2017-03-28 08:02 - 01980768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2017-04-12 12:19 - 2017-03-28 08:02 - 00846560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2017-04-12 12:19 - 2017-03-28 08:02 - 00576408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2017-04-12 12:19 - 2017-03-28 07:59 - 06667520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-04-12 12:19 - 2017-03-28 07:59 - 04023008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2017-04-12 12:19 - 2017-03-28 07:58 - 20967840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-04-12 12:19 - 2017-03-28 07:58 - 01851688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2017-04-12 12:19 - 2017-03-28 07:58 - 01360464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2017-04-12 12:19 - 2017-03-28 07:58 - 01344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
2017-04-12 12:19 - 2017-03-28 07:58 - 01277856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2017-04-12 12:19 - 2017-03-28 07:58 - 01202936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2017-04-12 12:19 - 2017-03-28 07:58 - 00981888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2017-04-12 12:19 - 2017-03-28 07:58 - 00961192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-04-12 12:19 - 2017-03-28 07:53 - 01414728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2017-04-12 12:19 - 2017-03-28 07:53 - 00545944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2017-04-12 12:19 - 2017-03-28 07:52 - 00306800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.MediaControl.dll
2017-04-12 12:19 - 2017-03-28 07:48 - 05685760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2017-04-12 12:19 - 2017-03-28 07:42 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll
2017-04-12 12:19 - 2017-03-28 07:42 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usoapi.dll
2017-04-12 12:19 - 2017-03-28 07:41 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcconf.dll
2017-04-12 12:19 - 2017-03-28 07:40 - 00224256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExSMime.dll
2017-04-12 12:19 - 2017-03-28 07:40 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XblAuthManagerProxy.dll
2017-04-12 12:19 - 2017-03-28 07:40 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-04-12 12:19 - 2017-03-28 07:39 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Radios.dll
2017-04-12 12:19 - 2017-03-28 07:39 - 00040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBrokerUI.dll
2017-04-12 12:19 - 2017-03-28 07:38 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll
2017-04-12 12:19 - 2017-03-28 07:38 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDeviceRegistration.dll
2017-04-12 12:19 - 2017-03-28 07:38 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-04-12 12:19 - 2017-03-28 07:38 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XblAuthTokenBrokerExt.dll
2017-04-12 12:19 - 2017-03-28 07:37 - 00255488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unimdm.tsp
2017-04-12 12:19 - 2017-03-28 07:37 - 00215552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apds.dll
2017-04-12 12:19 - 2017-03-28 07:37 - 00177664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Diagnostics.dll
2017-04-12 12:19 - 2017-03-28 07:37 - 00138240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DisplayManager.dll
2017-04-12 12:19 - 2017-03-28 07:37 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.HostName.dll
2017-04-12 12:19 - 2017-03-28 07:37 - 00097792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.SystemManagement.dll
2017-04-12 12:19 - 2017-03-28 07:36 - 00769024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ipsecsnp.dll
2017-04-12 12:19 - 2017-03-28 07:36 - 00136192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinRtTracing.dll
2017-04-12 12:19 - 2017-03-28 07:36 - 00129024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SerialCommunication.dll
2017-04-12 12:19 - 2017-03-28 07:36 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryClient.dll
2017-04-12 12:19 - 2017-03-28 07:36 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-04-12 12:19 - 2017-03-28 07:36 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.UserDeviceAssociation.dll
2017-04-12 12:19 - 2017-03-28 07:35 - 00505856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe
2017-04-12 12:19 - 2017-03-28 07:35 - 00392192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.Input.dll
2017-04-12 12:19 - 2017-03-28 07:35 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.LowLevel.dll
2017-04-12 12:19 - 2017-03-28 07:35 - 00315904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
2017-04-12 12:19 - 2017-03-28 07:35 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-04-12 12:19 - 2017-03-28 07:35 - 00184320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserMgrProxy.dll
2017-04-12 12:19 - 2017-03-28 07:35 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2017-04-12 12:19 - 2017-03-28 07:35 - 00142336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.WiFi.dll
2017-04-12 12:19 - 2017-03-28 07:35 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentActivation.dll
2017-04-12 12:19 - 2017-03-28 07:35 - 00113152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Lights.dll
2017-04-12 12:19 - 2017-03-28 07:35 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-04-12 12:19 - 2017-03-28 07:34 - 00299520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccountApis.dll
2017-04-12 12:19 - 2017-03-28 07:34 - 00237568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncSettings.dll
2017-04-12 12:19 - 2017-03-28 07:34 - 00117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthBroker.dll
2017-04-12 12:19 - 2017-03-28 07:34 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Core.dll
2017-04-12 12:19 - 2017-03-28 07:33 - 00670208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.PointOfService.dll
2017-04-12 12:19 - 2017-03-28 07:33 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Import.dll
2017-04-12 12:19 - 2017-03-28 07:33 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2017-04-12 12:19 - 2017-03-28 07:33 - 00483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.AllJoyn.dll
2017-04-12 12:19 - 2017-03-28 07:33 - 00436736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ipsmsnap.dll
2017-04-12 12:19 - 2017-03-28 07:33 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-04-12 12:19 - 2017-03-28 07:33 - 00265728 _____ C:\Windows\SysWOW64\Windows.Perception.Stub.dll
2017-04-12 12:19 - 2017-03-28 07:32 - 01243136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.FaceAnalysis.dll
2017-04-12 12:19 - 2017-03-28 07:32 - 00562176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SmartCards.dll
2017-04-12 12:19 - 2017-03-28 07:32 - 00426496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Wallet.dll
2017-04-12 12:19 - 2017-03-28 07:32 - 00386048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.WiFiDirect.dll
2017-04-12 12:19 - 2017-03-28 07:32 - 00332288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Bluetooth.dll
2017-04-12 12:19 - 2017-03-28 07:32 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2017-04-12 12:19 - 2017-03-28 07:32 - 00306176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2017-04-12 12:19 - 2017-03-28 07:32 - 00298496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2017-04-12 12:19 - 2017-03-28 07:32 - 00284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2017-04-12 12:19 - 2017-03-28 07:32 - 00271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceaccess.dll
2017-04-12 12:19 - 2017-03-28 07:32 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe
2017-04-12 12:19 - 2017-03-28 07:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WwaApi.dll
2017-04-12 12:19 - 2017-03-28 07:32 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vaultcli.dll
2017-04-12 12:19 - 2017-03-28 07:32 - 00202752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2017-04-12 12:19 - 2017-03-28 07:32 - 00185856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-04-12 12:19 - 2017-03-28 07:32 - 00175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Scanners.dll
2017-04-12 12:19 - 2017-03-28 07:32 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2017-04-12 12:19 - 2017-03-28 07:31 - 00711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-04-12 12:19 - 2017-03-28 07:31 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll
2017-04-12 12:19 - 2017-03-28 07:31 - 00431616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll
2017-04-12 12:19 - 2017-03-28 07:31 - 00390656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll
2017-04-12 12:19 - 2017-03-28 07:31 - 00236544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-04-12 12:19 - 2017-03-28 07:30 - 00846336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebcamUi.dll
2017-04-12 12:19 - 2017-03-28 07:30 - 00819200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppContracts.dll
2017-04-12 12:19 - 2017-03-28 07:30 - 00816640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NaturalLanguage6.dll
2017-04-12 12:19 - 2017-03-28 07:30 - 00787968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2017-04-12 12:19 - 2017-03-28 07:30 - 00340480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-04-12 12:19 - 2017-03-28 07:30 - 00262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Picker.dll
2017-04-12 12:19 - 2017-03-28 07:30 - 00075264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll
2017-04-12 12:19 - 2017-03-28 07:29 - 00747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Ocr.dll
2017-04-12 12:19 - 2017-03-28 07:29 - 00529920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2017-04-12 12:19 - 2017-03-28 07:29 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Usb.dll
2017-04-12 12:19 - 2017-03-28 07:29 - 00284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.dll
2017-04-12 12:19 - 2017-03-28 07:29 - 00238080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AboveLockAppHost.dll
2017-04-12 12:19 - 2017-03-28 07:28 - 00755712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-04-12 12:19 - 2017-03-28 07:28 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WpcWebFilter.dll
2017-04-12 12:19 - 2017-03-28 07:28 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2017-04-12 12:19 - 2017-03-28 07:28 - 00500224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.dll
