VIRY.CZ

Prosím o pomoc.
Poté, co jsem odstranil Kuaizip (snad) z počítače, ADWcleaner stále nachází v root\subscription ActiveScriptEventConsumer, nelze jej odstranit. Viz příloha.
Děkuji za rady.

Posílám RSIT log:
============================
Logfile of random's system information tool 1.16 (written by random/random)
Run by Sonidla at 2017-04-20 19:31:30
Microsoft Windows 10 Home
System drive C: has 902 GB (96%) free of 944 GB
Total RAM: 3965 MB (45% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:31:35, on 20.04.2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.14393.0953)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Users\Sonidla\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Dell Update\DellUpTray.exe
C:\Program Files\trend micro\Sonidla_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell17win10.msn.com/?pc=DCTE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Dropbox] "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Sonidla\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Sonidla\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Sonidla\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [Pritc] C:\Users\Sonidla\AppData\Local\Temp\is-4EHC7.tmp\Setup.exe
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra button: McAfee WebAdvisor - {48A61126-9A19-4C50-A214-FF08CB94995C} - (no file)
O9 - Extra 'Tools' menuitem: McAfee WebAdvisor - {48A61126-9A19-4C50-A214-FF08CB94995C} - (no file)
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - (no file)
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - (no file)
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\System32\DriverStore\FileRepository\k120130.inf_amd64_299d0c74ec099c32\IntelCpHeciSvc.exe
O23 - Service: Intel(R) Content Protection HDCP Service (cplspcon) - Intel Corporation - C:\Windows\System32\DriverStore\FileRepository\k120130.inf_amd64_299d0c74ec099c32\IntelCpHDCPSvc.exe
O23 - Service: Dropbox Update Service (dbupdate) (dbupdate) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: Dropbox Update Service (dbupdatem) (dbupdatem) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: DbxSvc - Unknown owner - C:\Windows\system32\DbxSvc.exe (file missing)
O23 - Service: Dell Customer Connect - Dell Inc. - C:\Program Files (x86)\Dell Customer Connect\DCCService.exe
O23 - Service: Dell Foundation Services - Dell - C:\Program Files\Dell\Dell Foundation Services\DFSSvc.exe
O23 - Service: Dell Data Vault (DellDataVault) - Dell Inc. - C:\Program Files\Dell\DellDataVault\DellDataVault.exe
O23 - Service: Dell Data Vault Wizard (DellDataVaultWiz) - Dell Inc. - C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe
O23 - Service: Dell Digital Delivery Service (DellDigitalDelivery) - Dell Products, LP. - c:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe
O23 - Service: Dell Update Service (DellUpdate) - Dell Inc. - C:\Program Files (x86)\Dell Update\DellUpService.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @oem24.inf,%ServiceDisplayName%;ESIF Upper Framework Service (esifsvc) - Unknown owner - C:\Windows\system32\Intel\DPTF\esif_uf.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @oem43.inf,%SERVICE_NAME%;Intel Bluetooth Service (ibtsiva) - Unknown owner - C:\Windows\system32\ibtsiva (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Intel Corporation - C:\Windows\System32\DriverStore\FileRepository\k120130.inf_amd64_299d0c74ec099c32\igfxCUIService.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Security Assist - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
O23 - Service: Intel(R) Security Assist Helper (isaHelperSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel Security PEF Service (PEFService) - Intel Security, Inc. - C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe
O23 - Service: Product Registration - Dell - C:\Program Files\Dell\Dell Product Registration\PRSvc.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Dell SupportAssist Agent (SupportAssistAgent) - Dell Inc. - C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\Windows\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: Waves Audio Services (WavesSysSvc) - Waves Audio Ltd. - c:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 13123 bytes

====== Enumerating Processes ======

C:\Windows\system32\winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\dwm.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-53465bae-5f13-4f78-9128-3b1b57cbae3c -SystemEventPortName:HostProcess-2d9c8505-fded-451a-86f0-c0c5bd86d34f -IoCancelEventPortName:HostProcess-5c3b79ac-d874-4fc0-b114-c2aad7178073 -NonStateChangingEventPortName:HostProcess-b5f353e2-cb50-4611-8309-e1d19534ef0a -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:20f37e2b-6601-4414-ad9d-c302da86f2f1 -DeviceGroupId:
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-cf2e1c9d-6095-4cf2-ab40-520a4d00ff0d -SystemEventPortName:HostProcess-a7c6b295-ef1c-4cd0-a06d-bc3285e26419 -IoCancelEventPortName:HostProcess-f9c4dc46-0a99-4447-bc3f-d61fb7035664 -NonStateChangingEventPortName:HostProcess-e715f4c3-ab7d-45da-ab49-8a8006be2800 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:87b98239-13d3-409b-98f6-075c1abf923c -DeviceGroupId:WudfDefaultDevicePool
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\WScript.exe "c:\windows\system32\oem\startmenufix.vbs"
C:\Windows\System32\DriverStore\FileRepository\k120130.inf_amd64_299d0c74ec099c32\igfxCUIService.exe
C:\Windows\System32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\WLANExt.exe 2262215150336
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\System32\spoolsv.exe
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SENDINPUT
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
C:\Windows\system32\DbxSvc.exe
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
C:\Windows\system32\ibtsiva.exe
"C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe"
C:\Windows\System32\DriverStore\FileRepository\k120130.inf_amd64_299d0c74ec099c32\IntelCpHDCPSvc.exe
"c:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe"
"C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
C:\Windows\system32\svchost.exe -k appmodel
C:\Windows\system32\Intel\DPTF\esif_uf.exe
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\sihost.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\taskhostw.exe
"C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe" /c
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\Explorer.EXE
"C:\Windows\TEMP\DPTF\esif_assist_64.exe"
"C:\Windows\System32\DriverStore\FileRepository\k120130.inf_amd64_299d0c74ec099c32\igfxEM.exe"
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /IM
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\System32\smartscreen.exe -Embedding
"C:\Program Files\Dell\QuickSet\quickset.exe"
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe" -Jack
"C:\Program Files\Windows Defender\MSASCuiL.exe"
C:\Users\Sonidla\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
"C:\Users\Sonidla\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\system32\ApplicationFrameHost.exe -Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
C:\Windows\system32\browser_broker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe" SCODEF:6540 CREDAT:206081 /prefetch:2
C:\Windows\system32\DllHost.exe /Processid:{49F6E667-6658-4BD1-9DE9-6AF87F9FAF85}
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
C:\Program Files\Windows Defender\MpCmdRun.exe
"C:\Program Files (x86)\Dell Customer Connect\DCCService.exe"
"C:\Program Files\Dell\Dell Foundation Services\DFSSvc.exe"
"C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe"
"c:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe"
"C:\Program Files (x86)\Dell Update\DellUpService.exe"
C:\Program Files (x86)\Dell Update\DellUpTray.exe
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files\Dell\Dell Product Registration\PRSvc.exe"
"C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe"
"C:\Program Files\Dell\DellDataVault\DellDataVault.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\WmiApSrv.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-413214280-1799941555-775631740-10013_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-413214280-1799941555-775631740-10013 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
"C:\Program Files\Dell\Dell Foundation Services\DFS.Common.Agent.exe"
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Windows\system32\SearchFilterHost.exe" 0 640 644 652 8192 648
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\system32\AUDIODG.EXE 0x3a4
"C:\Users\Sonidla\Downloads\RSITx64.exe"

====== Scheduled tasks folder ======

C:\Windows\tasks\DropboxUpdateTaskMachineCore.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /c
C:\Windows\tasks\DropboxUpdateTaskMachineUA.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\Online Application V2G1.job - C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe 1 69
C:\Windows\tasks\Online Application V2G2.job - C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe 1 70
C:\Windows\tasks\Online Application V2G3.job - C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe 1 71
C:\Windows\tasks\UCBrowserUpdater.job - C:\Program Files (x86)\UCBrowser\Application\update_task.exe /update
C:\Windows\tasks\Updater_Online_Application.job - C:\Program Files (x86)\Microleaves\Online Application\Online Application Updater.exe /silentall -nofreqcheck
C:\Windows\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\Windows\system32\tasks\CreateExplorerShellUnelevatedTask - C:\Windows\Explorer.exe /NOUACCHECK
C:\Windows\system32\tasks\Dell Cleanup - c:\windows\system32\oem\startmenufix.vbs
C:\Windows\system32\tasks\Dell SupportAssistAgent AutoUpdate - C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssist.exe AutoUpdate
C:\Windows\system32\tasks\DropboxOEM - "%ProgramFiles(x86)%\Dropbox\DropboxOEM\DropboxOEM.exe" auto
C:\Windows\system32\tasks\DropboxUpdateTaskMachineCore - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /c
C:\Windows\system32\tasks\DropboxUpdateTaskMachineUA - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\Intel PTT EK Recertification - "C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe"
C:\Windows\system32\tasks\McAfeeLogon - C:\PROGRA~1\COMMON~1\McAfee\Platform\McUICnt.exe /platui
C:\Windows\system32\tasks\OneDrive Standalone Update Task v2 - %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
C:\Windows\system32\tasks\Online Application V2G1 - C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe 1 69
C:\Windows\system32\tasks\Online Application V2G2 - C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe 1 70
C:\Windows\system32\tasks\Online Application V2G3 - C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe 1 71
C:\Windows\system32\tasks\PCDDataUploadTask - "uaclauncher.exe" -lloc dataupload --ignoresecondarysplash --runsilently --skipidlewait
C:\Windows\system32\tasks\PCDEventLauncherTask - "C:\Program Files\Dell\SupportAssist\sessionchecker.exe"
C:\Windows\system32\tasks\PCDoctorBackgroundMonitorTask - "C:\Program Files\Dell\SupportAssist\uaclauncher.exe" -backgroundmon scripts\backgroundmon.xml -st PCDoctorBackgroundMonitorTask --ignoresecondarysplash --runsilently
C:\Windows\system32\tasks\Pritc - C:\Users\Sonidla\AppData\Local\Temp\is-4EHC7.tmp\Setup.exe
C:\Windows\system32\tasks\RtHDVBg_PushButton - "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /IM
C:\Windows\system32\tasks\SystemToolsDailyTest - "uaclauncher.exe" -silentenumeration -st SystemToolsDailyTest --ignoresecondarysplash --runsilently
C:\Windows\system32\tasks\UCBrowserUpdater - C:\Program Files (x86)\UCBrowser\Application\update_task.exe /update
C:\Windows\system32\tasks\Updater_Online_Application - C:\Program Files (x86)\Microleaves\Online Application\Online Application Updater.exe /silentall -nofreqcheck
C:\Windows\system32\tasks\{7F24E4D4-F442-49D0-82B9-968854A2126E} - C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\YeaDesktop\unins000.exe" -d "C:\Program Files (x86)\YeaDesktop"
C:\Windows\system32\tasks\Microsoft\XblGameSave\XblGameSaveTask - %windir%\System32\XblGameSaveTask.exe standby
C:\Windows\system32\tasks\Microsoft\XblGameSave\XblGameSaveTaskLogon - %windir%\System32\XblGameSaveTask.exe logon
C:\Windows\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join - %SystemRoot%\System32\dsregcmd.exe
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start - C:\Windows\system32\sc.exe start wuauserv
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\sih - %systemroot%\System32\sihclient.exe
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\sihboot - %systemroot%\System32\sihclient.exe /boot
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -upload
C:\Windows\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance - C:\Program Files\Windows Defender\\MpCmdRun.exe -IdleTask -TaskName WdCacheMaintenance
C:\Windows\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup - C:\Program Files\Windows Defender\\MpCmdRun.exe -IdleTask -TaskName WdCleanup
C:\Windows\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan - C:\Program Files\Windows Defender\\MpCmdRun.exe Scan -ScheduleJob
C:\Windows\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification - C:\Program Files\Windows Defender\\MpCmdRun.exe -IdleTask -TaskName WdVerification
C:\Windows\system32\tasks\Microsoft\Windows\WCM\WiFiTask - %SystemRoot%\System32\WiFiTask.exe
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Maintenance Install - %systemroot%\system32\usoclient.exe StartInstall
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Policy Install - %systemroot%\system32\usoclient.exe StartInstall
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Reboot - %systemroot%\system32\MusNotification.exe RebootDialog
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Refresh Settings - %systemroot%\system32\usoclient.exe RefreshSettings
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Resume On Boot - %systemroot%\system32\usoclient.exe ResumeUpdate
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan - %systemroot%\system32\usoclient.exe StartScan
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display - %systemroot%\system32\MusNotification.exe Display
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot - %systemroot%\system32\MusNotification.exe ReadyToReboot
C:\Windows\system32\tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone - %windir%\system32\tzsync.exe
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask - %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
C:\Windows\system32\tasks\Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization - %windir%\system32\defrag.exe -c -h -g -# -m 8 -i 13500
C:\Windows\system32\tasks\Microsoft\Windows\Speech\SpeechModelDownloadTask - %windir%\system32\speech_onecore\common\SpeechModelDownload.exe
C:\Windows\system32\tasks\Microsoft\Windows\SpacePort\SpaceAgentTask - %windir%\system32\SpaceAgent.exe
C:\Windows\system32\tasks\Microsoft\Windows\SpacePort\SpaceManagerTask - %windir%\system32\spaceman.exe /Work
C:\Windows\system32\tasks\Microsoft\Windows\Shell\FamilySafetyMonitor - %windir%\System32\wpcmon.exe
C:\Windows\system32\tasks\Microsoft\Windows\SharedPC\Account Cleanup - %windir%\System32\rundll32.exe %windir%\System32\Windows.SharedPC.AccountManager.dll,StartMaintenance
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - %SystemRoot%\System32\drvinst.exe 6
C:\Windows\system32\tasks\Microsoft\Windows\NlaSvc\WiFiTask - %SystemRoot%\System32\WiFiTask.exe nla
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - %SystemRoot%\System32\MbaeParserTask.exe
C:\Windows\system32\tasks\Microsoft\Windows\Management\Provisioning\Logon - %windir%\system32\ProvTool.exe /turn 5
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotificationWindows.exe
C:\Windows\system32\tasks\Microsoft\Windows\Location\WindowsActionDialog - %windir%\System32\WindowsActionDialog.exe
C:\Windows\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClient - %windir%\system32\dmclient.exe
C:\Windows\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload - %windir%\system32\dmclient.exe utcwnf
C:\Windows\system32\tasks\Microsoft\Windows\DUSM\dusmtask - %SystemRoot%\System32\dusmtask.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskFootprint\Diagnostics - %windir%\system32\disksnapshot.exe -z
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskCleanup\SilentCleanup - %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
C:\Windows\system32\tasks\Microsoft\Windows\Device Information\Device - %windir%\system32\devicecensus.exe
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c -h -o -$
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Clip\License Validation - %SystemRoot%\system32\ClipUp.exe -p -s -o
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup - %windir%\system32\rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
C:\Windows\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierdaily - %windir%\system32\AppHostRegistrationVerifier.exe
C:\Windows\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierinstall - %windir%\system32\AppHostRegistrationVerifier.exe
C:\Windows\system32\tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState - %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
C:\Windows\system32\tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup - %windir%\system32\dstokenclean.exe
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattelrunner.exe
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\StartupAppTask - %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\Windows\system32\tasks\Microsoft\Office\Office Automatic Updates - C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe /update SCHEDULEDTASK displaylevel=False
C:\Windows\system32\tasks\Microsoft\Office\Office ClickToRun Service Monitor - C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe /WatchService
C:\Windows\system32\tasks\Microsoft\Office\Office Subscription Maintenance - C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe

=========Google Chrome=========


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\fheoggkfdfchfphceeifdbepaooicaho]
"Path"=