2017-04-12 12:19 - 2017-03-28 07:27 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CryptoWinRT.dll
2017-04-12 12:19 - 2017-03-28 07:26 - 01534464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.3D.dll
2017-04-12 12:19 - 2017-03-28 07:26 - 00468992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.InkControls.dll
2017-04-12 12:19 - 2017-03-28 07:26 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2017-04-12 12:19 - 2017-03-28 07:25 - 18364928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2017-04-12 12:19 - 2017-03-28 07:25 - 02333184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2017-04-12 12:19 - 2017-03-28 07:25 - 01196544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscui.cpl
2017-04-12 12:19 - 2017-03-28 07:25 - 00653312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.AccountsControl.dll
2017-04-12 12:19 - 2017-03-28 07:24 - 19416576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-04-12 12:19 - 2017-03-28 07:24 - 06474752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspaint.exe
2017-04-12 12:19 - 2017-03-28 07:24 - 04614656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2017-04-12 12:19 - 2017-03-28 07:24 - 00901120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2017-04-12 12:19 - 2017-03-28 07:24 - 00675840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2017-04-12 12:19 - 2017-03-28 07:23 - 03733504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2017-04-12 12:19 - 2017-03-28 07:23 - 00886272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll
2017-04-12 12:19 - 2017-03-28 07:23 - 00691712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-04-12 12:19 - 2017-03-28 07:23 - 00589312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
2017-04-12 12:19 - 2017-03-28 07:23 - 00395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmenrollengine.dll
2017-04-12 12:19 - 2017-03-28 07:22 - 00516096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll
2017-04-12 12:19 - 2017-03-28 07:22 - 00355328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RTMediaFrame.dll
2017-04-12 12:19 - 2017-03-28 07:22 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\enrollmentapi.dll
2017-04-12 12:19 - 2017-03-28 07:21 - 01077760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Editing.dll
2017-04-12 12:19 - 2017-03-28 07:20 - 03307008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2017-04-12 12:19 - 2017-03-28 07:20 - 00795648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MiracastReceiver.dll
2017-04-12 12:19 - 2017-03-28 07:20 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmjpegdec.dll
2017-04-12 12:19 - 2017-03-28 07:19 - 00746496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcprx.dll
2017-04-12 12:19 - 2017-03-28 07:19 - 00713216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
2017-04-12 12:19 - 2017-03-28 07:19 - 00343040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToDevice.dll
2017-04-12 12:19 - 2017-03-28 07:19 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dlnashext.dll
2017-04-12 12:19 - 2017-03-28 07:19 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dialclient.dll
2017-04-12 12:19 - 2017-03-28 07:18 - 12181504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-04-12 12:19 - 2017-03-28 07:18 - 01255936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
2017-04-12 12:19 - 2017-03-28 07:17 - 06109696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2017-04-12 12:19 - 2017-03-28 07:17 - 00895488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2017-04-12 12:19 - 2017-03-28 07:17 - 00220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToReceiver.dll
2017-04-12 12:19 - 2017-03-28 07:17 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2017-04-12 12:19 - 2017-03-28 07:16 - 03198464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
2017-04-12 12:19 - 2017-03-28 07:16 - 01221120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Audio.dll
2017-04-12 12:19 - 2017-03-28 07:16 - 00134144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ErrorDetails.dll
2017-04-12 12:19 - 2017-03-28 07:15 - 01247232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2017-04-12 12:19 - 2017-03-28 07:14 - 07468544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2017-04-12 12:19 - 2017-03-28 07:14 - 03520512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xpsrchvw.exe
2017-04-12 12:19 - 2017-03-28 07:14 - 00641024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCRecvSrc.dll
2017-04-12 12:19 - 2017-03-28 07:14 - 00400384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2017-04-12 12:19 - 2017-03-28 07:14 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Geolocation.dll
2017-04-12 12:19 - 2017-03-28 07:14 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Devices.dll
2017-04-12 12:19 - 2017-03-28 07:13 - 06045184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2017-04-12 12:19 - 2017-03-28 07:13 - 02138112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll
2017-04-12 12:19 - 2017-03-28 07:13 - 01656320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Perception.dll
2017-04-12 12:19 - 2017-03-28 07:13 - 01232384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Maps.dll
2017-04-12 12:19 - 2017-03-28 07:13 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2017-04-12 12:19 - 2017-03-28 07:13 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2017-04-12 12:19 - 2017-03-28 07:12 - 02682880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netshell.dll
2017-04-12 12:19 - 2017-03-28 07:12 - 02026496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-04-12 12:19 - 2017-03-28 07:12 - 01509376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-04-12 12:19 - 2017-03-28 07:12 - 01013248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll
2017-04-12 12:19 - 2017-03-28 07:12 - 01004544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll
2017-04-12 12:19 - 2017-03-28 07:12 - 00862208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2017-04-12 12:19 - 2017-03-28 07:12 - 00827904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2017-04-12 12:19 - 2017-03-28 07:12 - 00691200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2017-04-12 12:19 - 2017-03-28 07:12 - 00654336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll
2017-04-12 12:19 - 2017-03-28 07:12 - 00620544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2017-04-12 12:19 - 2017-03-28 07:12 - 00598528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.dll
2017-04-12 12:19 - 2017-03-28 07:12 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll
2017-04-12 12:19 - 2017-03-28 07:12 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2017-04-12 12:19 - 2017-03-28 07:12 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Midi.dll
2017-04-12 12:19 - 2017-03-28 07:11 - 02994176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2017-04-12 12:19 - 2017-03-28 07:11 - 02646528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll
2017-04-12 12:19 - 2017-03-28 07:11 - 01600000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-04-12 12:19 - 2017-03-28 07:11 - 01576448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2017-04-12 12:19 - 2017-03-28 07:11 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Phone.dll
2017-04-12 12:19 - 2017-03-28 07:11 - 00751104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2017-04-12 12:19 - 2017-03-28 07:10 - 02483200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-04-12 12:19 - 2017-03-28 07:09 - 03106304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2017-04-12 12:19 - 2017-03-28 07:08 - 01564160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2017-04-12 12:19 - 2017-03-28 07:08 - 00783360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2017-04-12 12:19 - 2017-03-28 07:08 - 00299008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RADCUI.dll
2017-04-12 12:19 - 2017-03-28 06:48 - 00483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2017-04-12 12:19 - 2017-03-16 06:38 - 00034088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CompPkgSup.dll
2017-04-12 12:13 - 2017-03-28 08:12 - 00328008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll
2017-04-12 12:13 - 2017-03-28 08:11 - 01738560 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2017-04-12 12:13 - 2017-03-28 08:10 - 01157008 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2017-04-12 12:13 - 2017-03-28 08:05 - 08168512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2017-04-12 12:13 - 2017-03-28 07:59 - 02533728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-04-12 12:13 - 2017-03-28 07:38 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2017-04-12 12:13 - 2017-03-28 07:37 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthManagerProxy.dll
2017-04-12 12:13 - 2017-03-28 07:37 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll
2017-04-12 12:13 - 2017-03-28 07:36 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2017-04-12 12:13 - 2017-03-28 07:36 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Diagnostics.dll
2017-04-12 12:13 - 2017-03-28 07:36 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-04-12 12:13 - 2017-03-28 07:35 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2017-04-12 12:13 - 2017-03-28 07:35 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2017-04-12 12:13 - 2017-03-28 07:34 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
2017-04-12 12:13 - 2017-03-28 07:34 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthTokenBrokerExt.dll
2017-04-12 12:13 - 2017-03-28 07:33 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.XboxLive.Storage.dll
2017-04-12 12:13 - 2017-03-28 07:33 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.dll
2017-04-12 12:13 - 2017-03-28 07:33 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\WinRtTracing.dll
2017-04-12 12:13 - 2017-03-28 07:33 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Core.dll
2017-04-12 12:13 - 2017-03-28 07:33 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryClient.dll
2017-04-12 12:13 - 2017-03-28 07:33 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.Ngc.dll
2017-04-12 12:13 - 2017-03-28 07:33 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.UserDeviceAssociation.dll
2017-04-12 12:13 - 2017-03-28 07:31 - 00547840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.Input.dll
2017-04-12 12:13 - 2017-03-28 07:31 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BlockedShutdown.dll
2017-04-12 12:13 - 2017-03-28 07:31 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2017-04-12 12:13 - 2017-03-28 07:30 - 00748544 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2017-04-12 12:13 - 2017-03-28 07:29 - 00293888 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2017-04-12 12:13 - 2017-03-28 07:29 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2017-04-12 12:13 - 2017-03-28 07:29 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll
2017-04-12 12:13 - 2017-03-28 07:29 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-04-12 12:13 - 2017-03-28 07:28 - 00561664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Wallet.dll
2017-04-12 12:13 - 2017-03-28 07:28 - 00551936 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2017-04-12 12:13 - 2017-03-28 07:28 - 00358912 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.dll
2017-04-12 12:13 - 2017-03-28 07:27 - 01388544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Cred.dll
2017-04-12 12:13 - 2017-03-28 07:27 - 01060352 _____ (Microsoft Corporation) C:\Windows\system32\AppContracts.dll
2017-04-12 12:13 - 2017-03-28 07:27 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\WwaApi.dll
2017-04-12 12:13 - 2017-03-28 07:27 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2017-04-12 12:13 - 2017-03-28 07:26 - 01145344 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll
2017-04-12 12:13 - 2017-03-28 07:26 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.InkControls.dll
2017-04-12 12:13 - 2017-03-28 07:26 - 00549376 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2017-04-12 12:13 - 2017-03-28 07:25 - 00963584 _____ (Microsoft Corporation) C:\Windows\system32\WebcamUi.dll
2017-04-12 12:13 - 2017-03-28 07:25 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2017-04-12 12:13 - 2017-03-28 07:23 - 09130496 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2017-04-12 12:13 - 2017-03-28 07:23 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2017-04-12 12:13 - 2017-03-28 07:16 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\vss_ps.dll
2017-04-12 12:13 - 2017-03-28 07:14 - 01643008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2017-04-12 12:13 - 2017-03-28 07:14 - 01080320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Ocr.dll
2017-04-12 12:13 - 2017-03-28 07:14 - 00869888 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-04-12 12:13 - 2017-03-28 07:13 - 04596224 _____ (Microsoft Corporation) C:\Windows\system32\xpsrchvw.exe
2017-04-12 12:13 - 2017-03-28 07:13 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2017-04-12 12:13 - 2017-03-28 07:11 - 02914816 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2017-04-12 12:13 - 2017-03-28 07:11 - 01981440 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2017-04-12 12:13 - 2017-03-28 07:10 - 02424320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Perception.dll
2017-04-12 12:13 - 2017-03-28 07:10 - 02316288 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-04-12 12:13 - 2017-03-28 07:10 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Maps.dll
2017-04-12 12:13 - 2017-03-28 07:10 - 01266176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
2017-04-12 12:13 - 2017-03-28 07:10 - 00774656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.dll
2017-04-12 12:13 - 2017-03-28 07:10 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2017-04-12 12:13 - 2017-03-28 07:09 - 01513472 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2017-04-12 12:13 - 2017-03-28 07:09 - 01369088 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Phone.dll
2017-04-12 12:13 - 2017-03-28 07:09 - 01328640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2017-04-12 12:13 - 2017-03-28 07:08 - 03612672 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2017-04-12 12:13 - 2017-03-28 07:07 - 00908800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2017-04-12 12:12 - 2017-03-28 08:35 - 00379232 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-04-12 12:12 - 2017-03-28 08:32 - 00198856 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2017-04-12 12:12 - 2017-03-28 08:29 - 02213248 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-04-12 12:12 - 2017-03-28 08:28 - 07786336 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-04-12 12:12 - 2017-03-28 08:28 - 00773720 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2017-04-12 12:12 - 2017-03-28 08:26 - 00218520 _____ (Microsoft Corporation) C:\Windows\system32\LsaIso.exe
2017-04-12 12:12 - 2017-03-28 08:20 - 01181024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2017-04-12 12:12 - 2017-03-28 08:11 - 02187616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-04-12 12:12 - 2017-03-28 08:11 - 01860288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2017-04-12 12:12 - 2017-03-28 08:11 - 00402784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-04-12 12:12 - 2017-03-28 08:11 - 00360040 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2017-04-12 12:12 - 2017-03-28 08:10 - 07220184 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2017-04-12 12:12 - 2017-03-28 08:10 - 02758648 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-04-12 12:12 - 2017-03-28 08:10 - 01293152 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2017-04-12 12:12 - 2017-03-28 08:09 - 02446704 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2017-04-12 12:12 - 2017-03-28 08:09 - 00682816 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2017-04-12 12:12 - 2017-03-28 08:09 - 00624048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2017-04-12 12:12 - 2017-03-28 08:09 - 00097128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Credentials.UI.CredentialPicker.dll
2017-04-12 12:12 - 2017-03-28 08:06 - 00092512 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2017-04-12 12:12 - 2017-03-28 08:05 - 22221368 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-04-12 12:12 - 2017-03-28 08:05 - 04260576 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2017-04-12 12:12 - 2017-03-28 08:05 - 01988048 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2017-04-12 12:12 - 2017-03-28 08:05 - 01848584 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2017-04-12 12:12 - 2017-03-28 08:05 - 01702392 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2017-04-12 12:12 - 2017-03-28 08:05 - 01302136 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2017-04-12 12:12 - 2017-03-28 08:05 - 01072248 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2017-04-12 12:12 - 2017-03-28 08:04 - 01600632 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2017-04-12 12:12 - 2017-03-28 08:00 - 01569184 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2017-04-12 12:12 - 2017-03-28 08:00 - 00628552 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2017-04-12 12:12 - 2017-03-28 07:58 - 00387872 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
2017-04-12 12:12 - 2017-03-28 07:44 - 07216640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2017-04-12 12:12 - 2017-03-28 07:41 - 00415744 _____ (Microsoft Corporation) C:\Windows\system32\rdpshell.exe
2017-04-12 12:12 - 2017-03-28 07:41 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2017-04-12 12:12 - 2017-03-28 07:41 - 00299008 _____ (Microsoft Corporation) C:\Windows\system32\rdpinit.exe
2017-04-12 12:12 - 2017-03-28 07:37 - 22568960 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2017-04-12 12:12 - 2017-03-28 07:36 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\RdpRelayTransport.dll
2017-04-12 12:12 - 2017-03-28 07:36 - 00045056 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-04-12 12:12 - 2017-03-28 07:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2017-04-12 12:12 - 2017-03-28 07:35 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll
2017-04-12 12:12 - 2017-03-28 07:35 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\Family.Client.dll
2017-04-12 12:12 - 2017-03-28 07:35 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.SystemManagement.dll
2017-04-12 12:12 - 2017-03-28 07:35 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Printers.dll
2017-04-12 12:12 - 2017-03-28 07:34 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\Family.SyncEngine.dll
2017-04-12 12:12 - 2017-03-28 07:34 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_ClosedCaptioning.dll
2017-04-12 12:12 - 2017-03-28 07:34 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-04-12 12:12 - 2017-03-28 07:33 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFi.dll
2017-04-12 12:12 - 2017-03-28 07:32 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\FlightSettings.dll
2017-04-12 12:12 - 2017-03-28 07:32 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\OneBackupHandler.dll
2017-04-12 12:12 - 2017-03-28 07:32 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Radios.dll
2017-04-12 12:12 - 2017-03-28 07:31 - 00418304 _____ C:\Windows\system32\Windows.Perception.Stub.dll
2017-04-12 12:12 - 2017-03-28 07:31 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2017-04-12 12:12 - 2017-03-28 07:31 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\NetworkBindingEngineMigPlugin.dll
2017-04-12 12:12 - 2017-03-28 07:31 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\DeveloperOptionsSettingsHandlers.dll
2017-04-12 12:12 - 2017-03-28 07:31 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-04-12 12:12 - 2017-03-28 07:31 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-04-12 12:12 - 2017-03-28 07:31 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Lights.dll
2017-04-12 12:12 - 2017-03-28 07:30 - 00568320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.LowLevel.dll
2017-04-12 12:12 - 2017-03-28 07:30 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFiDirect.dll
2017-04-12 12:12 - 2017-03-28 07:30 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\TokenBrokerUI.dll
2017-04-12 12:12 - 2017-03-28 07:29 - 00852480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Import.dll
2017-04-12 12:12 - 2017-03-28 07:29 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll
2017-04-12 12:12 - 2017-03-28 07:29 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2017-04-12 12:12 - 2017-03-28 07:29 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-04-12 12:12 - 2017-03-28 07:29 - 00311296 _____ (Microsoft Corporation) C:\Windows\system32\SyncSettings.dll
2017-04-12 12:12 - 2017-03-28 07:29 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2017-04-12 12:12 - 2017-03-28 07:29 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\vaultcli.dll
2017-04-12 12:12 - 2017-03-28 07:29 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2017-04-12 12:12 - 2017-03-28 07:29 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll
2017-04-12 12:12 - 2017-03-28 07:29 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-04-12 12:12 - 2017-03-28 07:28 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2017-04-12 12:12 - 2017-03-28 07:28 - 00431616 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2017-04-12 12:12 - 2017-03-28 07:28 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2017-04-12 12:12 - 2017-03-28 07:28 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\indexeddbserver.dll
2017-04-12 12:12 - 2017-03-28 07:28 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-04-12 12:12 - 2017-03-28 07:27 - 00671744 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll
2017-04-12 12:12 - 2017-03-28 07:27 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2017-04-12 12:12 - 2017-03-28 07:27 - 00472064 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll
2017-04-12 12:12 - 2017-03-28 07:27 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\AccountsRt.dll
2017-04-12 12:12 - 2017-03-28 07:27 - 00425984 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
2017-04-12 12:12 - 2017-03-28 07:26 - 00437248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll
2017-04-12 12:12 - 2017-03-28 07:26 - 00284160 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
2017-04-12 12:12 - 2017-03-28 07:25 - 00966144 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2017-04-12 12:12 - 2017-03-28 07:25 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-04-12 12:12 - 2017-03-28 07:24 - 06288384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2017-04-12 12:12 - 2017-03-28 07:24 - 01220096 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2017-04-12 12:12 - 2017-03-28 07:23 - 00932864 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-04-12 12:12 - 2017-03-28 07:22 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.DeviceEncryptionHandlers.dll
2017-04-12 12:12 - 2017-03-28 07:21 - 23681536 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-04-12 12:12 - 2017-03-28 07:21 - 03778048 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2017-04-12 12:12 - 2017-03-28 07:21 - 01403392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Editing.dll
2017-04-12 12:12 - 2017-03-28 07:21 - 00458752 _____ (Microsoft Corporation) C:\Windows\system32\RTMediaFrame.dll
2017-04-12 12:12 - 2017-03-28 07:20 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\MiracastReceiver.dll
2017-04-12 12:12 - 2017-03-28 07:20 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll
2017-04-12 12:12 - 2017-03-28 07:19 - 07655424 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2017-04-12 12:12 - 2017-03-28 07:19 - 00864256 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2017-04-12 12:12 - 2017-03-28 07:19 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll
2017-04-12 12:12 - 2017-03-28 07:19 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\flvprophandler.dll
2017-04-12 12:12 - 2017-03-28 07:18 - 01908224 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2017-04-12 12:12 - 2017-03-28 07:18 - 01078784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2017-04-12 12:12 - 2017-03-28 07:18 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\wpninprc.dll
2017-04-12 12:12 - 2017-03-28 07:17 - 13087232 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-04-12 12:12 - 2017-03-28 07:17 - 04749312 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2017-04-12 12:12 - 2017-03-28 07:17 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\PlayToReceiver.dll
2017-04-12 12:12 - 2017-03-28 07:16 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Audio.dll
2017-04-12 12:12 - 2017-03-28 07:15 - 02390016 _____ (Microsoft Corporation) C:\Windows\system32\smartscreen.exe
2017-04-12 12:12 - 2017-03-28 07:15 - 00981504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2017-04-12 12:12 - 2017-03-28 07:15 - 00945664 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll
2017-04-12 12:12 - 2017-03-28 07:15 - 00937984 _____ (Microsoft Corporation) C:\Windows\system32\MCRecvSrc.dll
2017-04-12 12:12 - 2017-03-28 07:15 - 00539136 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2017-04-12 12:12 - 2017-03-28 07:15 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\Geolocation.dll
2017-04-12 12:12 - 2017-03-28 07:15 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
2017-04-12 12:12 - 2017-03-28 07:15 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Devices.dll
2017-04-12 12:12 - 2017-03-28 07:14 - 08126976 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2017-04-12 12:12 - 2017-03-28 07:14 - 00975872 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-04-12 12:12 - 2017-03-28 07:14 - 00947712 _____ (Microsoft Corporation) C:\Windows\system32\MSVP9DEC.dll
2017-04-12 12:12 - 2017-03-28 07:14 - 00913920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2017-04-12 12:12 - 2017-03-28 07:14 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2017-04-12 12:12 - 2017-03-28 07:14 - 00779776 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2017-04-12 12:12 - 2017-03-28 07:14 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2017-04-12 12:12 - 2017-03-28 07:13 - 04474368 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-04-12 12:12 - 2017-03-28 07:13 - 02095616 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-04-12 12:12 - 2017-03-28 07:13 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2017-04-12 12:12 - 2017-03-28 07:13 - 01040896 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
2017-04-12 12:12 - 2017-03-28 07:13 - 00759296 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-04-12 12:12 - 2017-03-28 07:13 - 00650752 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2017-04-12 12:12 - 2017-03-28 07:13 - 00611328 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.dll
2017-04-12 12:12 - 2017-03-28 07:13 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Midi.dll
2017-04-12 12:12 - 2017-03-28 07:12 - 05611008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2017-04-12 12:12 - 2017-03-28 07:12 - 02208768 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.3D.dll
2017-04-12 12:12 - 2017-03-28 07:12 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2017-04-12 12:12 - 2017-03-28 07:11 - 01275392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2017-04-12 12:12 - 2017-03-28 07:11 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2017-04-12 12:12 - 2017-03-28 07:10 - 08076288 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2017-04-12 12:12 - 2017-03-28 07:10 - 01783296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-04-12 12:12 - 2017-03-28 07:10 - 01637888 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-04-12 12:12 - 2017-03-28 07:10 - 01586176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2017-04-12 12:12 - 2017-03-28 07:10 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2017-04-12 12:12 - 2017-03-28 07:10 - 00875520 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2017-04-12 12:12 - 2017-03-28 07:09 - 04149248 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2017-04-12 12:12 - 2017-03-28 07:09 - 01131008 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-04-12 12:12 - 2017-03-28 07:09 - 01064448 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2017-04-12 12:12 - 2017-03-28 07:08 - 02895872 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-04-12 12:12 - 2017-03-28 07:08 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll
2017-04-12 12:12 - 2017-03-28 07:07 - 00701952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2017-04-12 12:12 - 2017-03-28 07:07 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\FontProvider.dll
2017-04-12 12:12 - 2017-03-28 07:06 - 01121280 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2017-04-12 12:12 - 2017-03-28 07:06 - 00999424 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2017-04-12 12:12 - 2017-03-28 07:06 - 00924672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2017-04-12 12:12 - 2017-03-28 07:05 - 01633792 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2017-04-12 12:12 - 2017-03-28 07:04 - 00119808 ____R (Microsoft Corporation) C:\Windows\system32\SecureAssessmentHandlers.dll
2017-04-12 12:11 - 2017-04-12 12:11 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignd5148d416369d8bc
2017-04-12 12:11 - 2017-04-12 12:11 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign21774411c58fadf2
2017-04-12 12:11 - 2017-04-12 12:11 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign038fe6ace876c063
2017-04-12 12:11 - 2017-03-28 08:36 - 01617760 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-04-12 12:11 - 2017-03-28 08:36 - 01294688 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-04-12 12:11 - 2017-03-28 08:36 - 00565088 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-04-12 12:11 - 2017-03-28 08:36 - 00343904 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-04-12 12:11 - 2017-03-28 08:36 - 00142176 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2017-04-12 12:11 - 2017-03-28 08:26 - 00754528 _____ (Microsoft Corporation) C:\Windows\system32\AppVOrchestration.dll
2017-04-12 12:11 - 2017-03-28 08:26 - 00603488 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2017-04-12 12:11 - 2017-03-28 08:26 - 00573280 _____ (Microsoft Corporation) C:\Windows\system32\AppVCatalog.dll
2017-04-12 12:11 - 2017-03-28 08:22 - 02681200 _____ C:\Windows\system32\CoreUIComponents.dll
2017-04-12 12:11 - 2017-03-28 08:20 - 00764392 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2017-04-12 12:11 - 2017-03-28 08:10 - 00178528 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostUser.dll
2017-04-12 12:11 - 2017-03-28 08:10 - 00146776 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostCommon.dll