======Registry dump ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={6A1806CD-94D4-4689-BA73-E35EA1EA9990}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{5EE31285-3F3F-4A38-A73D-114126779DBB}]
"URL"=http://www.bing.com/search?q={searchTer ... TR&pc=DCTE
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}]
"URL"=http://www.google.com/search?q={searchT ... urceid=ie7


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={6A1806CD-94D4-4689-BA73-E35EA1EA9990}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{5EE31285-3F3F-4A38-A73D-114126779DBB}]
"URL"=http://www.bing.com/search?q={searchTer ... TR&pc=DCTE
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}]
"URL"=http://www.google.com/search?q={searchT ... urceid=ie7

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-03-06 213704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-03-09 255088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-03-06 3002160]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2017-03-09 193136]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-03-09 255088]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2017-03-09 193136]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"QuickSet"=c:\Program Files\Dell\QuickSet\QuickSet.exe [2016-05-17 3893296]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2016-11-22 9080848]
"WavesSvc"=c:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [2016-11-19 940976]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2016-09-20 71168]
"WindowsDefender"=C:\Program Files\Windows Defender\MSASCuiL.exe [2017-03-28 631808]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Sonidla\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2017-04-14 1518808]
"cz.seznam.software.autoupdate"=C:\Users\Sonidla\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Sonidla\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2015-05-26 103080]
"Pritc"=C:\Users\Sonidla\AppData\Local\Temp\is-4EHC7.tmp\Setup.exe [2017-04-20 1429504]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Dropbox"=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [2017-04-14 28330072]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5F51FFFE-7463-4220-B711-E5B9ACB8EDFE}"= []

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders" = credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ModuleCoreService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcapexe]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McNaiAnn]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfeaack]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfeaack.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfeavfk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfeavfk.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfemms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfencbdc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfencbdc.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfeplk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfeplk.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ModuleCoreService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"DSCAutomationHostEnabled"=2
"EnableCursorSuppression"=1
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

====== File associations ======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== List of files/folders created in the last 1 month ======

2017-04-20 19:31:30 ----D---- C:\rsit
2017-04-20 19:31:30 ----D---- C:\Program Files\trend micro
2017-04-20 18:50:56 ----D---- C:\ProgramData\IObit
2017-04-20 18:50:52 ----D---- C:\Program Files (x86)\IObit
2017-04-20 18:24:16 ----D---- C:\AdwCleaner
2017-04-20 17:57:18 ----D---- C:\Program Files (x86)\PPLive
2017-04-20 17:57:18 ----D---- C:\Program Files (x86)\FlowSprit
2017-04-20 17:55:37 ----D---- C:\Program Files (x86)\lll
2017-04-20 17:54:44 ----D---- C:\Program Files (x86)\sss
2017-04-20 17:54:42 ----D---- C:\Program Files (x86)\Seznam.cz
2017-04-20 17:54:30 ----D---- C:\Users\Sonidla\AppData\Roaming\Seznam.cz
2017-04-20 17:54:00 ----D---- C:\Program Files (x86)\Microsoft Toolkit Final
2017-04-20 17:52:27 ----D---- C:\Users\Sonidla\AppData\Roaming\WinRAR
2017-04-20 17:51:55 ----D---- C:\Program Files\WinRAR
2017-04-14 01:22:34 ----A---- C:\Windows\system32\DbxSvc.exe
2017-04-13 17:37:04 ----A---- C:\Windows\SYSWOW64\WebcamUi.dll
2017-04-13 17:37:02 ----A---- C:\Windows\SYSWOW64\RADCUI.dll
2017-04-13 17:37:02 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2017-04-13 17:37:01 ----A---- C:\Windows\SYSWOW64\SyncSettings.dll
2017-04-13 17:37:01 ----A---- C:\Windows\SYSWOW64\AzureSettingSyncProvider.dll
2017-04-13 17:36:45 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2017-04-13 17:36:45 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2017-04-13 17:36:43 ----A---- C:\Windows\SYSWOW64\netshell.dll
2017-04-13 17:36:41 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2017-04-13 17:36:41 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2017-04-13 17:36:41 ----A---- C:\Windows\SYSWOW64\ipsecsnp.dll
2017-04-13 17:36:18 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2017-04-13 17:36:18 ----A---- C:\Windows\SYSWOW64\ieproxy.dll
2017-04-13 17:36:18 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2017-04-13 17:36:17 ----AD---- C:\Program Files\CCleaner
2017-04-13 17:36:17 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2017-04-13 17:36:12 ----A---- C:\Windows\SYSWOW64\wininet.dll
2017-04-13 17:36:07 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2017-04-13 17:36:07 ----A---- C:\Windows\SYSWOW64\apds.dll
2017-04-13 17:36:05 ----A---- C:\Windows\SYSWOW64\Windows.Data.Pdf.dll
2017-04-13 17:35:54 ----A---- C:\Windows\SYSWOW64\Windows.Media.MediaControl.dll
2017-04-13 17:35:51 ----A---- C:\Windows\SYSWOW64\Windows.System.UserDeviceAssociation.dll
2017-04-13 17:35:51 ----A---- C:\Windows\SYSWOW64\Windows.Storage.ApplicationData.dll
2017-04-13 17:35:51 ----A---- C:\Windows\SYSWOW64\Windows.StateRepositoryClient.dll
2017-04-13 17:35:51 ----A---- C:\Windows\SYSWOW64\Windows.Media.Speech.dll
2017-04-13 17:35:51 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2017-04-13 17:35:50 ----A---- C:\Windows\SYSWOW64\wlidcli.dll
2017-04-13 17:35:50 ----A---- C:\Windows\SYSWOW64\WinRtTracing.dll
2017-04-13 17:35:50 ----A---- C:\Windows\SYSWOW64\Windows.Media.Ocr.dll
2017-04-13 17:35:50 ----A---- C:\Windows\SYSWOW64\Windows.Media.FaceAnalysis.dll
2017-04-13 17:35:50 ----A---- C:\Windows\SYSWOW64\Windows.Gaming.XboxLive.Storage.dll
2017-04-13 17:35:50 ----A---- C:\Windows\SYSWOW64\Windows.Gaming.Input.dll
2017-04-13 17:35:50 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Perception.dll
2017-04-13 17:35:49 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.dll
2017-04-13 17:35:49 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Core.dll
2017-04-13 17:35:49 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-04-13 17:35:49 ----A---- C:\Windows\SYSWOW64\AppContracts.dll
2017-04-13 17:35:48 ----A---- C:\Windows\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2017-04-13 17:35:45 ----A---- C:\Windows\SYSWOW64\xpsrchvw.exe
2017-04-13 17:35:45 ----A---- C:\Windows\SYSWOW64\XblAuthTokenBrokerExt.dll
2017-04-13 17:35:45 ----A---- C:\Windows\SYSWOW64\XblAuthManagerProxy.dll
2017-04-13 17:35:44 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2017-04-13 17:35:44 ----A---- C:\Windows\SYSWOW64\Windows.UI.dll
2017-04-13 17:35:44 ----A---- C:\Windows\SYSWOW64\win32kfull.sys
2017-04-13 17:35:44 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2017-04-13 17:35:43 ----A---- C:\Windows\SYSWOW64\Windows.Web.Http.dll
2017-04-13 17:35:43 ----A---- C:\Windows\SYSWOW64\Windows.Web.dll
2017-04-13 17:35:41 ----A---- C:\Windows\SYSWOW64\WwaApi.dll
2017-04-13 17:35:41 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Wallet.dll
2017-04-13 17:35:40 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2017-04-13 17:35:40 ----A---- C:\Windows\SYSWOW64\Windows.Web.Diagnostics.dll
2017-04-13 17:35:40 ----A---- C:\Windows\SYSWOW64\Windows.UI.Input.Inking.dll
2017-04-13 17:35:40 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Scanners.dll
2017-04-13 17:35:39 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2017-04-13 17:35:39 ----A---- C:\Windows\SYSWOW64\StoreAgent.dll
2017-04-13 17:35:39 ----A---- C:\Windows\SYSWOW64\InstallAgentUserBroker.exe
2017-04-13 17:35:39 ----A---- C:\Windows\SYSWOW64\InstallAgent.exe
2017-04-13 17:35:38 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.Phone.dll
2017-04-13 17:35:38 ----A---- C:\Windows\SYSWOW64\usoapi.dll
2017-04-13 17:35:38 ----A---- C:\Windows\SYSWOW64\UserDeviceRegistration.dll
2017-04-13 17:35:38 ----A---- C:\Windows\SYSWOW64\updatepolicy.dll
2017-04-13 17:35:38 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2017-04-13 17:35:37 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.Maps.dll
2017-04-13 17:35:37 ----A---- C:\Windows\SYSWOW64\Windows.UI.Xaml.InkControls.dll
2017-04-13 17:35:37 ----A---- C:\Windows\SYSWOW64\UserDataTimeUtil.dll
2017-04-13 17:35:37 ----A---- C:\Windows\SYSWOW64\ExSMime.dll
2017-04-13 17:35:37 ----A---- C:\Windows\SYSWOW64\AppointmentActivation.dll
2017-04-13 17:35:36 ----A---- C:\Windows\SYSWOW64\UserDataAccountApis.dll
2017-04-13 17:35:36 ----A---- C:\Windows\SYSWOW64\twinui.appcore.dll
2017-04-13 17:35:36 ----A---- C:\Windows\SYSWOW64\twinapi.appcore.dll
2017-04-13 17:35:35 ----A---- C:\Windows\SYSWOW64\Windows.System.SystemManagement.dll
2017-04-13 17:35:35 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.Store.dll
2017-04-13 17:35:35 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2017-04-13 17:35:35 ----A---- C:\Windows\SYSWOW64\sbe.dll
2017-04-13 17:35:35 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2017-04-13 17:35:35 ----A---- C:\Windows\SYSWOW64\LicenseManager.dll
2017-04-13 17:35:32 ----A---- C:\Windows\SYSWOW64\shell32.dll
2017-04-13 17:35:32 ----A---- C:\Windows\SYSWOW64\SettingSyncCore.dll
2017-04-13 17:35:31 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2017-04-13 17:35:31 ----A---- C:\Windows\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2017-04-13 17:35:31 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Sensors.dll
2017-04-13 17:35:31 ----A---- C:\Windows\SYSWOW64\vaultcli.dll
2017-04-13 17:35:31 ----A---- C:\Windows\SYSWOW64\TokenBroker.dll
2017-04-13 17:35:30 ----A---- C:\Windows\SYSWOW64\TokenBrokerUI.dll
2017-04-13 17:35:30 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2017-04-13 17:35:30 ----A---- C:\Windows\SYSWOW64\aadtb.dll
2017-04-13 17:35:29 ----A---- C:\Windows\SYSWOW64\Chakra.dll
2017-04-13 17:35:29 ----A---- C:\Windows\SYSWOW64\efswrt.dll
2017-04-13 17:35:28 ----A---- C:\Windows\SYSWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-04-13 17:35:28 ----A---- C:\Windows\SYSWOW64\Windows.Media.dll
2017-04-13 17:35:28 ----A---- C:\Windows\SYSWOW64\RTMediaFrame.dll
2017-04-13 17:35:27 ----A---- C:\Windows\SYSWOW64\Windows.Media.Editing.dll
2017-04-13 17:35:23 ----A---- C:\Windows\SYSWOW64\Windows.Graphics.Printing.dll
2017-04-13 17:35:23 ----A---- C:\Windows\SYSWOW64\Windows.Graphics.Printing.3D.dll
2017-04-13 17:35:22 ----A---- C:\Windows\SYSWOW64\Windows.Perception.Stub.dll
2017-04-13 17:35:22 ----A---- C:\Windows\SYSWOW64\PlayToReceiver.dll
2017-04-13 17:35:22 ----A---- C:\Windows\SYSWOW64\PlayToManager.dll
2017-04-13 17:35:22 ----A---- C:\Windows\SYSWOW64\PlayToDevice.dll
2017-04-13 17:35:21 ----A---- C:\Windows\SYSWOW64\wpnapps.dll
2017-04-13 17:35:20 ----A---- C:\Windows\SYSWOW64\WpcWebFilter.dll
2017-04-13 17:35:19 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2017-04-13 17:35:19 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2017-04-13 17:35:19 ----A---- C:\Windows\SYSWOW64\AuthBroker.dll
2017-04-13 17:35:17 ----A---- C:\Windows\SYSWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-04-13 17:35:17 ----A---- C:\Windows\SYSWOW64\Windows.Networking.HostName.dll
2017-04-13 17:35:17 ----A---- C:\Windows\SYSWOW64\Windows.Networking.dll
2017-04-13 17:35:15 ----A---- C:\Windows\SYSWOW64\Windows.Networking.Connectivity.dll
2017-04-13 17:35:13 ----A---- C:\Windows\SYSWOW64\Windows.Networking.BackgroundTransfer.dll
2017-04-13 17:35:13 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2017-04-13 17:35:12 ----A---- C:\Windows\SYSWOW64\mspaint.exe
2017-04-13 17:35:12 ----A---- C:\Windows\SYSWOW64\MiracastReceiver.dll
2017-04-13 17:35:12 ----A---- C:\Windows\SYSWOW64\mfsrcsnk.dll
2017-04-13 17:35:11 ----A---- C:\Windows\SYSWOW64\mfnetsrc.dll
2017-04-13 17:35:11 ----A---- C:\Windows\SYSWOW64\mfnetcore.dll
2017-04-13 17:35:11 ----A---- C:\Windows\SYSWOW64\mfmpeg2srcsnk.dll
2017-04-13 17:35:11 ----A---- C:\Windows\SYSWOW64\mfmp4srcsnk.dll
2017-04-13 17:35:11 ----A---- C:\Windows\SYSWOW64\mfmjpegdec.dll
2017-04-13 17:35:10 ----A---- C:\Windows\SYSWOW64\Windows.Media.Streaming.dll
2017-04-13 17:35:10 ----A---- C:\Windows\SYSWOW64\Windows.Media.Import.dll
2017-04-13 17:35:10 ----A---- C:\Windows\SYSWOW64\Windows.Media.Devices.dll
2017-04-13 17:35:10 ----A---- C:\Windows\SYSWOW64\Windows.Media.Audio.dll
2017-04-13 17:35:10 ----A---- C:\Windows\SYSWOW64\mfcore.dll
2017-04-13 17:35:10 ----A---- C:\Windows\SYSWOW64\mfasfsrcsnk.dll
2017-04-13 17:35:10 ----A---- C:\Windows\SYSWOW64\MCRecvSrc.dll
2017-04-13 17:35:09 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2017-04-13 17:35:09 ----A---- C:\Windows\SYSWOW64\mos.dll
2017-04-13 17:35:07 ----A---- C:\Windows\SYSWOW64\windows.storage.dll
2017-04-13 17:35:07 ----A---- C:\Windows\SYSWOW64\MFMediaEngine.dll
2017-04-13 17:35:07 ----A---- C:\Windows\SYSWOW64\mbsmsapi.dll
2017-04-13 17:35:07 ----A---- C:\Windows\SYSWOW64\MbaeApiPublic.dll
2017-04-13 17:35:06 ----A---- C:\Windows\SYSWOW64\AboveLockAppHost.dll
2017-04-13 17:35:05 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2017-04-13 17:35:02 ----A---- C:\Windows\SYSWOW64\Windows.Internal.Bluetooth.dll
2017-04-13 17:35:02 ----A---- C:\Windows\SYSWOW64\InputService.dll
2017-04-13 17:34:59 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2017-04-13 17:34:53 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2017-04-13 17:34:52 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2017-04-13 17:34:52 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2017-04-13 17:34:52 ----A---- C:\Windows\SYSWOW64\edgehtml.dll
2017-04-13 17:34:52 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2017-04-13 17:34:51 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2017-04-13 17:34:44 ----A---- C:\Windows\SYSWOW64\Windows.Globalization.dll
2017-04-13 17:34:44 ----A---- C:\Windows\SYSWOW64\Geolocation.dll
2017-04-13 17:34:44 ----A---- C:\Windows\SYSWOW64\gdi32full.dll
2017-04-13 17:34:44 ----A---- C:\Windows\SYSWOW64\fontdrvhost.exe
2017-04-13 17:34:44 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2017-04-13 17:34:44 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2017-04-13 17:34:43 ----A---- C:\Windows\SYSWOW64\wer.dll
2017-04-13 17:34:43 ----A---- C:\Windows\SYSWOW64\enrollmentapi.dll
2017-04-13 17:34:43 ----A---- C:\Windows\SYSWOW64\dmenrollengine.dll
2017-04-13 17:34:42 ----A---- C:\Windows\SYSWOW64\Windows.Internal.Management.dll
2017-04-13 17:34:42 ----A---- C:\Windows\SYSWOW64\DisplayManager.dll
2017-04-13 17:34:42 ----A---- C:\Windows\SYSWOW64\D3DCompiler_47.dll
2017-04-13 17:34:40 ----A---- C:\Windows\SYSWOW64\Windows.Devices.WiFiDirect.dll
2017-04-13 17:34:40 ----A---- C:\Windows\SYSWOW64\Windows.Devices.WiFi.dll
2017-04-13 17:34:40 ----A---- C:\Windows\SYSWOW64\quartz.dll
2017-04-13 17:34:40 ----A---- C:\Windows\SYSWOW64\dialclient.dll
2017-04-13 17:34:39 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Usb.dll
2017-04-13 17:34:39 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Radios.dll
2017-04-13 17:34:39 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Midi.dll
2017-04-13 17:34:39 ----A---- C:\Windows\SYSWOW64\Windows.Devices.LowLevel.dll
2017-04-13 17:34:39 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Lights.dll
2017-04-13 17:34:39 ----A---- C:\Windows\SYSWOW64\Windows.Devices.HumanInterfaceDevice.dll
2017-04-13 17:34:39 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Bluetooth.dll
2017-04-13 17:34:38 ----A---- C:\Windows\SYSWOW64\Windows.Devices.SmartCards.dll
2017-04-13 17:34:38 ----A---- C:\Windows\SYSWOW64\Windows.Devices.SerialCommunication.dll
2017-04-13 17:34:38 ----A---- C:\Windows\SYSWOW64\Windows.Devices.PointOfService.dll
2017-04-13 17:34:38 ----A---- C:\Windows\SYSWOW64\Windows.Devices.Picker.dll
2017-04-13 17:34:37 ----A---- C:\Windows\SYSWOW64\WinTypes.dll
2017-04-13 17:34:37 ----A---- C:\Windows\SYSWOW64\msdtcprx.dll
2017-04-13 17:34:37 ----A---- C:\Windows\SYSWOW64\CryptoWinRT.dll
2017-04-13 17:34:37 ----A---- C:\Windows\SYSWOW64\CoreUIComponents.dll
2017-04-13 17:34:36 ----A---- C:\Windows\SYSWOW64\ole32.dll
2017-04-13 17:34:36 ----A---- C:\Windows\SYSWOW64\CredProvDataModel.dll
2017-04-13 17:34:36 ----A---- C:\Windows\SYSWOW64\CompPkgSup.dll
2017-04-13 17:34:36 ----A---- C:\Windows\SYSWOW64\cdp.dll
2017-04-13 17:34:34 ----A---- C:\Windows\SYSWOW64\Windows.Devices.AllJoyn.dll
2017-04-13 17:34:34 ----A---- C:\Windows\SYSWOW64\Windows.AccountsControl.dll
2017-04-13 17:34:34 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2017-04-13 17:34:34 ----A---- C:\Windows\SYSWOW64\AppXDeploymentClient.dll
2017-04-13 17:34:34 ----A---- C:\Windows\SYSWOW64\apprepsync.dll
2017-04-13 17:34:34 ----A---- C:\Windows\SYSWOW64\apprepapi.dll
2017-04-13 17:34:34 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2017-04-13 17:34:33 ----A---- C:\Windows\SYSWOW64\Windows.ApplicationModel.LockScreen.dll
2017-04-13 17:34:32 ----A---- C:\Windows\SYSWOW64\UserMgrProxy.dll
2017-04-13 17:34:32 ----A---- C:\Windows\SYSWOW64\ShareHost.dll
2017-04-13 17:34:32 ----A---- C:\Windows\SYSWOW64\dlnashext.dll
2017-04-13 17:34:32 ----A---- C:\Windows\SYSWOW64\deviceaccess.dll
2017-04-13 17:34:32 ----A---- C:\Windows\SYSWOW64\CoreMessaging.dll
2017-04-13 17:34:32 ----A---- C:\Windows\SYSWOW64\CloudExperienceHostUser.dll
2017-04-13 17:34:31 ----A---- C:\Windows\SYSWOW64\ErrorDetails.dll
2017-04-13 17:34:31 ----A---- C:\Windows\SYSWOW64\CloudExperienceHostCommon.dll
2017-04-13 17:34:31 ----A---- C:\Windows\SYSWOW64\bcastdvr.exe
2017-04-13 17:26:52 ----A---- C:\Windows\system32\mssprxy.dll
2017-04-13 17:26:51 ----A---- C:\Windows\system32\Windows.System.UserDeviceAssociation.dll
2017-04-13 17:26:51 ----A---- C:\Windows\system32\Windows.Storage.ApplicationData.dll
2017-04-13 17:26:51 ----A---- C:\Windows\system32\Windows.StateRepositoryClient.dll
2017-04-13 17:26:51 ----A---- C:\Windows\system32\Windows.Media.Speech.dll
2017-04-13 17:26:51 ----A---- C:\Windows\system32\Windows.Media.Ocr.dll
2017-04-13 17:26:50 ----A---- C:\Windows\system32\WinRtTracing.dll
2017-04-13 17:26:50 ----A---- C:\Windows\system32\Windows.Gaming.XboxLive.Storage.dll
2017-04-13 17:26:50 ----A---- C:\Windows\system32\Windows.Gaming.Input.dll
2017-04-13 17:26:50 ----A---- C:\Windows\system32\Windows.Devices.Perception.dll
2017-04-13 17:26:48 ----A---- C:\Windows\system32\Windows.ApplicationModel.dll
2017-04-13 17:26:48 ----A---- C:\Windows\system32\Windows.ApplicationModel.Core.dll
2017-04-13 17:26:47 ----A---- C:\Windows\system32\AppContracts.dll
2017-04-13 17:26:19 ----A---- C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2017-04-13 17:26:05 ----A---- C:\Windows\system32\XblAuthTokenBrokerExt.dll
2017-04-13 17:26:05 ----A---- C:\Windows\system32\XblAuthManagerProxy.dll
2017-04-13 17:26:05 ----A---- C:\Windows\system32\GamePanel.exe
2017-04-13 17:26:03 ----A---- C:\Windows\system32\xpsrchvw.exe
2017-04-13 17:26:03 ----A---- C:\Windows\system32\CertEnroll.dll
2017-04-13 17:25:59 ----A---- C:\Windows\system32\winsrv.dll
2017-04-13 17:25:58 ----A---- C:\Windows\system32\WindowsCodecs.dll
2017-04-13 17:25:58 ----A---- C:\Windows\system32\Windows.UI.dll
2017-04-13 17:25:58 ----A---- C:\Windows\system32\win32kfull.sys
2017-04-13 17:25:57 ----A---- C:\Windows\system32\Windows.Web.Http.dll