2017-04-12 12:11 - 2017-03-28 08:08 - 01267504 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2017-04-12 12:11 - 2017-03-28 08:08 - 01100128 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2017-04-12 12:11 - 2017-03-28 08:08 - 00989024 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2017-04-12 12:11 - 2017-03-28 08:04 - 01276760 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-04-12 12:11 - 2017-03-28 08:04 - 00277344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2017-04-12 12:11 - 2017-03-28 08:04 - 00241504 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2017-04-12 12:11 - 2017-03-28 08:04 - 00160088 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostBroker.dll
2017-04-12 12:11 - 2017-03-28 07:58 - 00372440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.MediaControl.dll
2017-04-12 12:11 - 2017-03-28 07:37 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicRender.sys
2017-04-12 12:11 - 2017-03-28 07:37 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\DdcWnsListener.dll
2017-04-12 12:11 - 2017-03-28 07:36 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicDisplay.sys
2017-04-12 12:11 - 2017-03-28 07:34 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
2017-04-12 12:11 - 2017-03-28 07:33 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\DeviceDirectoryClient.dll
2017-04-12 12:11 - 2017-03-28 07:31 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.Phone.dll
2017-04-12 12:11 - 2017-03-28 07:31 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\CloudDomainJoinDataModelServer.dll
2017-04-12 12:11 - 2017-03-28 07:31 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SerialCommunication.dll
2017-04-12 12:11 - 2017-03-28 07:30 - 00692224 _____ (Microsoft Corporation) C:\Windows\system32\CellularAPI.dll
2017-04-12 12:11 - 2017-03-28 07:30 - 00651264 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.AllJoyn.dll
2017-04-12 12:11 - 2017-03-28 07:30 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\UserMgrProxy.dll
2017-04-12 12:11 - 2017-03-28 07:30 - 00239104 _____ (Microsoft Corporation) C:\Windows\system32\dafpos.dll
2017-04-12 12:11 - 2017-03-28 07:29 - 00912384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.dll
2017-04-12 12:11 - 2017-03-28 07:29 - 00379904 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2017-04-12 12:11 - 2017-03-28 07:29 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2017-04-12 12:11 - 2017-03-28 07:28 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Picker.dll
2017-04-12 12:11 - 2017-03-28 07:28 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2017-04-12 12:11 - 2017-03-28 07:27 - 00949248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.PointOfService.dll
2017-04-12 12:11 - 2017-03-28 07:26 - 00329728 _____ (Microsoft Corporation) C:\Windows\system32\deviceaccess.dll
2017-04-12 12:11 - 2017-03-28 07:25 - 01010176 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2017-04-12 12:11 - 2017-03-28 07:25 - 00896512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.AccountsControl.dll
2017-04-12 12:11 - 2017-03-28 07:24 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2017-04-12 12:11 - 2017-03-28 07:21 - 01589760 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2017-04-12 12:11 - 2017-03-28 07:21 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\CastLaunch.dll
2017-04-12 12:11 - 2017-03-28 07:19 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dlnashext.dll
2017-04-12 12:11 - 2017-03-28 07:17 - 05114368 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2017-04-12 12:11 - 2017-03-28 07:16 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetails.dll
2017-04-12 12:11 - 2017-03-28 07:14 - 01692160 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2017-04-12 12:11 - 2017-03-28 07:12 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\CryptoWinRT.dll
2017-04-12 12:11 - 2017-03-28 07:09 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
2017-04-12 12:11 - 2017-03-28 07:08 - 03542016 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2017-04-12 12:11 - 2017-03-18 18:50 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2017-04-12 12:11 - 2017-03-18 18:35 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2017-04-12 12:11 - 2017-03-16 06:47 - 00038768 _____ (Microsoft Corporation) C:\Windows\system32\CompPkgSup.dll
2017-04-12 00:40 - 2017-04-12 00:40 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignce67c02e05d8f8fa
2017-04-12 00:40 - 2017-04-12 00:40 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignc5d4c58993dc9e50
2017-04-12 00:40 - 2017-04-12 00:40 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignaae66e3a65411276
2017-04-11 23:33 - 2017-04-11 23:33 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignca95bd0590beaab9
2017-04-11 23:33 - 2017-04-11 23:33 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign5f99ccec9ce9bbe4
2017-04-11 23:33 - 2017-04-11 23:33 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign48e4367c0f4f5220
2017-04-11 23:21 - 2017-04-11 23:21 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigned6085cc27224601
2017-04-11 23:21 - 2017-04-11 23:21 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign8e1dcfeae947b6ed
2017-04-11 23:21 - 2017-04-11 23:21 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign59e9e65e556651db
2017-04-11 23:00 - 2017-04-11 23:00 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign99d2baea1dbc04ee
2017-04-11 23:00 - 2017-04-11 23:00 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign8086ac97e47aef84
2017-04-11 23:00 - 2017-04-11 23:00 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign44bcbaaa1dd6800b
2017-04-11 23:00 - 2017-04-11 23:00 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign3c3b6b6fc9abf98b
2017-04-11 18:08 - 2017-04-11 18:08 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigne9d06ee901ecbaec
2017-04-11 18:08 - 2017-04-11 18:08 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign8f53287f553302e7
2017-04-11 18:08 - 2017-04-11 18:08 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign8c5566e362369648
2017-04-11 18:08 - 2017-04-11 18:08 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign78930078a2890118
2017-04-11 18:08 - 2017-04-11 18:08 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign4c75d2355a5300cf
2017-04-11 18:08 - 2017-04-11 18:08 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign02e0f3c4fc204746
2017-04-11 18:00 - 2017-04-11 18:00 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignfe305e0be142ba60
2017-04-11 18:00 - 2017-04-11 18:00 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignc06f04a1d118e4d5
2017-04-11 18:00 - 2017-04-11 18:00 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigna34e6105d1f4ec49
2017-04-11 18:00 - 2017-04-11 18:00 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign7431c2e3543c483e
2017-04-11 18:00 - 2017-04-11 18:00 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign633c878d88a8466f
2017-04-11 18:00 - 2017-04-11 18:00 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign5e66342ab096c928
2017-04-11 17:34 - 2017-04-11 17:34 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignb2ee9b63530819a9
2017-04-11 17:34 - 2017-04-11 17:34 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign89857468fd8bf2cb
2017-04-11 17:34 - 2017-04-11 17:34 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign61e6819fb4ceb8d3
2017-04-11 17:34 - 2017-04-11 17:34 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign36812f578c36f79c
2017-04-11 17:34 - 2017-04-11 17:34 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign32df956943d528b1
2017-04-11 17:34 - 2017-04-11 17:34 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign214cc02110d8c57f
2017-04-11 16:32 - 2017-04-11 16:32 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignc573afca88a22d08
2017-04-11 16:32 - 2017-04-11 16:32 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign59e347723a465877
2017-04-11 16:31 - 2017-04-11 16:31 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign62542444bb94d1c1
2017-04-11 16:31 - 2017-04-11 16:31 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign4ee197009b91bd7f
2017-04-11 16:27 - 2017-04-11 16:27 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign6767dc8823234231
2017-04-11 16:26 - 2017-04-11 16:26 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign8432b70a7e04f664
2017-04-11 16:26 - 2017-04-11 16:26 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign5f70690a5d0df43f
2017-04-11 16:26 - 2017-04-11 16:26 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign26d22f35c4dab775
2017-04-11 16:24 - 2017-04-11 16:24 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign8fce5d26f7cb19c3
2017-04-11 16:24 - 2017-04-11 16:24 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign72263ae7d2709e89
2017-04-11 16:24 - 2017-04-11 16:24 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign6582e3f6526eac8f
2017-04-11 12:48 - 2017-04-11 12:48 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignc53ce6ff83202e4a
2017-04-11 12:48 - 2017-04-11 12:48 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign86d868af3469143b
2017-04-11 12:48 - 2017-04-11 12:48 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign1fc78c5172c34500
2017-04-11 12:21 - 2017-04-11 12:21 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign85fdaae24042c74f
2017-04-11 12:21 - 2017-04-11 12:21 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign30977dd9c6b45c59
2017-04-11 12:21 - 2017-04-11 12:21 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign091e9e5a94eb03f2
2017-04-11 12:12 - 2017-04-11 12:12 - 00000000 ____H C:\Users\winki\Documents\Default.rdp
2017-04-10 23:14 - 2017-04-10 23:14 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign601473433700ea7a
2017-04-10 23:14 - 2017-04-10 23:14 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign5ab4085dfd82343f
2017-04-10 23:14 - 2017-04-10 23:14 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign0348bff30c1e914d
2017-04-10 23:13 - 2017-04-10 23:13 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignb8fef8f9b8d08b70
2017-04-10 23:13 - 2017-04-10 23:13 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignac70977d7658919c