2017-04-13 17:25:57 ----A---- C:\Windows\system32\Windows.Web.dll
2017-04-13 17:25:57 ----A---- C:\Windows\system32\win32kbase.sys
2017-04-13 17:25:57 ----A---- C:\Windows\system32\WebcamUi.dll
2017-04-13 17:25:55 ----A---- C:\Windows\system32\WwaApi.dll
2017-04-13 17:25:55 ----A---- C:\Windows\system32\wuaueng.dll
2017-04-13 17:25:55 ----A---- C:\Windows\system32\Windows.ApplicationModel.Wallet.dll
2017-04-13 17:25:52 ----A---- C:\Windows\system32\wuuhext.dll
2017-04-13 17:25:52 ----A---- C:\Windows\system32\wuapi.dll
2017-04-13 17:25:52 ----A---- C:\Windows\system32\Windows.Web.Diagnostics.dll
2017-04-13 17:25:52 ----A---- C:\Windows\system32\Windows.UI.Input.Inking.dll
2017-04-13 17:25:52 ----A---- C:\Windows\system32\Windows.Devices.Scanners.dll
2017-04-13 17:25:51 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2017-04-13 17:25:51 ----A---- C:\Windows\system32\vss_ps.dll
2017-04-13 17:25:51 ----A---- C:\Windows\system32\StoreAgent.dll
2017-04-13 17:25:51 ----A---- C:\Windows\system32\InstallAgentUserBroker.exe
2017-04-13 17:25:51 ----A---- C:\Windows\system32\InstallAgent.exe
2017-04-13 17:25:50 ----A---- C:\Windows\system32\UserDeviceRegistration.Ngc.dll
2017-04-13 17:25:50 ----A---- C:\Windows\system32\UserDeviceRegistration.dll
2017-04-13 17:25:50 ----A---- C:\Windows\system32\updatepolicy.dll
2017-04-13 17:25:50 ----A---- C:\Windows\system32\UIRibbonRes.dll
2017-04-13 17:25:49 ----A---- C:\Windows\system32\Windows.UI.Xaml.Phone.dll
2017-04-13 17:25:49 ----A---- C:\Windows\system32\Windows.UI.Xaml.Maps.dll
2017-04-13 17:25:49 ----A---- C:\Windows\system32\Windows.UI.Xaml.InkControls.dll
2017-04-13 17:25:49 ----A---- C:\Windows\system32\Windows.UI.Search.dll
2017-04-13 17:25:48 ----A---- C:\Windows\system32\Windows.UI.Cred.dll
2017-04-13 17:25:48 ----A---- C:\Windows\system32\MusUpdateHandlers.dll
2017-04-13 17:25:48 ----A---- C:\Windows\system32\MusNotificationUx.exe
2017-04-13 17:25:46 ----A---- C:\Windows\system32\Windows.UI.BlockedShutdown.dll
2017-04-13 17:25:46 ----A---- C:\Windows\system32\usocore.dll
2017-04-13 17:25:46 ----A---- C:\Windows\system32\updatehandlers.dll
2017-04-13 17:25:46 ----A---- C:\Windows\system32\MusNotification.exe
2017-04-13 17:25:44 ----A---- C:\Windows\system32\musdialoghandlers.dll
2017-04-13 17:25:44 ----A---- C:\Windows\system32\diagtrack.dll
2017-04-13 17:25:43 ----A---- C:\Windows\system32\UserDataTimeUtil.dll
2017-04-13 17:25:43 ----A---- C:\Windows\system32\twinui.dll
2017-04-13 17:25:43 ----A---- C:\Windows\system32\EmailApis.dll
2017-04-13 17:25:42 ----A---- C:\Windows\system32\twinapi.appcore.dll
2017-04-13 17:25:42 ----A---- C:\Windows\system32\drivers\tcpip.sys
2017-04-13 17:25:41 ----A---- C:\Windows\system32\RdpRelayTransport.dll
2017-04-13 17:25:41 ----A---- C:\Windows\system32\rdpencom.dll
2017-04-13 17:25:40 ----A---- C:\Windows\system32\mstscax.dll
2017-04-13 17:25:39 ----A---- C:\Windows\system32\TSWorkspace.dll
2017-04-13 17:25:38 ----A---- C:\Windows\system32\Windows.System.SystemManagement.dll
2017-04-13 17:25:38 ----A---- C:\Windows\system32\Windows.ApplicationModel.Store.dll
2017-04-13 17:25:38 ----A---- C:\Windows\system32\SyncSettings.dll
2017-04-13 17:25:38 ----A---- C:\Windows\system32\sbe.dll
2017-04-13 17:25:37 ----A---- C:\Windows\system32\LicenseManager.dll
2017-04-13 17:25:36 ----A---- C:\Windows\system32\smartscreen.exe
2017-04-13 17:25:34 ----A---- C:\Windows\system32\shell32.dll
2017-04-13 17:25:34 ----A---- C:\Windows\system32\Family.Client.dll
2017-04-13 17:25:33 ----A---- C:\Windows\system32\Windows.Devices.Sensors.dll
2017-04-13 17:25:33 ----A---- C:\Windows\system32\SharedStartModel.dll
2017-04-13 17:25:33 ----A---- C:\Windows\system32\SettingSyncCore.dll
2017-04-13 17:25:33 ----A---- C:\Windows\system32\AzureSettingSyncProvider.dll
2017-04-13 17:25:32 ----A---- C:\Windows\system32\wscapi.dll
2017-04-13 17:25:32 ----A---- C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2017-04-13 17:25:32 ----A---- C:\Windows\system32\vaultcli.dll
2017-04-13 17:25:32 ----A---- C:\Windows\system32\TokenBrokerUI.dll
2017-04-13 17:25:32 ----A---- C:\Windows\system32\TokenBroker.dll
2017-04-13 17:25:31 ----A---- C:\Windows\system32\LsaIso.exe
2017-04-13 17:25:31 ----A---- C:\Windows\system32\kerberos.dll
2017-04-13 17:25:31 ----A---- C:\Windows\system32\aadtb.dll
2017-04-13 17:25:30 ----A---- C:\Windows\system32\Windows.Security.Credentials.UI.CredentialPicker.dll
2017-04-13 17:25:30 ----A---- C:\Windows\system32\sppobjs.dll
2017-04-13 17:25:30 ----A---- C:\Windows\system32\Chakra.dll
2017-04-13 17:25:28 ----A---- C:\Windows\system32\aadcloudap.dll
2017-04-13 17:25:27 ----A---- C:\Windows\system32\SettingsHandlers_nt.dll
2017-04-13 17:25:26 ----A---- C:\Windows\system32\SettingsHandlers_ClosedCaptioning.dll
2017-04-13 17:25:26 ----A---- C:\Windows\system32\OneBackupHandler.dll
2017-04-13 17:25:23 ----A---- C:\Windows\system32\SystemSettings.DeviceEncryptionHandlers.dll
2017-04-13 17:25:22 ----A---- C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2017-04-13 17:25:22 ----A---- C:\Windows\system32\DeveloperOptionsSettingsHandlers.dll
2017-04-13 17:25:20 ----A---- C:\Windows\system32\Family.SyncEngine.dll
2017-04-13 17:25:20 ----A---- C:\Windows\system32\efswrt.dll
2017-04-13 17:25:19 ----A---- C:\Windows\system32\SystemSettingsAdminFlows.exe
2017-04-13 17:25:14 ----A---- C:\Windows\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-04-13 17:25:12 ----A---- C:\Windows\system32\RDXTaskFactory.dll
2017-04-13 17:25:11 ----A---- C:\Windows\system32\Windows.Media.dll
2017-04-13 17:25:11 ----A---- C:\Windows\system32\RTMediaFrame.dll
2017-04-13 17:25:08 ----A---- C:\Windows\system32\Windows.Media.Editing.dll
2017-04-13 17:25:08 ----A---- C:\Windows\system32\rdpudd.dll
2017-04-13 17:25:08 ----A---- C:\Windows\system32\rdpcorets.dll
2017-04-13 17:25:06 ----A---- C:\Windows\system32\RDXService.dll
2017-04-13 17:25:06 ----A---- C:\Windows\system32\qedit.dll
2017-04-13 17:25:06 ----A---- C:\Windows\system32\psmsrv.dll
2017-04-13 17:25:05 ----A---- C:\Windows\system32\Windows.Graphics.Printing.dll
2017-04-13 17:25:05 ----A---- C:\Windows\system32\Windows.Graphics.Printing.3D.dll
2017-04-13 17:25:05 ----A---- C:\Windows\system32\PlayToReceiver.dll
2017-04-13 17:25:04 ----A---- C:\Windows\system32\Windows.Perception.Stub.dll
2017-04-13 17:25:04 ----A---- C:\Windows\system32\PlayToManager.dll
2017-04-13 17:25:04 ----A---- C:\Windows\system32\PlayToDevice.dll
2017-04-13 17:25:03 ----A---- C:\Windows\system32\wpnapps.dll
2017-04-13 17:25:01 ----A---- C:\Windows\system32\localspl.dll
2017-04-13 17:24:59 ----A---- C:\Windows\system32\wpninprc.dll
2017-04-13 17:24:59 ----A---- C:\Windows\system32\WpcWebFilter.dll
2017-04-13 17:24:59 ----A---- C:\Windows\system32\puiobj.dll
2017-04-13 17:24:57 ----A---- C:\Windows\system32\oleacc.dll
2017-04-13 17:24:57 ----A---- C:\Windows\system32\ntoskrnl.exe
2017-04-13 17:24:56 ----A---- C:\Windows\system32\oleaut32.dll
2017-04-13 17:24:56 ----A---- C:\Windows\system32\AuthBroker.dll
2017-04-13 17:24:56 ----A---- C:\Windows\system32\asycfilt.dll
2017-04-13 17:24:54 ----A---- C:\Windows\system32\Windows.Networking.dll
2017-04-13 17:24:53 ----A---- C:\Windows\system32\NetworkBindingEngineMigPlugin.dll
2017-04-13 17:24:52 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2017-04-13 17:24:52 ----A---- C:\Windows\system32\drivers\ndis.sys
2017-04-13 17:24:51 ----A---- C:\Windows\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-04-13 17:24:48 ----A---- C:\Windows\system32\Windows.Networking.Connectivity.dll
2017-04-13 17:24:45 ----A---- C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2017-04-13 17:24:45 ----A---- C:\Windows\system32\msxml6.dll
2017-04-13 17:24:45 ----A---- C:\Windows\system32\MSVP9DEC.dll
2017-04-13 17:24:42 ----A---- C:\Windows\system32\SensorsApi.dll
2017-04-13 17:24:42 ----A---- C:\Windows\system32\MiracastReceiver.dll
2017-04-13 17:24:41 ----A---- C:\Windows\system32\mfsrcsnk.dll
2017-04-13 17:24:40 ----A---- C:\Windows\system32\mfnetcore.dll
2017-04-13 17:24:40 ----A---- C:\Windows\system32\mfmpeg2srcsnk.dll
2017-04-13 17:24:40 ----A---- C:\Windows\system32\mfmp4srcsnk.dll
2017-04-13 17:24:40 ----A---- C:\Windows\system32\mfmjpegdec.dll
2017-04-13 17:24:40 ----A---- C:\Windows\system32\mfcore.dll
2017-04-13 17:24:39 ----A---- C:\Windows\system32\wmpps.dll
2017-04-13 17:24:39 ----A---- C:\Windows\system32\Windows.Media.Streaming.dll
2017-04-13 17:24:39 ----A---- C:\Windows\system32\Windows.Media.Import.dll
2017-04-13 17:24:39 ----A---- C:\Windows\system32\mfasfsrcsnk.dll
2017-04-13 17:24:38 ----A---- C:\Windows\system32\Windows.Media.Devices.dll
2017-04-13 17:24:38 ----A---- C:\Windows\system32\Windows.Media.Audio.dll
2017-04-13 17:24:38 ----A---- C:\Windows\system32\MCRecvSrc.dll
2017-04-13 17:24:38 ----A---- C:\Windows\system32\AccountsRt.dll
2017-04-13 17:24:37 ----A---- C:\Windows\system32\mos.dll
2017-04-13 17:24:35 ----A---- C:\Windows\system32\odbcconf.dll
2017-04-13 17:24:33 ----A---- C:\Windows\system32\windows.storage.dll
2017-04-13 17:24:33 ----A---- C:\Windows\system32\mbsmsapi.dll
2017-04-13 17:24:32 ----A---- C:\Windows\system32\MFMediaEngine.dll
2017-04-13 17:24:32 ----A---- C:\Windows\system32\MbaeApiPublic.dll
2017-04-13 17:24:30 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2017-04-13 17:24:30 ----A---- C:\Windows\system32\drivers\cng.sys
2017-04-13 17:24:29 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2017-04-13 17:24:29 ----A---- C:\Windows\system32\AboveLockAppHost.dll
2017-04-13 17:24:19 ----A---- C:\Windows\system32\KernelBase.dll
2017-04-13 17:24:10 ----A---- C:\Windows\system32\Windows.Internal.Bluetooth.dll
2017-04-13 17:24:04 ----A---- C:\Windows\system32\ieframe.dll
2017-04-13 17:24:03 ----A---- C:\Windows\system32\webcheck.dll
2017-04-13 17:24:03 ----A---- C:\Windows\system32\iertutil.dll
2017-04-13 17:24:03 ----A---- C:\Windows\system32\ie4uinit.exe
2017-04-13 17:24:02 ----A---- C:\Windows\system32\indexeddbserver.dll
2017-04-13 17:24:00 ----A---- C:\Windows\system32\mshtmled.dll
2017-04-13 17:24:00 ----A---- C:\Windows\system32\msfeeds.dll
2017-04-13 17:24:00 ----A---- C:\Windows\system32\edgehtml.dll
2017-04-13 17:23:59 ----A---- C:\Windows\system32\iedkcs32.dll
2017-04-13 17:23:59 ----A---- C:\Windows\system32\ieapfltr.dll
2017-04-13 17:23:59 ----A---- C:\Windows\system32\dxtrans.dll
2017-04-13 17:23:57 ----A---- C:\Windows\system32\wininet.dll
2017-04-13 17:23:52 ----A---- C:\Windows\system32\mshtml.dll
2017-04-13 17:23:31 ----A---- C:\Windows\system32\urlmon.dll
2017-04-13 17:23:28 ----A---- C:\Windows\HelpPane.exe
2017-04-13 17:23:23 ----A---- C:\Windows\system32\Windows.Globalization.dll
2017-04-13 17:23:22 ----A---- C:\Windows\system32\Geolocation.dll
2017-04-13 17:23:22 ----A---- C:\Windows\system32\gdi32full.dll
2017-04-13 17:23:22 ----A---- C:\Windows\system32\fontdrvhost.exe
2017-04-13 17:23:22 ----A---- C:\Windows\system32\atmlib.dll
2017-04-13 17:23:22 ----A---- C:\Windows\system32\atmfd.dll
2017-04-13 17:23:20 ----A---- C:\Windows\system32\flvprophandler.dll
2017-04-13 17:23:20 ----A---- C:\Windows\system32\FlightSettings.dll
2017-04-13 17:23:13 ----A---- C:\Windows\system32\wer.dll
2017-04-13 17:23:13 ----A---- C:\Windows\system32\enrollmentapi.dll
2017-04-13 17:23:12 ----A---- C:\Windows\system32\WpAXHolder.dll
2017-04-13 17:23:10 ----A---- C:\Windows\system32\Windows.Internal.Management.dll
2017-04-13 17:23:09 ----A---- C:\Windows\system32\DisplayManager.dll
2017-04-13 17:23:08 ----A---- C:\Windows\system32\D3DCompiler_47.dll
2017-04-13 17:23:06 ----A---- C:\Windows\system32\Windows.Devices.WiFiDirect.dll
2017-04-13 17:23:06 ----A---- C:\Windows\system32\Windows.Devices.WiFi.dll
2017-04-13 17:23:06 ----A---- C:\Windows\system32\Windows.Devices.Usb.dll
2017-04-13 17:23:06 ----A---- C:\Windows\system32\Windows.Devices.Radios.dll
2017-04-13 17:23:06 ----A---- C:\Windows\system32\quartz.dll
2017-04-13 17:23:05 ----A---- C:\Windows\system32\Windows.Devices.Printers.dll
2017-04-13 17:23:05 ----A---- C:\Windows\system32\Windows.Devices.Midi.dll
2017-04-13 17:23:05 ----A---- C:\Windows\system32\Windows.Devices.LowLevel.dll
2017-04-13 17:23:05 ----A---- C:\Windows\system32\Windows.Devices.Lights.dll
2017-04-13 17:23:05 ----A---- C:\Windows\system32\Windows.Devices.Bluetooth.dll
2017-04-13 17:23:04 ----A---- C:\Windows\system32\dosvc.dll
2017-04-13 17:23:02 ----A---- C:\Windows\system32\Windows.Data.Pdf.dll
2017-04-13 17:23:01 ----A---- C:\Windows\system32\Windows.Devices.SmartCards.Phone.dll
2017-04-13 17:23:01 ----A---- C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2017-04-13 17:23:01 ----A---- C:\Windows\system32\FontProvider.dll
2017-04-13 17:23:01 ----A---- C:\Windows\system32\d2d1.dll
2017-04-13 17:23:00 ----A---- C:\Windows\system32\Windows.Devices.PointOfService.dll
2017-04-13 17:23:00 ----A---- C:\Windows\system32\enterprisecsps.dll
2017-04-13 17:22:58 ----A---- C:\Windows\system32\Windows.Devices.SmartCards.dll
2017-04-13 17:22:58 ----A---- C:\Windows\system32\Windows.Devices.Picker.dll
2017-04-13 17:22:57 ----A---- C:\Windows\system32\DeviceDirectoryClient.dll
2017-04-13 17:22:57 ----A---- C:\Windows\system32\DdcWnsListener.dll
2017-04-13 17:22:56 ----A---- C:\Windows\system32\Windows.Devices.SerialCommunication.dll
2017-04-13 17:22:56 ----A---- C:\Windows\system32\dafpos.dll
2017-04-13 17:22:55 ----A---- C:\Windows\system32\dmcertinst.exe
2017-04-13 17:22:55 ----A---- C:\Windows\system32\CryptoWinRT.dll
2017-04-13 17:22:54 ----A---- C:\Windows\system32\CoreUIComponents.dll
2017-04-13 17:22:54 ----A---- C:\Windows\system32\appraiser.dll
2017-04-13 17:22:54 ----A---- C:\Windows\system32\acmigration.dll
2017-04-13 17:22:51 ----A---- C:\Windows\system32\WinTypes.dll
2017-04-13 17:22:51 ----A---- C:\Windows\system32\msdtctm.dll
2017-04-13 17:22:50 ----A---- C:\Windows\system32\ole32.dll
2017-04-13 17:22:50 ----A---- C:\Windows\system32\CloudExperienceHost.dll
2017-04-13 17:22:48 ----A---- C:\Windows\system32\CloudExperienceHostBroker.dll
2017-04-13 17:22:48 ----A---- C:\Windows\system32\cdp.dll
2017-04-13 17:22:48 ----A---- C:\Windows\system32\CastLaunch.dll
2017-04-13 17:22:46 ----A---- C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2017-04-13 17:22:44 ----A---- C:\Windows\system32\CompPkgSup.dll
2017-04-13 17:22:33 ----A---- C:\Windows\system32\CellularAPI.dll
2017-04-13 17:22:32 ----A---- C:\Windows\system32\CloudDomainJoinDataModelServer.dll
2017-04-13 17:22:16 ----A---- C:\Windows\system32\Windows.Media.MediaControl.dll
2017-04-13 17:22:16 ----A---- C:\Windows\system32\AppXDeploymentServer.dll
2017-04-13 17:22:16 ----A---- C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2017-04-13 17:22:16 ----A---- C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2017-04-13 17:22:15 ----A---- C:\Windows\system32\Windows.Devices.AllJoyn.dll
2017-04-13 17:22:15 ----A---- C:\Windows\system32\AppXDeploymentClient.dll
2017-04-13 17:22:15 ----A---- C:\Windows\system32\apprepsync.dll
2017-04-13 17:22:15 ----A---- C:\Windows\system32\apprepapi.dll
2017-04-13 17:22:15 ----A---- C:\Windows\system32\actxprxy.dll
2017-04-13 17:22:13 ----A---- C:\Windows\system32\Windows.AccountsControl.dll
2017-04-13 17:22:12 ----A---- C:\Windows\system32\invagent.dll
2017-04-13 17:22:12 ----A---- C:\Windows\system32\devinv.dll
2017-04-13 17:22:11 ----A---- C:\Windows\system32\aeinv.dll
2017-04-13 17:22:10 ----A---- C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2017-04-13 17:22:07 ----A---- C:\Windows\system32\UserMgrProxy.dll
2017-04-13 17:22:06 ----A---- C:\Windows\system32\ShareHost.dll
2017-04-13 17:22:06 ----A---- C:\Windows\system32\dlnashext.dll
2017-04-13 17:22:06 ----A---- C:\Windows\system32\deviceaccess.dll
2017-04-13 17:22:06 ----A---- C:\Windows\system32\CoreMessaging.dll
2017-04-13 17:22:05 ----A---- C:\Windows\system32\CloudExperienceHostUser.dll
2017-04-13 17:22:05 ----A---- C:\Windows\system32\CloudExperienceHostCommon.dll
2017-04-13 17:21:56 ----A---- C:\Windows\system32\hvix64.exe
2017-04-13 17:21:55 ----A---- C:\Windows\system32\hvax64.exe
2017-04-13 17:21:52 ----A---- C:\Windows\system32\ErrorDetails.dll
2017-04-13 17:21:52 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2017-04-13 17:20:54 ----A---- C:\Windows\system32\drivers\BasicRender.sys
2017-04-13 17:20:54 ----A---- C:\Windows\system32\drivers\BasicDisplay.sys
2017-04-11 22:08:41 ----N---- C:\Windows\system32\MpSigStub.exe
2017-03-22 05:57:48 ----A---- C:\Windows\system32\drivers\dbx-stable.sys
2017-03-22 05:57:48 ----A---- C:\Windows\system32\drivers\dbx-dev.sys
2017-03-22 05:57:48 ----A---- C:\Windows\system32\drivers\dbx-canary.sys

====== List of files/folders modified in the last 1 month ======

2017-04-20 19:31:35 ----D---- C:\Windows\Prefetch
2017-04-20 19:31:30 ----RD---- C:\Program Files
2017-04-20 19:31:11 ----D---- C:\Windows\system32\sru
2017-04-20 19:27:06 ----D---- C:\Windows
2017-04-20 19:26:50 ----D---- C:\Windows\System32
2017-04-20 19:26:50 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-04-20 19:24:50 ----D---- C:\Windows\Temp
2017-04-20 19:22:24 ----D---- C:\Windows\system32\Tasks
2017-04-20 19:12:57 ----D---- C:\Windows\INF
2017-04-20 18:50:56 ----HD---- C:\ProgramData
2017-04-20 18:50:52 ----RD---- C:\Program Files (x86)
2017-04-20 18:48:03 ----AD---- C:\Windows\system32\drivers
2017-04-20 18:30:15 ----D---- C:\Windows\Tasks
2017-04-20 18:08:20 ----SHD---- C:\System Volume Information
2017-04-20 18:08:08 ----D---- C:\Windows\Logs
2017-04-20 17:57:24 ----D---- C:\Program Files (x86)\Common Files
2017-04-20 17:57:23 ----D---- C:\Program Files (x86)\Internet Explorer
2017-04-20 17:55:01 ----SHD---- C:\Windows\Installer
2017-04-20 17:54:56 ----SHD---- C:\Config.Msi
2017-04-20 16:49:52 ----D---- C:\Windows\AppReadiness
2017-04-20 16:46:12 ----D---- C:\Windows\system32\SleepStudy
2017-04-19 22:29:40 ----SD---- C:\Users\Sonidla\AppData\Roaming\Microsoft
2017-04-19 16:37:00 ----RD---- C:\Windows\Microsoft.NET
2017-04-19 12:54:11 ----HD---- C:\Program Files\WindowsApps
2017-04-19 07:03:03 ----D---- C:\Windows\system32\catroot2
2017-04-18 23:13:28 ----D---- C:\Windows\system32\config
2017-04-17 13:09:59 ----D---- C:\Windows\system32\DriverStore
2017-04-16 17:33:16 ----D---- C:\Windows\WinSxS
2017-04-14 20:15:17 ----D---- C:\Program Files (x86)\Dropbox
2017-04-14 10:55:30 ----D---- C:\Windows\rescache
2017-04-14 10:10:14 ----RSD---- C:\Windows\assembly
2017-04-14 00:55:02 ----SD---- C:\Windows\SYSWOW64\F12
2017-04-14 00:55:02 ----D---- C:\Windows\SYSWOW64\sr-Latn-CS
2017-04-14 00:55:02 ----D---- C:\Windows\SYSWOW64\setup
2017-04-14 00:55:02 ----D---- C:\Windows\SYSWOW64\cs-CZ
2017-04-14 00:55:02 ----D---- C:\Windows\SysWOW64
2017-04-14 00:54:53 ----D---- C:\Windows\system32\wbem
2017-04-14 00:54:53 ----D---- C:\Windows\system32\sr-Latn-CS
2017-04-14 00:54:52 ----SD---- C:\Windows\system32\F12
2017-04-14 00:54:52 ----D---- C:\Windows\system32\setup
2017-04-14 00:54:52 ----D---- C:\Windows\system32\migration
2017-04-14 00:54:52 ----D---- C:\Windows\system32\Dism
2017-04-14 00:54:52 ----D---- C:\Windows\system32\cs-CZ
2017-04-14 00:54:52 ----D---- C:\Windows\system32\appraiser
2017-04-14 00:54:51 ----D---- C:\Windows\ShellExperiences
2017-04-14 00:54:50 ----D---- C:\Windows\Provisioning
2017-04-14 00:54:48 ----RD---- C:\Windows\ImmersiveControlPanel
2017-04-14 00:54:48 ----D---- C:\Program Files\Windows Photo Viewer
2017-04-14 00:54:48 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2017-04-14 00:54:48 ----D---- C:\Program Files (x86)\Windows Defender
2017-04-14 00:54:47 ----RD---- C:\Program Files\Windows Defender
2017-04-13 23:37:00 ----D---- C:\Windows\CbsTemp
2017-04-13 18:37:15 ----D---- C:\Program Files (x86)\Google
2017-04-13 17:45:04 ----D---- C:\Windows\Panther
2017-04-13 17:45:03 ----D---- C:\Windows\Minidump
2017-04-13 17:45:03 ----D---- C:\Windows\LiveKernelReports
2017-04-13 17:45:03 ----D---- C:\Windows\debug
2017-04-12 14:09:33 ----D---- C:\Windows\system32\MRT
2017-04-12 13:57:28 ----AC---- C:\Windows\system32\MRT.exe
2017-04-11 22:02:45 ----D---- C:\Program Files\Common Files\McAfee
2017-04-11 22:02:45 ----AD---- C:\Program Files\mcafee
2017-04-11 22:01:53 ----D---- C:\Windows\system32\CatRoot
2017-04-11 21:50:40 ----AD---- C:\Program Files (x86)\Microsoft Office
2017-04-05 14:24:46 ----AD---- C:\ProgramData\regid.1991-06.com.microsoft
2017-04-01 20:52:38 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2017-03-29 18:22:36 ----HD---- C:\Windows\ELAMBKUP
2017-03-28 13:59:13 ----D---- C:\Program Files\Common Files\AV
2017-03-28 08:20:43 ----A---- C:\Windows\SYSWOW64\PrintConfig.dll
2017-03-25 15:32:19 ----D---- C:\Windows\OCR
2017-03-21 23:49:58 ----D---- C:\ProgramData\PCDr

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

====== List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R0 iaStorA;iaStorA; C:\Windows\System32\drivers\iaStorA.sys [2016-09-20 795640]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-100; C:\Windows\system32\drivers\iorate.sys [2016-11-02 48992]
R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\Windows\System32\drivers\registry.sys [2016-07-16 70144]
R2 DpmLiteDrv;DpmLiteDrv; \??\c:\Program Files\Dell\QuickSet\DpmLiteDrv64.sys [2014-10-15 15080]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\drivers\BTHUSB.sys [2017-01-12 84992]
R3 DDDriver;DDDriver; C:\Windows\system32\drivers\DDDriver64Dcsa.sys [2016-10-13 32352]
R3 DellProf;DellProf; C:\Windows\system32\drivers\DellProf.sys [2016-10-13 32952]
R3 dptf_acpi;dptf_acpi; C:\Windows\System32\drivers\dptf_acpi.sys [2017-01-06 79928]
R3 dptf_cpu;dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [2017-01-06 75320]
R3 esif_lf;esif_lf; C:\Windows\System32\drivers\esif_lf.sys [2017-01-06 358968]
R3 HID_PCI;@oem29.inf,%HID_PCI%;HID PCI Minidriver for ISS; C:\Windows\System32\drivers\HID_PCI.sys [2016-05-24 30816]
R3 HidEventFilter;@oem53.inf,%HidEventFilter%;Intel(R) HID Event Filter; C:\Windows\System32\drivers\HidEventFilter.sys [2017-01-12 63496]
R3 iaLPSS2_GPIO2;@oem6.inf,%iaLPSS2_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2_GPIO2.sys [2017-02-15 98608]
R3 iaLPSS2_I2C;@oem46.inf,%iaLPSS2_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2_I2C.sys [2017-02-15 193328]
R3 ibtusb;@oem43.inf,%ibtusb.SVCDESC_IBT%;Intel(R) Wireless Bluetooth(R); C:\Windows\system32\DRIVERS\ibtusb.sys [2016-11-16 356608]
R3 ISH;@oem31.inf,%TEE_SvcDesc%;Intel(R) Integrated Sensor Solution ; C:\Windows\System32\drivers\ISH.sys [2016-06-05 140896]
R3 ISH_BusDriver;@oem30.inf,%ISH_BusDriver.SVCDESC%; ISS Bus Enumerator; C:\Windows\System32\drivers\ISH_BusDriver.sys [2016-06-08 78432]
R3 Netwtw04;___ Intel(R) Wireless Adapter Driver for Windows 10 - 64 Bit; C:\Windows\System32\drivers\Netwtw04.sys [2016-07-16 7116288]
R3 SensorsHIDClassDriver;@SensorsHidClassDriver.inf,%WudfSensorsHIDClassDriverDisplayName%;UMDF Reflector service for Sensors HID Class Driver; C:\Windows\System32\drivers\WUDFRd.sys [2016-07-16 216064]
S0 megasas2i;megasas2i; C:\Windows\System32\drivers\MegaSas2i.sys [2017-01-12 64352]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\Windows\System32\drivers\scmbus.sys [2016-07-16 88416]
S1 cryptfd;cryptfd; C:\Windows\system32\drivers\cryptfd.sys [2017-03-03 193448]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\Windows\System32\drivers\AcpiDev.sys [2016-07-16 18432]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\Windows\system32\drivers\applockerfltr.sys [2016-07-16 15360]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\Windows\System32\drivers\BthEnum.sys [2017-01-12 114176]
S3 BthLEEnum;@BthLEEnum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\Windows\system32\DRIVERS\BthLEEnum.sys [2017-01-12 249856]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\System32\drivers\bthpan.sys [2017-01-12 128512]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\Windows\System32\drivers\BTHport.sys [2016-11-11 967168]
S3 dbx;dbx; C:\Windows\system32\DRIVERS\dbx.sys []
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\Windows\system32\drivers\hvservice.sys [2017-01-12 73568]
S3 cht4iscsi;cht4iscsi; C:\Windows\System32\drivers\cht4sx64.sys [2016-07-16 346976]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\Windows\System32\drivers\cht4vx64.sys [2016-07-16 2104160]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\Windows\System32\drivers\iagpio.sys [2016-07-16 33280]
S3 iaLPSS2_SPI;@oem8.inf,%iaLPSS2_SPI.SVCDESC%;Intel(R) Serial IO SPI Driver v2; C:\Windows\System32\drivers\iaLPSS2_SPI.sys [2016-05-17 152376]
S3 iaLPSS2_UART2;@oem9.inf,%iaLPSS2_UART2.SVCDESC%;Intel(R) Serial IO UART Driver v2; C:\Windows\System32\drivers\iaLPSS2_UART2.sys [2016-05-17 281400]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2.sys [2016-07-16 64512]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\Windows\System32\drivers\IndirectKmd.sys [2016-07-16 35840]
S3 irda;IrDA; C:\Windows\system32\drivers\irda.sys [2016-07-16 120320]
S3 mfeaack;McAfee Inc. mfeaack; C:\Windows\system32\drivers\mfeaack.sys [2017-01-20 487184]
S3 mfencrk;McAfee Inc. mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [2017-01-19 109320]
S3 mfeplk;McAfee Inc. mfeplk; C:\Windows\system32\drivers\mfeplk.sys [2017-01-20 110256]
S3 mfesapsn;McAfee Process Start Notification Service; \??\C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys []
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\Windows\system32\drivers\NetAdapterCx.sys [2016-07-16 90624]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\System32\drivers\rfcomm.sys [2016-07-16 183808]
S3 RTSUER;@oem10.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\Windows\system32\Drivers\RtsUer.sys [2015-12-22 413912]
S3 rtux64w10;@oem0.inf,%Rtlunic.Service.DispName%;Realtek USB FE/GbE NIC Family Windows 10 64-bit Driver; C:\Windows\System32\drivers\rtux64w10.sys [2015-12-23 343808]
S3 scmdisk0101;@scmdisk0101.inf,%scmdisk0101.SvcDesc%;Microsoft NVDIMM-N disk driver; C:\Windows\System32\drivers\scmdisk0101.sys [2016-07-16 123904]

====== List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R2 CDPUserSvc_5412e;CDPUserSvc_5412e; C:\Windows\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R2 ClickToRunSvc;Služba Microsoft Office Klikni a spusť; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2017-03-26 3737792]
R2 cplspcon;Intel(R) Content Protection HDCP Service; C:\Windows\System32\DriverStore\FileRepository\k120130.inf_amd64_299d0c74ec099c32\IntelCpHDCPSvc.exe [2017-01-03 480216]
R2 DbxSvc;DbxSvc; C:\Windows\system32\DbxSvc.exe [2017-04-14 46408]
R2 Dell Customer Connect;Dell Customer Connect; C:\Program Files (x86)\Dell Customer Connect\DCCService.exe [2016-12-21 130936]
R2 Dell Foundation Services;Dell Foundation Services; C:\Program Files\Dell\Dell Foundation Services\DFSSvc.exe [2017-01-11 97616]
R2 DellDataVault;Dell Data Vault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2016-10-13 2572024]
R2 DellDataVaultWiz;Dell Data Vault Wizard; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [2016-10-13 202488]
R2 DellDigitalDelivery;Dell Digital Delivery Service; c:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe [2016-05-02 217976]
R2 DellUpdate;Dell Update Service; C:\Program Files (x86)\Dell Update\DellUpService.exe [2016-09-22 230248]
R2 esifsvc;@oem24.inf,%ServiceDisplayName%;ESIF Upper Framework Service; C:\Windows\system32\Intel\DPTF\esif_uf.exe [2017-01-06 2223864]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2016-02-08 640928]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2016-09-20 17976]
R2 ibtsiva;@oem43.inf,%SERVICE_NAME%;Intel Bluetooth Service; C:\Windows\system32\ibtsiva []
R2 isaHelperSvc;Intel(R) Security Assist Helper; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [2016-03-02 8704]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2016-05-16 215328]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2016-05-16 419104]
R2 OneSyncSvc_5412e;Hostitel synchronizace_5412e; C:\Windows\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R2 PEFService;Intel Security PEF Service; C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe [2016-11-15 1104304]
R2 Product Registration;Product Registration; C:\Program Files\Dell\Dell Product Registration\PRSvc.exe [2016-09-22 80208]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2016-02-08 157088]
R2 SupportAssistAgent;Dell SupportAssist Agent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [2016-10-24 31704]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2016-05-25 43696]
R3 TimeBrokerSvc;@%windir%\system32\TimeBrokerServer.dll,-1001; %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\TimeBrokerServer.dll
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" = %SystemRoot%\System32\CDPUserSvc.dll
S2 dbupdate;Dropbox Update Service (dbupdate); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-03-09 143144]
S3 602XML Updater;602Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [2011-10-10 85344]
S3 dbupdatem;Dropbox Update Service (dbupdatem); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-03-09 143144]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; %SystemRoot%\System32\svchost.exe -k Camera;"ServiceDll" = %SystemRoot%\system32\FrameServer.dll
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2017-03-09 194032]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\hvhostsvc.dll
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2016-02-19 974632]
S3 Intel(R) Security Assist;Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [2016-03-02 335872]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\irmon.dll
S3 MessagingService_5412e;Služba zasílání zpráv_5412e; C:\Windows\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2016-02-08 268192]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2017-03-25 198192]
S3 PimIndexMaintenanceSvc_5412e;Data kontaktů_5412e; C:\Windows\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\RMapi.dll
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; %SystemRoot%\System32\svchost.exe -k netsvcs;"ServiceDll" = %systemroot%\system32\Windows.SharedPC.AccountManager.dll

-----------------EOF-----------------

Zdravím!
Dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 . Pokud budu mazat z RSIT, riskuji v desítkách poškození systému.

Problém se týká toho, že v Internet Exploreru se místo domovské stránky při prvotním načtení zobrazuje nějaká reklamní stránka, patrně čínská.
A nejde to změnit.