2017-04-10 23:13 - 2017-04-10 23:13 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign95be6ca7ab93cab3
2017-04-10 23:13 - 2017-04-10 23:13 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign4e4283f4ccb09a49
2017-04-10 23:13 - 2017-04-10 23:13 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign27f65bfe30f06175
2017-04-10 23:13 - 2017-04-10 23:13 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign0d18aaca264bd2dc
2017-04-10 23:12 - 2017-04-10 23:12 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigne6db688f9d6c7191
2017-04-10 23:12 - 2017-04-10 23:12 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignd539f1905d87a9a4
2017-04-10 23:12 - 2017-04-10 23:12 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigna424a3e91e8a5092
2017-04-10 23:12 - 2017-04-10 23:12 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign7475355a413acc7f
2017-04-10 23:12 - 2017-04-10 23:12 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign709c47ca0632ee19
2017-04-10 23:12 - 2017-04-10 23:12 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign65c88333f6e1cb6f
2017-04-10 23:11 - 2017-04-10 23:11 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignf1d3b765ee5f2965
2017-04-10 23:11 - 2017-04-10 23:11 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign9884677c8b73ae81
2017-04-10 23:11 - 2017-04-10 23:11 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign974d0b9671e34fae
2017-04-10 23:11 - 2017-04-10 23:11 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign7598f4e2fba2e7aa
2017-04-10 23:11 - 2017-04-10 23:11 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign2f22941ccd9adcf4
2017-04-10 23:11 - 2017-04-10 23:11 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign005f912cca2d7fb0
2017-04-10 20:50 - 2017-04-10 20:50 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigncc2093d13a769a51
2017-04-10 20:50 - 2017-04-10 20:50 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign6fd7d9ce1e45082a
2017-04-10 20:50 - 2017-04-10 20:50 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign53a666f29b1a9205
2017-04-10 20:41 - 2017-04-10 20:41 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigna71c865b24b4f743
2017-04-10 20:41 - 2017-04-10 20:41 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign8e981305f5f36630
2017-04-10 20:41 - 2017-04-10 20:41 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign862b3f28ef14a841
2017-04-10 20:21 - 2017-04-10 20:21 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign77264cbd6dcec0f1
2017-04-10 20:21 - 2017-04-10 20:21 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign72ad60c45e1c71f5
2017-04-10 20:21 - 2017-04-10 20:21 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign346891594fb4acd6
2017-04-10 19:43 - 2017-04-10 19:43 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign9d43d3c2b52a1065
2017-04-10 19:43 - 2017-04-10 19:43 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign96bb0b4634c6b28a
2017-04-10 19:43 - 2017-04-10 19:43 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign8e1479aa928d6bc4
2017-04-10 19:28 - 2017-04-10 19:28 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign2b2cce4ca5035053
2017-04-10 19:28 - 2017-04-10 19:28 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign18dbb661ebf1ffcc
2017-04-10 19:28 - 2017-04-10 19:28 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign189a9e1f7ac9a130
2017-04-10 19:16 - 2017-04-10 19:16 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignf6f61869500fd6be
2017-04-10 19:16 - 2017-04-10 19:16 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignc4eff9aa9e5a3122
2017-04-10 19:16 - 2017-04-10 19:16 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign56626161aa474db6
2017-04-10 18:27 - 2017-04-10 18:27 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignea3b750c79f50bcf
2017-04-10 18:27 - 2017-04-10 18:27 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsignc8ccb18d0741ed8e
2017-04-10 18:27 - 2017-04-10 18:27 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsigna05ec6582275afab
2017-04-10 18:27 - 2017-04-10 18:27 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign3e7b8d7a1a3ed963
2017-04-10 18:27 - 2017-04-10 18:27 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign1556abc446faa50a
2017-04-10 18:23 - 2017-04-10 18:23 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign333eefbc27bc6f74
2017-04-10 18:23 - 2017-04-10 18:23 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign30b30717ea8254fc
2017-04-10 18:23 - 2017-04-10 18:23 - 00000000 ____D C:\Users\winki\AppData\Local\Tempzxpsign24cbb8fe82d42669
2017-04-10 17:19 - 2017-04-10 17:25 - 00000000 ____D C:\Users\winki\AppData\Local\ZHP
2017-04-10 17:08 - 2017-04-10 17:30 - 00002100 _____ C:\Users\winki\Desktop\ZHPCleaner.txt
2017-04-10 17:04 - 2017-04-10 17:30 - 00000000 ____D C:\Users\winki\AppData\Roaming\ZHP
2017-04-10 17:04 - 2017-04-10 17:19 - 00000875 _____ C:\Users\winki\Desktop\ZHPCleaner.lnk
2017-04-10 17:04 - 2017-04-10 17:04 - 02748416 _____ C:\Users\winki\Downloads\ZHPCleaner.exe
2017-04-10 14:16 - 2017-04-10 14:16 - 00002132 _____ C:\Users\Public\Desktop\SSDlife Pro.lnk
2017-04-10 14:16 - 2017-04-10 14:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SSDlife
2017-04-10 14:16 - 2017-04-10 14:16 - 00000000 ____D C:\Program Files (x86)\BinarySense
2017-04-10 14:12 - 2017-04-10 14:12 - 00000000 ____D C:\ProgramData\Binarysense
2017-04-09 23:21 - 2017-04-09 23:21 - 00015600 _____ C:\Users\winki\Desktop\MemTest.zip
2017-04-09 21:06 - 2017-04-09 21:06 - 00000989 _____ C:\Users\winki\Desktop\Core Temp.lnk
2017-04-09 21:06 - 2017-04-09 21:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Core Temp
2017-04-09 21:06 - 2017-04-09 21:06 - 00000000 ____D C:\Program Files\Core Temp
2017-04-09 21:05 - 2017-04-09 21:06 - 01206104 _____ (ALCPU ) C:\Users\winki\Downloads\Core-Temp-setup.exe
2017-04-08 23:51 - 2017-04-08 23:51 - 00000000 ____D C:\Users\winki\AppData\LocalLow\Parabole
2017-04-08 23:51 - 2017-04-08 23:51 - 00000000 ____D C:\Users\winki\AppData\Local\GOG.com
2017-04-08 23:50 - 2017-04-08 23:50 - 00000827 _____ C:\Users\Public\Desktop\Kona.lnk
2017-04-08 23:50 - 2017-04-08 23:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kona [GOG.com]
2017-04-08 23:50 - 2017-04-08 23:50 - 00000000 ____D C:\ProgramData\GOG.com
2017-04-08 14:45 - 2017-04-08 14:45 - 00763520 _____ (ESET) C:\Users\winki\Downloads\ESETUninstaller.exe
2017-04-08 14:41 - 2017-04-01 05:27 - 00001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
2017-04-08 14:40 - 2017-04-08 14:40 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-04-08 14:40 - 2017-04-01 03:36 - 00136248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2017-04-08 14:40 - 2017-03-10 23:17 - 00536864 _____ C:\Windows\system32\vulkan-1.dll
2017-04-08 14:40 - 2017-03-10 23:17 - 00525600 _____ C:\Windows\SysWOW64\vulkan-1.dll
2017-04-08 14:40 - 2017-03-10 23:17 - 00254240 _____ C:\Windows\system32\vulkaninfo.exe
2017-04-08 14:40 - 2017-03-10 23:17 - 00233760 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2017-04-08 14:38 - 2017-04-02 18:12 - 00046008 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 40201152 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 35354048 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 35280320 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 11111392 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 11056272 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 10635192 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 09316648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 09014792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 08876272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 03790904 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 03246016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 01988032 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6438165.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 01591352 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6438165.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 01278528 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 01276128 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFThevc.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 01055800 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 00995920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 00993872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFThevc.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 00990144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 00960448 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 00911296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 00821184 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 00776048 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 00688968 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 00652856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 00618928 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 00612088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 00609728 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 00577544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 00499136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2017-04-08 14:38 - 2017-04-01 05:27 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2017-04-08 14:38 - 2017-04-01 05:27 - 00000669 _____ C:\Windows\system32\nv-vk64.json
2017-04-07 17:45 - 2017-04-07 17:51 - 00000000 ___SD C:\Users\winki\Amazon Drive
2017-04-07 17:40 - 2017-04-07 17:45 - 00000000 ____D C:\Users\winki\AppData\Roaming\Amazon Cloud Drive
2017-04-07 17:40 - 2017-04-07 17:40 - 00001214 _____ C:\Users\winki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon Drive.lnk
2017-04-07 17:40 - 2017-04-07 17:40 - 00001202 _____ C:\Users\winki\Desktop\Amazon Drive.lnk
2017-04-07 17:40 - 2017-04-07 17:40 - 00000000 ____D C:\Users\winki\AppData\Local\Amazon Drive
2017-04-07 17:36 - 2017-04-07 17:36 - 00875192 _____ (Amazon) C:\Users\winki\Downloads\AmazonDriveSetup.exe
2017-04-07 11:43 - 2017-04-08 14:38 - 00000000 ____D C:\Users\winki\AppData\LocalLow\Mozilla
2017-04-07 11:43 - 2017-04-07 12:13 - 00000000 ____D C:\Users\winki\AppData\Local\Mozilla
2017-04-07 11:43 - 2017-04-07 11:43 - 00001228 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-04-07 11:43 - 2017-04-07 11:43 - 00001216 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-04-07 11:43 - 2017-04-07 11:43 - 00000000 ____D C:\Users\winki\AppData\Roaming\Mozilla
2017-04-07 11:43 - 2017-04-07 11:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-04-07 11:43 - 2017-04-07 11:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-04-06 19:23 - 2017-04-16 22:20 - 00062818 _____ C:\Users\winki\Documents\CIV_LogFile.txt
2017-04-06 12:12 - 2017-04-06 12:12 - 1497480366 _____ C:\Windows\MEMORY.DMP
2017-04-06 12:12 - 2017-04-06 12:12 - 00000000 ____D C:\Windows\Minidump
2017-04-06 12:12 - 2017-04-06 12:12 - 00000000 _____ C:\Windows\Minidump\040617-5109-01.dmp
2017-04-05 16:49 - 2017-04-05 16:49 - 00000000 _____ C:\Windows\system32\Drivers\etc\lmhosts
2017-04-05 16:48 - 2017-04-06 12:12 - 00441409 _____ C:\Windows\system32\Drivers\vsconfig.xml
2017-04-05 16:48 - 2017-04-05 16:48 - 00032600 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2017-04-05 16:48 - 2017-04-05 16:48 - 00004022 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1491403712
2017-04-05 16:48 - 2017-04-05 16:48 - 00001088 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
2017-04-05 16:48 - 2017-04-05 16:48 - 00001088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-04-05 16:48 - 2017-04-05 16:48 - 00000778 _____ C:\Users\Public\Desktop\ZoneAlarm Security.lnk
2017-04-05 16:48 - 2017-04-05 16:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Check Point
2017-04-05 16:45 - 2017-04-05 16:48 - 00000000 ____D C:\Program Files (x86)\CheckPoint
2017-04-05 16:45 - 2017-04-05 16:45 - 00000000 ____D C:\ProgramData\CheckPoint
2017-04-05 16:43 - 2017-04-05 16:43 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2017-04-05 16:42 - 2017-04-05 16:42 - 01005048 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2017-04-05 16:42 - 2017-04-05 16:42 - 00556784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2017-04-05 16:42 - 2017-04-05 16:42 - 00399944 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-04-05 16:42 - 2017-04-05 16:42 - 00339696 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2017-04-05 16:42 - 2017-04-05 16:42 - 00164064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2017-04-05 16:42 - 2017-04-05 16:42 - 00127112 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-04-05 16:42 - 2017-04-05 16:42 - 00101152 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-04-05 16:42 - 2017-04-05 16:42 - 00075704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-04-05 16:42 - 2017-04-05 16:42 - 00038296 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-04-05 16:42 - 2017-04-05 16:42 - 00003994 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2017-04-05 16:42 - 2017-04-05 16:42 - 00001979 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2017-04-05 16:42 - 2017-04-05 16:42 - 00001967 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2017-04-05 16:42 - 2017-04-05 16:42 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2017-04-05 16:42 - 2017-04-05 16:42 - 00000000 ____D C:\Users\winki\AppData\Roaming\AVAST Software
2017-04-05 16:42 - 2017-04-05 16:41 - 00334088 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys
2017-04-05 16:42 - 2017-04-05 16:41 - 00307736 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys
2017-04-05 16:42 - 2017-04-05 16:41 - 00189768 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys
2017-04-05 16:42 - 2017-04-05 16:41 - 00048528 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys
2017-04-05 16:38 - 2017-04-05 16:48 - 00000000 ____D C:\Program Files\AVAST Software
2017-04-05 16:37 - 2017-04-05 18:10 - 00000000 ____D C:\ProgramData\AVAST Software
2017-04-05 14:37 - 2017-04-05 14:39 - 00000000 ____D C:\Users\winki\Downloads\Antivir
2017-04-02 17:38 - 2017-04-02 17:38 - 00000000 ____D C:\Users\winki\Documents\Vlastní šablony Office
2017-04-02 08:15 - 2017-04-02 08:15 - 00087904 _____ (Microsoft Corporation) C:\Windows\system32\UNPUXWorker.exe
2017-04-01 23:43 - 2017-04-08 01:29 - 00000000 ____D C:\Users\winki\AppData\Local\FalloutShelter
2017-04-01 23:39 - 2017-04-01 23:39 - 00000222 _____ C:\Users\winki\Desktop\Fallout Shelter.url
2017-04-01 17:31 - 2017-04-01 17:31 - 00000219 _____ C:\Users\winki\Desktop\Counter-Strike Global Offensive.url
2017-03-31 17:44 - 2017-03-31 17:44 - 00000000 ___HD C:\ProgramData\RWBYTE
2017-03-31 00:00 - 2017-03-31 00:00 - 00001073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe InDesign CC 2015.lnk
2017-03-30 19:29 - 2017-03-30 19:29 - 00001226 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2017-03-30 19:29 - 2017-03-30 19:29 - 00001214 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
2017-03-30 16:36 - 2017-03-30 16:36 - 00002658 _____ C:\Users\Public\Desktop\Skype.lnk
2017-03-30 16:36 - 2017-03-30 16:36 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-03-30 16:36 - 2017-03-30 16:36 - 00000000 ____D C:\Users\winki\Tracing
2017-03-30 16:36 - 2017-03-30 16:36 - 00000000 ____D C:\ProgramData\Skype
2017-03-30 16:36 - 2017-03-30 16:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-03-29 15:54 - 2017-03-29 15:54 - 00028244 _____ C:\Users\winki\Downloads\Little Big.pdf
2017-03-29 02:07 - 2017-04-05 12:50 - 00523432 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2017-03-28 18:22 - 2017-03-28 18:22 - 00000000 ____D C:\Users\winki\Documents\Zvukové záznamy
2017-03-24 20:04 - 2017-03-24 20:04 - 00461240 _____ (Check Point Software Technologies Ltd.) C:\Windows\system32\Drivers\vsdatant.sys
2017-03-24 01:03 - 2017-03-17 03:01 - 01983424 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437892.dll
2017-03-24 01:03 - 2017-03-17 03:01 - 01589696 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437892.dll
2017-03-23 23:20 - 2017-03-23 23:20 - 00001485 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2017-03-23 21:11 - 2017-03-23 21:11 - 00000000 ____D C:\Users\winki\Documents\My Games
2017-03-23 19:28 - 2017-03-23 19:28 - 00000000 ____D C:\Users\winki\AppData\Local\4kdownload.com
2017-03-23 19:27 - 2017-03-23 19:27 - 00001333 _____ C:\Users\winki\Desktop\4K Video Downloader.lnk
2017-03-23 19:27 - 2017-03-23 19:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\4K Download
2017-03-23 19:27 - 2017-03-23 19:27 - 00000000 ____D C:\Program Files (x86)\4KDownload
2017-03-23 18:32 - 2017-03-23 18:32 - 00000000 ____D C:\Users\winki\AppData\Roaming\ArcticLine
2017-03-23 18:32 - 2017-03-23 18:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Folder Marker
2017-03-23 18:32 - 2017-03-23 18:32 - 00000000 ____D C:\Program Files (x86)\Folder Marker
2017-03-23 18:03 - 2017-03-23 18:03 - 00000222 _____ C:\Users\winki\Desktop\Rocket League.url
2017-03-22 13:12 - 2017-03-22 13:12 - 00002261 _____ C:\Users\winki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormApps Signing Extension.lnk
2017-03-22 13:12 - 2017-03-22 13:12 - 00000000 ____D C:\Users\winki\AppData\Local\Software602
2017-03-21 13:33 - 2017-04-04 21:52 - 00000000 ____D C:\Users\winki\AppData\Roaming\obs-studio
2017-03-21 13:32 - 2017-03-21 13:32 - 00001275 _____ C:\Users\Public\Desktop\OBS Studio.lnk
2017-03-21 13:32 - 2017-03-21 13:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio
2017-03-21 13:32 - 2017-03-21 13:32 - 00000000 ____D C:\Program Files (x86)\obs-studio
2017-03-21 13:14 - 2017-03-21 13:31 - 113001480 _____ (obsproject.com) C:\Users\winki\Downloads\OBS-Studio-18.0.1-Full-Installer.exe
2017-03-18 21:32 - 2017-03-18 21:32 - 00001179 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Media Encoder CC 2015.3.lnk

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-04-17 14:54 - 2017-02-26 11:39 - 00000000 ____D C:\Users\winki\AppData\Local\CrashDumps
2017-04-17 14:53 - 2017-02-26 23:35 - 00000000 ____D C:\Program Files (x86)\Steam
2017-04-17 14:51 - 2017-02-26 11:39 - 00000000 ____D C:\ProgramData\NVIDIA
2017-04-17 14:49 - 2017-02-27 11:33 - 00000000 ____D C:\Users\winki\AppData\Roaming\Skype
2017-04-17 14:49 - 2017-02-26 12:02 - 00000000 ___RD C:\Users\winki\Creative Cloud Files
2017-04-17 14:49 - 2017-02-26 11:53 - 00000000 ____D C:\Users\winki\AppData\Local\Adobe
2017-04-17 14:48 - 2017-02-26 12:18 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2017-04-17 09:20 - 2017-02-26 11:30 - 00000000 ____D C:\Users\winki
2017-04-17 00:01 - 2017-02-26 23:52 - 00000000 ____D C:\Users\winki\AppData\Roaming\uTorrent
2017-04-16 16:38 - 2016-11-21 06:43 - 02385920 _____ C:\Windows\system32\PerfStringBackup.INI
2017-04-16 16:38 - 2016-11-21 05:58 - 00932954 _____ C:\Windows\system32\perfh005.dat
2017-04-16 16:38 - 2016-11-21 05:58 - 00236448 _____ C:\Windows\system32\perfc005.dat
2017-04-16 16:35 - 2016-11-20 21:33 - 00000000 ____D C:\Windows\system32\SleepStudy
2017-04-16 16:32 - 2017-02-26 12:02 - 00000000 ____D C:\ProgramData\boost_interprocess
2017-04-16 16:31 - 2016-11-21 06:34 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-04-16 16:30 - 2016-07-16 08:04 - 00262144 _____ C:\Windows\system32\config\BBI
2017-04-16 02:30 - 2017-02-26 23:26 - 00000000 ____D C:\Users\winki\AppData\Roaming\Origin
2017-04-16 02:30 - 2017-02-26 23:22 - 00000000 ____D C:\ProgramData\Origin
2017-04-16 00:49 - 2017-03-12 12:39 - 00007606 _____ C:\Users\winki\AppData\Local\Resmon.ResmonCfg
2017-04-15 16:12 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\rescache
2017-04-14 17:56 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\AppReadiness
2017-04-13 23:48 - 2017-02-27 11:44 - 00000000 ____D C:\Users\winki\AppData\Roaming\vlc
2017-04-13 23:29 - 2017-03-10 14:48 - 00000000 ____D C:\Users\winki\AppData\Roaming\Anvsoft
2017-04-13 20:33 - 2017-03-05 20:14 - 00000000 ____D C:\Users\winki\AppData\Local\GeometryDash
2017-04-13 15:41 - 2017-03-06 21:24 - 00000033 _____ C:\Users\winki\AppData\Roaming\AdobeWLCMCache.dat
2017-04-13 11:30 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-04-13 11:24 - 2016-11-21 06:46 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-04-13 11:24 - 2016-11-20 21:33 - 05047344 _____ C:\Windows\system32\FNTCACHE.DAT
2017-04-13 11:24 - 2016-07-16 13:45 - 00000000 ____D C:\Windows\INF
2017-04-13 03:48 - 2016-07-16 13:47 - 00000000 ___SD C:\Windows\SysWOW64\F12
2017-04-13 03:48 - 2016-07-16 13:47 - 00000000 ___SD C:\Windows\system32\F12
2017-04-13 03:48 - 2016-07-16 13:47 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2017-04-13 03:48 - 2016-07-16 13:47 - 00000000 ___RD C:\Program Files\Windows Defender