FRST log:
==========================================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19-04-2017
Ran by Sonidla (administrator) on DESKTOP-V4OE7ON (20-04-2017 21:16:22)
Running from C:\Users\Sonidla\Desktop
Loaded Profiles: Sonidla (Available Profiles: defaultuser0 & Sonidla)
Platform: Windows 10 Home Version 1607 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\wscript.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\k120130.inf_amd64_299d0c74ec099c32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\k120130.inf_amd64_299d0c74ec099c32\IntelCpHDCPSvc.exe
(Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe
(Intel Security, Inc.) C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\k120130.inf_amd64_299d0c74ec099c32\igfxEM.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Dell Inc.) C:\Program Files (x86)\Dell Customer Connect\DCCService.exe
(Dell) C:\Program Files\Dell\Dell Foundation Services\DFSSvc.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe
(Dell Products, LP.) C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpService.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpTray.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Dell) C:\Program Files\Dell\Dell Product Registration\PRSvc.exe
(Dell Inc.) C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe
(Dell) C:\Program Files\Dell\Dell Foundation Services\DFS.Common.Agent.exe
(PC-Doctor, Inc.) C:\Program Files\Dell\SupportAssist\uaclauncher.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(forum.viry.cz) C:\Users\Sonidla\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [3893296 2016-05-17] (Dell Inc.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9080848 2016-11-22] (Realtek Semiconductor)
HKLM\...\Run: [WavesSvc] => c:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [940976 2016-11-19] (Waves Audio Ltd.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320568 2016-09-20] (Intel Corporation)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2017-03-28] (Microsoft Corporation)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [28344776 2017-04-17] (Dropbox, Inc.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-413214280-1799941555-775631740-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Sonidla\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-413214280-1799941555-775631740-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Sonidla\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
HKU\S-1-5-21-413214280-1799941555-775631740-1001\...\Run: [Pritc] => C:\Users\Sonidla\AppData\Local\Temp\is-4EHC7.tmp\Setup.exe [1429504 2017-04-20] () <===== ATTENTION
ShellExecuteHooks: No Name - {5F51FFFE-7463-4220-B711-E5B9ACB8EDFE} - -> No File
ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-04-17] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-04-17] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-04-17] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-04-17] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-04-17] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-04-17] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-04-17] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-04-17] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-04-17] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-04-17] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [KzShlobj] -> {AAA0C5B8-933F-4200-93AD-B143D7FFF9F2} => -> No File
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-04-17] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-04-17] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-04-17] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-04-17] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-04-17] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-04-17] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-04-17] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-04-17] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-04-17] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-04-17] (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{52356055-40bb-4d2b-b7f2-251693b84c21}: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{6bfa3b06-add9-4152-8f24-1bb31d0a1a0f}: [DhcpNameServer] 172.141.1.171

Internet Explorer:
==================
HKU\S-1-5-21-413214280-1799941555-775631740-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/
HKU\S-1-5-21-413214280-1799941555-775631740-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell17win10.msn.com/?pc=DCTE
SearchScopes: HKU\S-1-5-21-413214280-1799941555-775631740-1001 -> DefaultScope {5EE31285-3F3F-4A38-A73D-114126779DBB} URL =
SearchScopes: HKU\S-1-5-21-413214280-1799941555-775631740-1001 -> {08CA4986-0763-4E74-A37B-76F0AD8FABE5} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-413214280-1799941555-775631740-1001 -> {0B0EFA12-A143-4059-B433-06026C6A0101} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_16194
SearchScopes: HKU\S-1-5-21-413214280-1799941555-775631740-1001 -> {2024C7A5-2092-4E85-8065-F7BF71867DA6} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_16194
SearchScopes: HKU\S-1-5-21-413214280-1799941555-775631740-1001 -> {3917CEB3-9A77-41FB-A4F0-526681778ACB} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_16194
SearchScopes: HKU\S-1-5-21-413214280-1799941555-775631740-1001 -> {5514DFEB-71E0-41BC-89DF-878884FEC631} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_16194
SearchScopes: HKU\S-1-5-21-413214280-1799941555-775631740-1001 -> {5EE31285-3F3F-4A38-A73D-114126779DBB} URL =
SearchScopes: HKU\S-1-5-21-413214280-1799941555-775631740-1001 -> {6EAD74A2-56B7-4338-9A77-6FA3D9D9E8E5} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-413214280-1799941555-775631740-1001 -> {AB0FE4B8-D364-463F-89FD-5458958CD55F} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-413214280-1799941555-775631740-1001 -> {B79246B4-8ACF-4C38-8A9D-80FEDBCAEDB4} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_16194
SearchScopes: HKU\S-1-5-21-413214280-1799941555-775631740-1001 -> {F9B2359B-E439-4AFE-B111-75C92E155802} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_16194
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-03-06] (Microsoft Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-03-09] (Google Inc.)
BHO: No Name -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> No File
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-03-06] (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2017-03-09] (Google Inc.)
BHO-x32: No Name -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-03-09] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2017-03-09] (Google Inc.)
Toolbar: HKU\S-1-5-21-413214280-1799941555-775631740-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-03-09] (Google Inc.)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-03-06] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-03-06] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-03-06] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-03-06] (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File

FireFox:
========
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi => not found
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi => not found
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-03-06] (Microsoft Corporation)
FF Plugin-x32: @pptv.com/plugin -> C:\Program Files (x86)\Internet Explorer\PPLite\plugin\4.0.3.0056\nppluginEx.dll [2017-03-10] (PPLive Corporation)
FF Plugin-x32: @software602.cz/602XML Filler -> C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll [2012-08-06] (Software602 a.s.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-13] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-13] (Google Inc.)