2017-04-13 03:48 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\SysWOW64\setup
2017-04-13 03:48 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\setup
2017-04-13 03:48 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\appraiser
2017-04-13 03:48 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\ShellExperiences
2017-04-13 03:48 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\Provisioning
2017-04-13 03:48 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\PolicyDefinitions
2017-04-13 03:48 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-04-13 03:48 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-04-13 03:48 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2017-04-13 03:48 - 2016-07-16 08:04 - 00000000 ____D C:\Windows\system32\Dism
2017-04-12 20:57 - 2017-02-27 11:33 - 00003290 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task v2
2017-04-12 20:57 - 2017-02-26 11:31 - 00002387 _____ C:\Users\winki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-04-12 20:57 - 2017-02-26 11:31 - 00000000 ___RD C:\Users\winki\OneDrive
2017-04-12 13:01 - 2017-02-26 19:28 - 00000000 ____D C:\Windows\system32\MRT
2017-04-12 13:00 - 2017-02-26 19:28 - 148601744 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-04-12 13:00 - 2017-02-26 11:28 - 00000000 ____D C:\Users\defaultuser0
2017-04-12 12:59 - 2016-07-16 13:36 - 00000000 ____D C:\Windows\CbsTemp
2017-04-12 02:25 - 2017-02-26 11:33 - 00003726 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-116116240-444440880-2871013289-1001UA
2017-04-12 02:25 - 2017-02-26 11:33 - 00003458 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-116116240-444440880-2871013289-1001Core
2017-04-11 19:39 - 2017-02-26 19:42 - 00004562 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-04-11 19:39 - 2017-02-26 19:42 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-04-10 10:48 - 2017-03-01 23:34 - 00003808 _____ C:\Windows\System32\Tasks\AutoKMS
2017-04-09 13:36 - 2017-02-26 11:30 - 00000000 ____D C:\Users\winki\AppData\Local\Packages
2017-04-08 20:11 - 2017-03-02 19:39 - 00000000 ____D C:\Users\winki\AppData\Local\Spotify
2017-04-08 15:13 - 2017-03-02 19:37 - 00000000 ____D C:\Users\winki\AppData\Roaming\Spotify
2017-04-08 14:43 - 2017-02-26 11:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-04-08 14:41 - 2017-02-26 11:39 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-04-08 14:41 - 2017-02-26 11:39 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-04-08 14:41 - 2017-02-26 11:39 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-04-07 12:41 - 2017-02-27 12:47 - 00000080 _____ C:\Users\winki\Desktop\Nový textový dokument.txt
2017-04-06 12:23 - 2017-02-26 11:37 - 00002469 _____ C:\Users\winki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-04-06 12:23 - 2017-02-26 11:37 - 00002461 _____ C:\Users\winki\Desktop\Google Chrome.lnk
2017-04-05 21:20 - 2017-02-26 23:26 - 00000000 ____D C:\Program Files (x86)\Origin
2017-04-05 16:43 - 2017-03-10 13:48 - 00000000 ____D C:\Temp
2017-04-05 16:42 - 2017-02-26 12:18 - 00000000 ____D C:\Program Files\Common Files\AV
2017-04-05 10:45 - 2017-03-07 08:34 - 00008034 _____ C:\Users\winki\Documents\CIII_LogFile.txt
2017-04-04 21:38 - 2017-02-26 22:32 - 00000081 _____ C:\Users\winki\AppData\Local\FILM_AE_LogFile.txt
2017-04-04 21:35 - 2017-02-26 12:48 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2017-04-02 22:36 - 2017-02-26 12:18 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2017-04-02 22:36 - 2016-07-16 13:47 - 00000000 ___HD C:\Windows\ELAMBKUP
2017-04-02 22:36 - 2016-07-16 08:04 - 00032768 _____ C:\Windows\system32\config\ELAM
2017-04-02 18:12 - 2017-01-04 16:19 - 01600560 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2017-04-02 18:12 - 2017-01-04 16:19 - 00218040 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2017-04-01 20:52 - 2016-07-16 13:49 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-04-01 20:52 - 2016-07-16 13:49 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-04-01 05:27 - 2017-01-04 16:21 - 28592184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2017-04-01 05:27 - 2017-01-04 16:02 - 04085712 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2017-04-01 05:27 - 2017-01-04 16:02 - 03602296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2017-04-01 05:27 - 2017-01-04 11:07 - 00045061 _____ C:\Windows\system32\nvinfo.pb
2017-04-01 04:10 - 2017-02-26 11:39 - 06437312 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2017-04-01 04:10 - 2017-02-26 11:39 - 02481208 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2017-04-01 04:10 - 2017-02-26 11:39 - 01764408 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2017-04-01 04:10 - 2017-02-26 11:39 - 00549944 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2017-04-01 04:10 - 2017-02-26 11:39 - 00393784 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2017-04-01 04:10 - 2017-02-26 11:39 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2017-04-01 04:10 - 2017-02-26 11:39 - 00071224 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2017-04-01 04:09 - 2017-02-26 11:39 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2017-04-01 02:41 - 2017-02-26 11:51 - 00076840 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
2017-03-31 12:15 - 2017-02-26 11:39 - 07851747 _____ C:\Windows\system32\nvcoproc.bin
2017-03-31 00:00 - 2017-02-26 11:59 - 00000000 ____D C:\ProgramData\Adobe
2017-03-30 23:58 - 2017-02-26 12:17 - 00000000 ____D C:\Program Files\Common Files\Adobe
2017-03-30 23:58 - 2017-02-26 12:15 - 00000000 ____D C:\Program Files\Adobe
2017-03-30 23:57 - 2017-02-26 11:30 - 00000000 ____D C:\Users\winki\AppData\Roaming\Adobe
2017-03-30 19:29 - 2017-02-26 11:59 - 00000000 ____D C:\Program Files (x86)\Adobe
2017-03-28 08:20 - 2016-11-21 06:36 - 02717184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2017-03-23 23:20 - 2017-02-26 11:52 - 00004308 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-23 23:20 - 2017-02-26 11:52 - 00003994 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-23 23:20 - 2017-02-26 11:52 - 00003894 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-23 23:20 - 2017-02-26 11:52 - 00003866 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-23 23:20 - 2017-02-26 11:52 - 00003858 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-23 23:20 - 2017-02-26 11:52 - 00003696 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-23 23:20 - 2017-02-26 11:52 - 00003654 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-18 21:32 - 2017-02-26 12:51 - 00000000 ____D C:\Users\winki\Documents\Adobe
2017-03-18 01:10 - 2017-03-13 02:38 - 00000000 ____D C:\Users\winki\AppData\Local\Plex Media Server

==================== Files in the root of some directories =======

2017-03-06 21:24 - 2017-04-13 15:41 - 0000033 _____ () C:\Users\winki\AppData\Roaming\AdobeWLCMCache.dat
2017-02-26 22:32 - 2017-04-04 21:38 - 0000081 _____ () C:\Users\winki\AppData\Local\FILM_AE_LogFile.txt
2017-03-12 12:39 - 2017-04-16 00:49 - 0007606 _____ () C:\Users\winki\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:
====================
2017-02-26 12:17 - 2017-03-17 00:56 - 0754352 _____ (NVIDIA Corporation) C:\Users\winki\AppData\Local\Temp\nvSCPAPI.dll
2017-02-26 12:17 - 2017-03-17 00:56 - 0867968 _____ (NVIDIA Corporation) C:\Users\winki\AppData\Local\Temp\nvSCPAPI64.dll
2017-02-26 12:16 - 2017-03-17 00:56 - 0352704 _____ (NVIDIA Corporation) C:\Users\winki\AppData\Local\Temp\nvStInst.exe
2017-03-01 23:26 - 2015-07-31 16:06 - 0242864 ____R (Microsoft Corporation) C:\Users\winki\AppData\Local\Temp\ose00000.exe
2017-03-01 23:29 - 2017-03-01 23:29 - 1042784 _____ (Microsoft Corporation) C:\Users\winki\AppData\Local\Temp\PidGenX.dll
2017-03-30 16:31 - 2017-03-30 16:32 - 14456872 _____ (Microsoft Corporation) C:\Users\winki\AppData\Local\Temp\vc_redist.x86.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-04-12 12:57

==================== End of FRST.txt ============================



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:111.25 GB) (Free:37.51 GB) NTFS
Drive d: (TOMAŠ) (Fixed) (Total:78.12 GB) (Free:69.73 GB) NTFS
Drive f: (DAVID) (Fixed) (Total:146.48 GB) (Free:132.57 GB) NTFS
Drive g: (DATA) (Fixed) (Total:1638.4 GB) (Free:144.12 GB) NTFS
Drive i: (AE) (Fixed) (Total:119.24 GB) (Free:57.9 GB) NTFS

Available physical RAM: 27829.73 MB
Total physical RAM: 32712.05 MB
Percentage of memory in use: 14%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: EB4C3A42)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: F41F2085)
Partition 1: (Active) - (Size=119.2 GB) - (Type=42)
Partition 2: (Not Active) - (Size=313 KB) - (Type=42)
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 339FA51A)
Partition 1: (Not Active) - (Size=78.1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=146.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=1638.4 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\Users\winki\Amazon Drive:com.amazon.drive.sync [129]
AlternateDataStreams: C:\Users\winki\Amazon Drive:com.amazon.drive.sync.root [42]

==================== Security Center ==================

AV: Avast Antivirus (Disabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Disabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: ZoneAlarm Free Firewall Firewall (Enabled) {1B8D532F-88B1-B2AD-ED22-AED92687A1D2}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\winki\Desktop" je 18 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]


==================== End Of Log ==============================

Znate tyhle slozky?
C:\Users\winki\AppData\Local\Tempzxpsign82a1b2c28878c142 a podobne?
Podle googlu to patri adobe a ukladaji se tam jeho docasne soubory. Jestli to pouzivate a neco v nich je, nechte je, jinak je muzete pomazat. Je to chyba programu, mel by je totiz mazat sam.



Otevrete si poznamkovy blok a zkopirujte do nej tento skript Vlevo nahore kliknete na napis Soubor
Kliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev fixlist a ulozte na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Spustte FRST jako spravce, kliknete na napis Fix a program vykona prikazy.
Po restartu pc by se mel objevit novy log - s nazvem fixlog, ten mi sem zase zkopirujte.