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3737792 2017-03-26] (Microsoft Corporation)
S3 cphs; C:\Windows\System32\DriverStore\FileRepository\k120130.inf_amd64_299d0c74ec099c32\IntelCpHeciSvc.exe [302552 2017-01-03] (Intel Corporation)
R2 cplspcon; C:\Windows\System32\DriverStore\FileRepository\k120130.inf_amd64_299d0c74ec099c32\IntelCpHDCPSvc.exe [480216 2017-01-03] (Intel Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-03-09] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-03-09] (Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [48944 2017-04-17] (Dropbox, Inc.)
R2 Dell Customer Connect; C:\Program Files (x86)\Dell Customer Connect\DCCService.exe [130936 2016-12-21] (Dell Inc.)
R2 Dell Foundation Services; C:\Program Files\Dell\Dell Foundation Services\DFSSvc.exe [97616 2017-01-11] (Dell)
R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2572024 2016-10-13] (Dell Inc.)
R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [202488 2016-10-13] (Dell Inc.)
R2 DellUpdate; C:\Program Files (x86)\Dell Update\DellUpService.exe [230248 2016-09-22] (Dell Inc.)
R2 esifsvc; C:\Windows\system32\Intel\DPTF\esif_uf.exe [2223864 2017-01-06] (Intel Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [17976 2016-09-20] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\Windows\System32\DriverStore\FileRepository\k120130.inf_amd64_299d0c74ec099c32\igfxCUIService.exe [341976 2017-01-03] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [974632 2016-02-19] (Intel(R) Corporation)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2016-03-02] (Intel Corporation) [File not signed]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-02] (Intel Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [215328 2016-05-16] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2016-02-08] ()
S3 ose; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [198192 2017-03-25] (Microsoft Corporation) [File not signed]
R2 PEFService; C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe [1104304 2016-11-15] (Intel Security, Inc.)
R2 Product Registration; C:\Program Files\Dell\Dell Product Registration\PRSvc.exe [80208 2016-09-22] (Dell)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [329736 2016-11-22] (Realtek Semiconductor)
R2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [31704 2016-10-24] (Dell Inc.)
R2 WavesSysSvc; c:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe [410032 2016-11-19] (Waves Audio Ltd.)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2017-03-28] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2017-03-28] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3833248 2016-02-08] (Intel® Corporation)
R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S1 cryptfd; C:\Windows\System32\drivers\cryptfd.sys [193448 2017-03-03] ()
R3 DDDriver; C:\Windows\system32\drivers\DDDriver64Dcsa.sys [32352 2016-10-13] (Dell Inc.)
R3 DellProf; C:\Windows\system32\drivers\DellProf.sys [32952 2016-10-13] (Dell Computer Corporation)
R2 DpmLiteDrv; c:\Program Files\Dell\QuickSet\DpmLiteDrv64.sys [15080 2014-10-15] (Wistron Corp.)
R3 dptf_acpi; C:\Windows\System32\drivers\dptf_acpi.sys [79928 2017-01-06] (Intel Corporation)
R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [75320 2017-01-06] (Intel Corporation)
R3 esif_lf; C:\Windows\System32\drivers\esif_lf.sys [358968 2017-01-06] (Intel Corporation)
R3 HidEventFilter; C:\Windows\System32\drivers\HidEventFilter.sys [63496 2017-01-12] (Intel Corporation)
R3 HID_PCI; C:\Windows\System32\drivers\HID_PCI.sys [30816 2016-05-24] (Intel)
R3 iaLPSS2_GPIO2; C:\Windows\System32\drivers\iaLPSS2_GPIO2.sys [98608 2017-02-15] (Intel Corporation)
R3 iaLPSS2_I2C; C:\Windows\System32\drivers\iaLPSS2_I2C.sys [193328 2017-02-15] (Intel Corporation)
S3 iaLPSS2_SPI; C:\Windows\System32\drivers\iaLPSS2_SPI.sys [152376 2016-05-17] (Intel Corporation)
S3 iaLPSS2_UART2; C:\Windows\System32\drivers\iaLPSS2_UART2.sys [281400 2016-05-17] (Intel Corporation)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [356608 2016-11-16] (Intel Corporation)
R3 igfx; C:\Windows\System32\DriverStore\FileRepository\k120130.inf_amd64_299d0c74ec099c32\igdkmd64.sys [11058136 2017-01-03] (Intel Corporation)
R3 ISH; C:\Windows\System32\drivers\ISH.sys [140896 2016-06-05] (Intel)
R3 ISH_BusDriver; C:\Windows\System32\drivers\ISH_BusDriver.sys [78432 2016-06-08] (Intel)
S3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [487184 2017-01-20] (McAfee, Inc.)
S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [109320 2017-01-19] (McAfee, Inc.)
S3 mfeplk; C:\Windows\System32\drivers\mfeplk.sys [110256 2017-01-20] (McAfee, Inc.)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 Netwtw04; C:\Windows\System32\drivers\Netwtw04.sys [7116288 2016-07-16] (Intel Corporation)
S3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [413912 2015-12-22] (Realsil Semiconductor Corporation)
S3 rtux64w10; C:\Windows\System32\drivers\rtux64w10.sys [343808 2015-12-23] (Realtek )
R3 VirtualButtons; C:\Windows\System32\drivers\VirtualButtons.sys [31280 2015-04-14] (Intel Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 dbx; system32\DRIVERS\dbx.sys [X]
S3 mfesapsn; \??\C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-04-20 21:16 - 2017-04-20 21:16 - 00023637 _____ C:\Users\Sonidla\Desktop\FRST.txt
2017-04-20 21:16 - 2017-04-20 21:16 - 00000000 ____D C:\FRST
2017-04-20 21:14 - 2017-04-20 21:15 - 00112640 _____ (forum.viry.cz) C:\Users\Sonidla\Desktop\FRSTLauncher.exe
2017-04-20 21:13 - 2017-04-20 21:16 - 02424832 _____ (Farbar) C:\Users\Sonidla\Desktop\FRST64.exe
2017-04-20 21:10 - 2017-04-20 21:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-04-20 19:36 - 2017-04-20 19:36 - 00000000 ___HD C:\OneDriveTemp
2017-04-20 19:31 - 2017-04-20 19:31 - 01329152 _____ C:\Users\Sonidla\Downloads\RSITx64.exe
2017-04-20 19:31 - 2017-04-20 19:31 - 00000000 ____D C:\rsit
2017-04-20 19:31 - 2017-04-20 19:31 - 00000000 ____D C:\Program Files\trend micro
2017-04-20 18:50 - 2017-04-20 18:50 - 00000000 ____D C:\ProgramData\IObit
2017-04-20 18:50 - 2017-04-20 18:50 - 00000000 ____D C:\Program Files (x86)\IObit
2017-04-20 18:24 - 2017-04-20 19:20 - 00000000 ____D C:\AdwCleaner
2017-04-20 18:24 - 2017-04-20 18:24 - 04089296 _____ C:\Users\Sonidla\Downloads\adwcleaner_6.045.exe
2017-04-20 18:12 - 2017-04-20 18:12 - 00003338 _____ C:\Windows\System32\Tasks\{7F24E4D4-F442-49D0-82B9-968854A2126E}
2017-04-20 18:10 - 2017-04-20 18:10 - 00000405 _____ C:\Users\Sonidla\Desktop\Control Panel.lnk
2017-04-20 17:57 - 2017-04-20 17:57 - 00000000 ____D C:\Program Files (x86)\PPLive
2017-04-20 17:57 - 2017-04-20 17:57 - 00000000 ____D C:\Program Files (x86)\FlowSprit
2017-04-20 17:56 - 2017-04-20 17:58 - 00000492 _____ C:\Windows\Tasks\UCBrowserUpdater.job
2017-04-20 17:56 - 2017-04-20 17:56 - 00003514 _____ C:\Windows\System32\Tasks\UCBrowserUpdater
2017-04-20 17:56 - 2017-04-20 17:56 - 00000000 ____D C:\Users\Sonidla\AppData\Local\UCBrowser
2017-04-20 17:55 - 2017-04-20 19:22 - 00003660 _____ C:\Windows\System32\Tasks\CreateExplorerShellUnelevatedTask
2017-04-20 17:55 - 2017-04-20 17:55 - 00003066 _____ C:\Windows\System32\Tasks\Pritc
2017-04-20 17:55 - 2017-04-20 17:55 - 00000884 _____ C:\Users\Sonidla\AppData\Roaming\Microsoft\Windows\Start Menu\żěŃą.lnk
2017-04-20 17:55 - 2017-04-20 17:55 - 00000000 ____D C:\Users\Public\Documents\XMUpdate
2017-04-20 17:55 - 2017-04-20 17:55 - 00000000 ____D C:\Program Files (x86)\lll
2017-04-20 17:54 - 2017-04-20 19:27 - 00000000 ____D C:\Users\Sonidla\AppData\Roaming\Seznam.cz
2017-04-20 17:54 - 2017-04-20 19:16 - 00000000 ____D C:\Program Files (x86)\Microsoft Toolkit Final
2017-04-20 17:54 - 2017-04-20 17:58 - 00000414 _____ C:\Windows\Tasks\Updater_Online_Application.job
2017-04-20 17:54 - 2017-04-20 17:58 - 00000382 _____ C:\Windows\Tasks\Online Application V2G3.job
2017-04-20 17:54 - 2017-04-20 17:58 - 00000382 _____ C:\Windows\Tasks\Online Application V2G2.job
2017-04-20 17:54 - 2017-04-20 17:58 - 00000382 _____ C:\Windows\Tasks\Online Application V2G1.job
2017-04-20 17:54 - 2017-04-20 17:54 - 00003308 _____ C:\Windows\System32\Tasks\Updater_Online_Application
2017-04-20 17:54 - 2017-04-20 17:54 - 00003272 _____ C:\Windows\System32\Tasks\Online Application V2G3
2017-04-20 17:54 - 2017-04-20 17:54 - 00003272 _____ C:\Windows\System32\Tasks\Online Application V2G2
2017-04-20 17:54 - 2017-04-20 17:54 - 00003272 _____ C:\Windows\System32\Tasks\Online Application V2G1
2017-04-20 17:54 - 2017-04-20 17:54 - 00000000 ____D C:\Program Files (x86)\sss
2017-04-20 17:54 - 2017-04-20 17:54 - 00000000 ____D C:\Program Files (x86)\Seznam.cz
2017-04-20 17:52 - 2017-04-20 17:52 - 00000000 ____D C:\Users\Sonidla\AppData\Roaming\WinRAR
2017-04-20 17:52 - 2017-04-20 17:52 - 00000000 ____D C:\Users\Sonidla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-04-20 17:52 - 2017-04-20 17:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-04-20 17:51 - 2017-04-20 17:52 - 00000000 ____D C:\Program Files\WinRAR
2017-04-17 17:14 - 2017-04-17 17:14 - 00048944 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
2017-04-13 17:37 - 2017-03-28 07:37 - 00255488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unimdm.tsp
2017-04-13 17:37 - 2017-03-28 07:34 - 00237568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncSettings.dll
2017-04-13 17:37 - 2017-03-28 07:30 - 00846336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebcamUi.dll
2017-04-13 17:37 - 2017-03-28 07:18 - 01255936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
2017-04-13 17:37 - 2017-03-28 07:14 - 07468544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2017-04-13 17:37 - 2017-03-28 07:08 - 00299008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RADCUI.dll
2017-04-13 17:36 - 2017-04-13 17:36 - 00002874 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2017-04-13 17:36 - 2017-04-13 17:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-04-13 17:36 - 2017-04-13 17:36 - 00000000 ____D C:\Program Files\CCleaner
2017-04-13 17:36 - 2017-03-28 08:04 - 02262776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-04-13 17:36 - 2017-03-28 07:48 - 05685760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2017-04-13 17:36 - 2017-03-28 07:37 - 00215552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apds.dll
2017-04-13 17:36 - 2017-03-28 07:36 - 00769024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ipsecsnp.dll
2017-04-13 17:36 - 2017-03-28 07:33 - 00436736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ipsmsnap.dll
2017-04-13 17:36 - 2017-03-28 07:32 - 00306176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2017-04-13 17:36 - 2017-03-28 07:30 - 00816640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NaturalLanguage6.dll
2017-04-13 17:36 - 2017-03-28 07:30 - 00340480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-04-13 17:36 - 2017-03-28 07:17 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2017-04-13 17:36 - 2017-03-28 07:13 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2017-04-13 17:36 - 2017-03-28 07:12 - 02682880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netshell.dll
2017-04-13 17:36 - 2017-03-28 07:12 - 02026496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-04-13 17:36 - 2017-03-28 07:12 - 01509376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-04-13 17:36 - 2017-03-28 07:11 - 01600000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-04-13 17:36 - 2017-03-28 07:10 - 02483200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-04-13 17:35 - 2017-03-28 08:21 - 00167848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2017-04-13 17:35 - 2017-03-28 08:19 - 00601712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2017-04-13 17:35 - 2017-03-28 08:18 - 01705976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-04-13 17:35 - 2017-03-28 08:07 - 00263472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.ApplicationData.dll
2017-04-13 17:35 - 2017-03-28 08:05 - 01504056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2017-04-13 17:35 - 2017-03-28 08:04 - 05721808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2017-04-13 17:35 - 2017-03-28 08:04 - 01431232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2017-04-13 17:35 - 2017-03-28 08:04 - 00975744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2017-04-13 17:35 - 2017-03-28 08:04 - 00861024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2017-04-13 17:35 - 2017-03-28 08:02 - 01980768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2017-04-13 17:35 - 2017-03-28 07:59 - 06667520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-04-13 17:35 - 2017-03-28 07:59 - 04023008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2017-04-13 17:35 - 2017-03-28 07:58 - 20967840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-04-13 17:35 - 2017-03-28 07:58 - 01851688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2017-04-13 17:35 - 2017-03-28 07:58 - 01360464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2017-04-13 17:35 - 2017-03-28 07:58 - 01344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
2017-04-13 17:35 - 2017-03-28 07:58 - 01277856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2017-04-13 17:35 - 2017-03-28 07:58 - 01202936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2017-04-13 17:35 - 2017-03-28 07:58 - 00981888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2017-04-13 17:35 - 2017-03-28 07:52 - 00306800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.MediaControl.dll
2017-04-13 17:35 - 2017-03-28 07:42 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll
2017-04-13 17:35 - 2017-03-28 07:42 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usoapi.dll
2017-04-13 17:35 - 2017-03-28 07:41 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcconf.dll
2017-04-13 17:35 - 2017-03-28 07:40 - 00224256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExSMime.dll
2017-04-13 17:35 - 2017-03-28 07:40 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XblAuthManagerProxy.dll
2017-04-13 17:35 - 2017-03-28 07:39 - 00040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBrokerUI.dll
2017-04-13 17:35 - 2017-03-28 07:38 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll
2017-04-13 17:35 - 2017-03-28 07:38 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDeviceRegistration.dll
2017-04-13 17:35 - 2017-03-28 07:38 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XblAuthTokenBrokerExt.dll
2017-04-13 17:35 - 2017-03-28 07:37 - 00177664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Diagnostics.dll
2017-04-13 17:35 - 2017-03-28 07:37 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.HostName.dll
2017-04-13 17:35 - 2017-03-28 07:37 - 00097792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.SystemManagement.dll
2017-04-13 17:35 - 2017-03-28 07:36 - 00136192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinRtTracing.dll
2017-04-13 17:35 - 2017-03-28 07:36 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryClient.dll
2017-04-13 17:35 - 2017-03-28 07:36 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-04-13 17:35 - 2017-03-28 07:36 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.UserDeviceAssociation.dll
2017-04-13 17:35 - 2017-03-28 07:35 - 00392192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.Input.dll
2017-04-13 17:35 - 2017-03-28 07:35 - 00315904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
2017-04-13 17:35 - 2017-03-28 07:35 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2017-04-13 17:35 - 2017-03-28 07:35 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppointmentActivation.dll
2017-04-13 17:35 - 2017-03-28 07:35 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-04-13 17:35 - 2017-03-28 07:34 - 00299520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccountApis.dll
2017-04-13 17:35 - 2017-03-28 07:34 - 00117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthBroker.dll
2017-04-13 17:35 - 2017-03-28 07:34 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Core.dll
2017-04-13 17:35 - 2017-03-28 07:33 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Import.dll
2017-04-13 17:35 - 2017-03-28 07:33 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2017-04-13 17:35 - 2017-03-28 07:33 - 00265728 _____ C:\Windows\SysWOW64\Windows.Perception.Stub.dll
2017-04-13 17:35 - 2017-03-28 07:32 - 01243136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.FaceAnalysis.dll
2017-04-13 17:35 - 2017-03-28 07:32 - 00426496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Wallet.dll
2017-04-13 17:35 - 2017-03-28 07:32 - 00332288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Bluetooth.dll
2017-04-13 17:35 - 2017-03-28 07:32 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2017-04-13 17:35 - 2017-03-28 07:32 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe
2017-04-13 17:35 - 2017-03-28 07:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WwaApi.dll
2017-04-13 17:35 - 2017-03-28 07:32 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vaultcli.dll
2017-04-13 17:35 - 2017-03-28 07:32 - 00185856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-04-13 17:35 - 2017-03-28 07:32 - 00175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Scanners.dll
2017-04-13 17:35 - 2017-03-28 07:31 - 00711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-04-13 17:35 - 2017-03-28 07:31 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll
2017-04-13 17:35 - 2017-03-28 07:31 - 00431616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll
2017-04-13 17:35 - 2017-03-28 07:30 - 00819200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppContracts.dll
2017-04-13 17:35 - 2017-03-28 07:30 - 00787968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2017-04-13 17:35 - 2017-03-28 07:30 - 00075264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll
2017-04-13 17:35 - 2017-03-28 07:29 - 00747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Ocr.dll
2017-04-13 17:35 - 2017-03-28 07:29 - 00529920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2017-04-13 17:35 - 2017-03-28 07:29 - 00284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.dll
2017-04-13 17:35 - 2017-03-28 07:29 - 00238080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AboveLockAppHost.dll
2017-04-13 17:35 - 2017-03-28 07:28 - 00755712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-04-13 17:35 - 2017-03-28 07:28 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WpcWebFilter.dll
2017-04-13 17:35 - 2017-03-28 07:28 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2017-04-13 17:35 - 2017-03-28 07:28 - 00500224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.dll
2017-04-13 17:35 - 2017-03-28 07:26 - 01534464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.3D.dll
2017-04-13 17:35 - 2017-03-28 07:26 - 00468992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.InkControls.dll
2017-04-13 17:35 - 2017-03-28 07:25 - 02333184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2017-04-13 17:35 - 2017-03-28 07:25 - 01196544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscui.cpl
2017-04-13 17:35 - 2017-03-28 07:24 - 06474752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspaint.exe
2017-04-13 17:35 - 2017-03-28 07:24 - 04614656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2017-04-13 17:35 - 2017-03-28 07:24 - 00675840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2017-04-13 17:35 - 2017-03-28 07:23 - 00886272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll
2017-04-13 17:35 - 2017-03-28 07:23 - 00589312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
2017-04-13 17:35 - 2017-03-28 07:22 - 00516096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll
2017-04-13 17:35 - 2017-03-28 07:22 - 00355328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RTMediaFrame.dll
2017-04-13 17:35 - 2017-03-28 07:21 - 01077760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Editing.dll
2017-04-13 17:35 - 2017-03-28 07:20 - 03307008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2017-04-13 17:35 - 2017-03-28 07:20 - 00795648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MiracastReceiver.dll
2017-04-13 17:35 - 2017-03-28 07:20 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmjpegdec.dll
2017-04-13 17:35 - 2017-03-28 07:19 - 00713216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
2017-04-13 17:35 - 2017-03-28 07:19 - 00343040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToDevice.dll
2017-04-13 17:35 - 2017-03-28 07:17 - 06109696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2017-04-13 17:35 - 2017-03-28 07:17 - 00895488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2017-04-13 17:35 - 2017-03-28 07:17 - 00220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToReceiver.dll
2017-04-13 17:35 - 2017-03-28 07:16 - 01221120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Audio.dll
2017-04-13 17:35 - 2017-03-28 07:14 - 03520512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xpsrchvw.exe
2017-04-13 17:35 - 2017-03-28 07:14 - 00641024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCRecvSrc.dll
2017-04-13 17:35 - 2017-03-28 07:14 - 00400384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2017-04-13 17:35 - 2017-03-28 07:14 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Devices.dll
2017-04-13 17:35 - 2017-03-28 07:13 - 06045184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2017-04-13 17:35 - 2017-03-28 07:13 - 02138112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll
2017-04-13 17:35 - 2017-03-28 07:13 - 01656320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Perception.dll
2017-04-13 17:35 - 2017-03-28 07:13 - 01232384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Maps.dll
2017-04-13 17:35 - 2017-03-28 07:13 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2017-04-13 17:35 - 2017-03-28 07:12 - 01013248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll
2017-04-13 17:35 - 2017-03-28 07:12 - 01004544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll
2017-04-13 17:35 - 2017-03-28 07:12 - 00862208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2017-04-13 17:35 - 2017-03-28 07:12 - 00827904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2017-04-13 17:35 - 2017-03-28 07:12 - 00691200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2017-04-13 17:35 - 2017-03-28 07:12 - 00654336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll
2017-04-13 17:35 - 2017-03-28 07:12 - 00620544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2017-04-13 17:35 - 2017-03-28 07:12 - 00598528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.dll
2017-04-13 17:35 - 2017-03-28 07:12 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2017-04-13 17:35 - 2017-03-28 07:11 - 02994176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2017-04-13 17:35 - 2017-03-28 07:11 - 02646528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll
2017-04-13 17:35 - 2017-03-28 07:11 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Phone.dll
2017-04-13 17:35 - 2017-03-28 07:11 - 00751104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2017-04-13 17:35 - 2017-03-28 07:09 - 03106304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2017-04-13 17:35 - 2017-03-28 07:08 - 00783360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2017-04-13 17:34 - 2017-03-28 09:10 - 00484584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2017-04-13 17:34 - 2017-03-28 09:10 - 00315744 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-04-13 17:34 - 2017-03-28 08:15 - 02048496 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
2017-04-13 17:34 - 2017-03-28 08:04 - 00136032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostUser.dll
2017-04-13 17:34 - 2017-03-28 08:04 - 00116568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostCommon.dll
2017-04-13 17:34 - 2017-03-28 08:02 - 00846560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2017-04-13 17:34 - 2017-03-28 08:02 - 00576408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2017-04-13 17:34 - 2017-03-28 07:58 - 00961192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-04-13 17:34 - 2017-03-28 07:53 - 01414728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2017-04-13 17:34 - 2017-03-28 07:53 - 00545944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2017-04-13 17:34 - 2017-03-28 07:40 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-04-13 17:34 - 2017-03-28 07:39 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Radios.dll
2017-04-13 17:34 - 2017-03-28 07:38 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-04-13 17:34 - 2017-03-28 07:37 - 00138240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DisplayManager.dll
2017-04-13 17:34 - 2017-03-28 07:36 - 00129024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SerialCommunication.dll
2017-04-13 17:34 - 2017-03-28 07:35 - 00505856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe
2017-04-13 17:34 - 2017-03-28 07:35 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.LowLevel.dll
2017-04-13 17:34 - 2017-03-28 07:35 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-04-13 17:34 - 2017-03-28 07:35 - 00184320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserMgrProxy.dll
2017-04-13 17:34 - 2017-03-28 07:35 - 00142336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.WiFi.dll
2017-04-13 17:34 - 2017-03-28 07:35 - 00113152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Lights.dll
2017-04-13 17:34 - 2017-03-28 07:33 - 00670208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.PointOfService.dll
2017-04-13 17:34 - 2017-03-28 07:33 - 00483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.AllJoyn.dll
2017-04-13 17:34 - 2017-03-28 07:33 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-04-13 17:34 - 2017-03-28 07:32 - 00562176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SmartCards.dll
2017-04-13 17:34 - 2017-03-28 07:32 - 00386048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.WiFiDirect.dll
2017-04-13 17:34 - 2017-03-28 07:32 - 00298496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2017-04-13 17:34 - 2017-03-28 07:32 - 00284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2017-04-13 17:34 - 2017-03-28 07:32 - 00271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceaccess.dll
2017-04-13 17:34 - 2017-03-28 07:32 - 00202752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2017-04-13 17:34 - 2017-03-28 07:32 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2017-04-13 17:34 - 2017-03-28 07:31 - 00390656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll
2017-04-13 17:34 - 2017-03-28 07:31 - 00236544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-04-13 17:34 - 2017-03-28 07:30 - 00262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Picker.dll
2017-04-13 17:34 - 2017-03-28 07:29 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Usb.dll
2017-04-13 17:34 - 2017-03-28 07:27 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CryptoWinRT.dll
2017-04-13 17:34 - 2017-03-28 07:26 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2017-04-13 17:34 - 2017-03-28 07:25 - 18364928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2017-04-13 17:34 - 2017-03-28 07:25 - 00653312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.AccountsControl.dll
2017-04-13 17:34 - 2017-03-28 07:24 - 19416576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-04-13 17:34 - 2017-03-28 07:24 - 00901120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2017-04-13 17:34 - 2017-03-28 07:23 - 03733504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2017-04-13 17:34 - 2017-03-28 07:23 - 00691712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-04-13 17:34 - 2017-03-28 07:23 - 00395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmenrollengine.dll
2017-04-13 17:34 - 2017-03-28 07:22 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\enrollmentapi.dll
2017-04-13 17:34 - 2017-03-28 07:19 - 00746496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcprx.dll
2017-04-13 17:34 - 2017-03-28 07:19 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dlnashext.dll
2017-04-13 17:34 - 2017-03-28 07:19 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dialclient.dll
2017-04-13 17:34 - 2017-03-28 07:18 - 12181504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-04-13 17:34 - 2017-03-28 07:16 - 03198464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
2017-04-13 17:34 - 2017-03-28 07:16 - 00134144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ErrorDetails.dll
2017-04-13 17:34 - 2017-03-28 07:15 - 01247232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2017-04-13 17:34 - 2017-03-28 07:14 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Geolocation.dll
2017-04-13 17:34 - 2017-03-28 07:12 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll
2017-04-13 17:34 - 2017-03-28 07:12 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Midi.dll
2017-04-13 17:34 - 2017-03-28 07:11 - 01576448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2017-04-13 17:34 - 2017-03-28 07:08 - 01564160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2017-04-13 17:34 - 2017-03-28 06:48 - 00483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2017-04-13 17:34 - 2017-03-16 06:38 - 00034088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CompPkgSup.dll
2017-04-13 17:26 - 2017-03-28 08:12 - 00328008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll
2017-04-13 17:26 - 2017-03-28 08:05 - 08168512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2017-04-13 17:26 - 2017-03-28 07:37 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthManagerProxy.dll
2017-04-13 17:26 - 2017-03-28 07:36 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-04-13 17:26 - 2017-03-28 07:34 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthTokenBrokerExt.dll
2017-04-13 17:26 - 2017-03-28 07:33 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.XboxLive.Storage.dll
2017-04-13 17:26 - 2017-03-28 07:33 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\WinRtTracing.dll
2017-04-13 17:26 - 2017-03-28 07:33 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Core.dll
2017-04-13 17:26 - 2017-03-28 07:33 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryClient.dll
2017-04-13 17:26 - 2017-03-28 07:33 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.UserDeviceAssociation.dll
2017-04-13 17:26 - 2017-03-28 07:31 - 00547840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.Input.dll
2017-04-13 17:26 - 2017-03-28 07:28 - 00358912 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.dll
2017-04-13 17:26 - 2017-03-28 07:27 - 01060352 _____ (Microsoft Corporation) C:\Windows\system32\AppContracts.dll
2017-04-13 17:26 - 2017-03-28 07:25 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2017-04-13 17:26 - 2017-03-28 07:14 - 01643008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2017-04-13 17:26 - 2017-03-28 07:14 - 01080320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Ocr.dll
2017-04-13 17:26 - 2017-03-28 07:13 - 04596224 _____ (Microsoft Corporation) C:\Windows\system32\xpsrchvw.exe
2017-04-13 17:26 - 2017-03-28 07:11 - 02914816 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2017-04-13 17:26 - 2017-03-28 07:10 - 02424320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Perception.dll
2017-04-13 17:25 - 2017-03-28 08:32 - 00198856 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2017-04-13 17:25 - 2017-03-28 08:26 - 00218520 _____ (Microsoft Corporation) C:\Windows\system32\LsaIso.exe
2017-04-13 17:25 - 2017-03-28 08:11 - 01860288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2017-04-13 17:25 - 2017-03-28 08:11 - 01738560 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2017-04-13 17:25 - 2017-03-28 08:11 - 00360040 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2017-04-13 17:25 - 2017-03-28 08:10 - 01293152 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2017-04-13 17:25 - 2017-03-28 08:10 - 01157008 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2017-04-13 17:25 - 2017-03-28 08:09 - 00097128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Credentials.UI.CredentialPicker.dll
2017-04-13 17:25 - 2017-03-28 08:06 - 00092512 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2017-04-13 17:25 - 2017-03-28 08:05 - 22221368 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-04-13 17:25 - 2017-03-28 08:04 - 01600632 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2017-04-13 17:25 - 2017-03-28 07:59 - 02533728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-04-13 17:25 - 2017-03-28 07:41 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2017-04-13 17:25 - 2017-03-28 07:38 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2017-04-13 17:25 - 2017-03-28 07:37 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll
2017-04-13 17:25 - 2017-03-28 07:36 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2017-04-13 17:25 - 2017-03-28 07:36 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Diagnostics.dll
2017-04-13 17:25 - 2017-03-28 07:36 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\RdpRelayTransport.dll
2017-04-13 17:25 - 2017-03-28 07:35 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2017-04-13 17:25 - 2017-03-28 07:35 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\Family.Client.dll
2017-04-13 17:25 - 2017-03-28 07:35 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.SystemManagement.dll
2017-04-13 17:25 - 2017-03-28 07:35 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2017-04-13 17:25 - 2017-03-28 07:34 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
2017-04-13 17:25 - 2017-03-28 07:34 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\Family.SyncEngine.dll
2017-04-13 17:25 - 2017-03-28 07:34 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_ClosedCaptioning.dll
2017-04-13 17:25 - 2017-03-28 07:33 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.dll
2017-04-13 17:25 - 2017-03-28 07:33 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.Ngc.dll
2017-04-13 17:25 - 2017-03-28 07:32 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\OneBackupHandler.dll
2017-04-13 17:25 - 2017-03-28 07:31 - 00418304 _____ C:\Windows\system32\Windows.Perception.Stub.dll
2017-04-13 17:25 - 2017-03-28 07:31 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BlockedShutdown.dll
2017-04-13 17:25 - 2017-03-28 07:31 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2017-04-13 17:25 - 2017-03-28 07:31 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\DeveloperOptionsSettingsHandlers.dll
2017-04-13 17:25 - 2017-03-28 07:31 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2017-04-13 17:25 - 2017-03-28 07:30 - 00748544 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2017-04-13 17:25 - 2017-03-28 07:30 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\TokenBrokerUI.dll
2017-04-13 17:25 - 2017-03-28 07:29 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll
2017-04-13 17:25 - 2017-03-28 07:29 - 00311296 _____ (Microsoft Corporation) C:\Windows\system32\SyncSettings.dll
2017-04-13 17:25 - 2017-03-28 07:29 - 00293888 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll
2017-04-13 17:25 - 2017-03-28 07:29 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\vaultcli.dll
2017-04-13 17:25 - 2017-03-28 07:29 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2017-04-13 17:25 - 2017-03-28 07:29 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll
2017-04-13 17:25 - 2017-03-28 07:29 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2017-04-13 17:25 - 2017-03-28 07:29 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-04-13 17:25 - 2017-03-28 07:28 - 00561664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Wallet.dll
2017-04-13 17:25 - 2017-03-28 07:28 - 00551936 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2017-04-13 17:25 - 2017-03-28 07:28 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-04-13 17:25 - 2017-03-28 07:27 - 01388544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Cred.dll
2017-04-13 17:25 - 2017-03-28 07:27 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2017-04-13 17:25 - 2017-03-28 07:27 - 00425984 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
2017-04-13 17:25 - 2017-03-28 07:27 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\WwaApi.dll
2017-04-13 17:25 - 2017-03-28 07:27 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2017-04-13 17:25 - 2017-03-28 07:26 - 01145344 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll
2017-04-13 17:25 - 2017-03-28 07:26 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.InkControls.dll
2017-04-13 17:25 - 2017-03-28 07:26 - 00549376 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2017-04-13 17:25 - 2017-03-28 07:25 - 00966144 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2017-04-13 17:25 - 2017-03-28 07:25 - 00963584 _____ (Microsoft Corporation) C:\Windows\system32\WebcamUi.dll
2017-04-13 17:25 - 2017-03-28 07:24 - 06288384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2017-04-13 17:25 - 2017-03-28 07:24 - 01220096 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2017-04-13 17:25 - 2017-03-28 07:23 - 09130496 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2017-04-13 17:25 - 2017-03-28 07:23 - 00932864 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-04-13 17:25 - 2017-03-28 07:23 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2017-04-13 17:25 - 2017-03-28 07:22 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.DeviceEncryptionHandlers.dll
2017-04-13 17:25 - 2017-03-28 07:21 - 01403392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Editing.dll
2017-04-13 17:25 - 2017-03-28 07:21 - 00458752 _____ (Microsoft Corporation) C:\Windows\system32\RTMediaFrame.dll
2017-04-13 17:25 - 2017-03-28 07:19 - 00864256 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2017-04-13 17:25 - 2017-03-28 07:19 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll
2017-04-13 17:25 - 2017-03-28 07:18 - 01908224 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2017-04-13 17:25 - 2017-03-28 07:17 - 04749312 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2017-04-13 17:25 - 2017-03-28 07:17 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\PlayToReceiver.dll
2017-04-13 17:25 - 2017-03-28 07:16 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\vss_ps.dll
2017-04-13 17:25 - 2017-03-28 07:15 - 02390016 _____ (Microsoft Corporation) C:\Windows\system32\smartscreen.exe
2017-04-13 17:25 - 2017-03-28 07:15 - 00981504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2017-04-13 17:25 - 2017-03-28 07:15 - 00539136 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2017-04-13 17:25 - 2017-03-28 07:14 - 08126976 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2017-04-13 17:25 - 2017-03-28 07:14 - 00869888 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-04-13 17:25 - 2017-03-28 07:14 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2017-04-13 17:25 - 2017-03-28 07:13 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2017-04-13 17:25 - 2017-03-28 07:13 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2017-04-13 17:25 - 2017-03-28 07:13 - 00650752 _____ (Microsoft Corporation) C:\Windows\system32\RDXService.dll
2017-04-13 17:25 - 2017-03-28 07:13 - 00611328 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.dll
2017-04-13 17:25 - 2017-03-28 07:12 - 02208768 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.3D.dll
2017-04-13 17:25 - 2017-03-28 07:11 - 01981440 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2017-04-13 17:25 - 2017-03-28 07:11 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2017-04-13 17:25 - 2017-03-28 07:10 - 08076288 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2017-04-13 17:25 - 2017-03-28 07:10 - 02316288 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-04-13 17:25 - 2017-03-28 07:10 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Maps.dll
2017-04-13 17:25 - 2017-03-28 07:10 - 01266176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
2017-04-13 17:25 - 2017-03-28 07:10 - 00875520 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2017-04-13 17:25 - 2017-03-28 07:10 - 00774656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.dll
2017-04-13 17:25 - 2017-03-28 07:10 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2017-04-13 17:25 - 2017-03-28 07:09 - 04149248 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2017-04-13 17:25 - 2017-03-28 07:09 - 01513472 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2017-04-13 17:25 - 2017-03-28 07:09 - 01369088 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Phone.dll
2017-04-13 17:25 - 2017-03-28 07:09 - 01328640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2017-04-13 17:25 - 2017-03-28 07:09 - 01131008 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-04-13 17:25 - 2017-03-28 07:09 - 01064448 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2017-04-13 17:25 - 2017-03-28 07:08 - 03612672 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2017-04-13 17:25 - 2017-03-28 07:07 - 00908800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2017-04-13 17:25 - 2017-03-28 07:06 - 01121280 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2017-04-13 17:25 - 2017-03-28 07:06 - 00999424 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2017-04-13 17:24 - 2017-03-28 08:29 - 02213248 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-04-13 17:24 - 2017-03-28 08:28 - 07786336 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-04-13 17:24 - 2017-03-28 08:28 - 00773720 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2017-04-13 17:24 - 2017-03-28 08:20 - 01181024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2017-04-13 17:24 - 2017-03-28 08:11 - 02187616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-04-13 17:24 - 2017-03-28 08:11 - 00402784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-04-13 17:24 - 2017-03-28 08:10 - 07220184 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2017-04-13 17:24 - 2017-03-28 08:10 - 02758648 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-04-13 17:24 - 2017-03-28 08:09 - 02446704 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2017-04-13 17:24 - 2017-03-28 08:09 - 00624048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2017-04-13 17:24 - 2017-03-28 08:05 - 04260576 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2017-04-13 17:24 - 2017-03-28 08:05 - 01988048 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2017-04-13 17:24 - 2017-03-28 08:05 - 01848584 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll
2017-04-13 17:24 - 2017-03-28 08:05 - 01702392 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2017-04-13 17:24 - 2017-03-28 08:05 - 01302136 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2017-04-13 17:24 - 2017-03-28 08:05 - 01072248 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2017-04-13 17:24 - 2017-03-28 07:58 - 00387872 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
2017-04-13 17:24 - 2017-03-28 07:37 - 22568960 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2017-04-13 17:24 - 2017-03-28 07:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2017-04-13 17:24 - 2017-03-28 07:34 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-04-13 17:24 - 2017-03-28 07:31 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\NetworkBindingEngineMigPlugin.dll
2017-04-13 17:24 - 2017-03-28 07:31 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-04-13 17:24 - 2017-03-28 07:29 - 00852480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Import.dll
2017-04-13 17:24 - 2017-03-28 07:29 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2017-04-13 17:24 - 2017-03-28 07:29 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll
2017-04-13 17:24 - 2017-03-28 07:29 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-04-13 17:24 - 2017-03-28 07:28 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2017-04-13 17:24 - 2017-03-28 07:28 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\indexeddbserver.dll
2017-04-13 17:24 - 2017-03-28 07:27 - 00671744 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll
2017-04-13 17:24 - 2017-03-28 07:27 - 00472064 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll
2017-04-13 17:24 - 2017-03-28 07:27 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\AccountsRt.dll
2017-04-13 17:24 - 2017-03-28 07:26 - 00284160 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
2017-04-13 17:24 - 2017-03-28 07:25 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-04-13 17:24 - 2017-03-28 07:21 - 03778048 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2017-04-13 17:24 - 2017-03-28 07:20 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\MiracastReceiver.dll
2017-04-13 17:24 - 2017-03-28 07:20 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll
2017-04-13 17:24 - 2017-03-28 07:19 - 07655424 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2017-04-13 17:24 - 2017-03-28 07:18 - 01078784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2017-04-13 17:24 - 2017-03-28 07:18 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\wpninprc.dll
2017-04-13 17:24 - 2017-03-28 07:17 - 13087232 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-04-13 17:24 - 2017-03-28 07:16 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Audio.dll
2017-04-13 17:24 - 2017-03-28 07:15 - 00945664 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll
2017-04-13 17:24 - 2017-03-28 07:15 - 00937984 _____ (Microsoft Corporation) C:\Windows\system32\MCRecvSrc.dll
2017-04-13 17:24 - 2017-03-28 07:15 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
2017-04-13 17:24 - 2017-03-28 07:15 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Devices.dll
2017-04-13 17:24 - 2017-03-28 07:14 - 00947712 _____ (Microsoft Corporation) C:\Windows\system32\MSVP9DEC.dll
2017-04-13 17:24 - 2017-03-28 07:14 - 00913920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2017-04-13 17:24 - 2017-03-28 07:14 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2017-04-13 17:24 - 2017-03-28 07:13 - 01040896 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
2017-04-13 17:24 - 2017-03-28 07:13 - 00759296 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-04-13 17:24 - 2017-03-28 07:12 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2017-04-13 17:24 - 2017-03-28 07:07 - 00701952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2017-04-13 17:24 - 2017-03-28 07:06 - 00924672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2017-04-13 17:23 - 2017-03-28 08:35 - 00379232 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-04-13 17:23 - 2017-03-28 08:09 - 00682816 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2017-04-13 17:23 - 2017-03-28 08:00 - 01569184 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2017-04-13 17:23 - 2017-03-28 08:00 - 00628552 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2017-04-13 17:23 - 2017-03-28 07:44 - 07216640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2017-04-13 17:23 - 2017-03-28 07:36 - 00045056 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-04-13 17:23 - 2017-03-28 07:35 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll
2017-04-13 17:23 - 2017-03-28 07:35 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Printers.dll
2017-04-13 17:23 - 2017-03-28 07:33 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFi.dll
2017-04-13 17:23 - 2017-03-28 07:32 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\FlightSettings.dll
2017-04-13 17:23 - 2017-03-28 07:32 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Radios.dll
2017-04-13 17:23 - 2017-03-28 07:31 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.Phone.dll
2017-04-13 17:23 - 2017-03-28 07:31 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-04-13 17:23 - 2017-03-28 07:31 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Lights.dll
2017-04-13 17:23 - 2017-03-28 07:30 - 00568320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.LowLevel.dll
2017-04-13 17:23 - 2017-03-28 07:30 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFiDirect.dll
2017-04-13 17:23 - 2017-03-28 07:29 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-04-13 17:23 - 2017-03-28 07:29 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2017-04-13 17:23 - 2017-03-28 07:28 - 00431616 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2017-04-13 17:23 - 2017-03-28 07:28 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2017-04-13 17:23 - 2017-03-28 07:27 - 00949248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.PointOfService.dll
2017-04-13 17:23 - 2017-03-28 07:26 - 00437248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll
2017-04-13 17:23 - 2017-03-28 07:25 - 01010176 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2017-04-13 17:23 - 2017-03-28 07:21 - 23681536 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-04-13 17:23 - 2017-03-28 07:19 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\flvprophandler.dll
2017-04-13 17:23 - 2017-03-28 07:15 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\Geolocation.dll
2017-04-13 17:23 - 2017-03-28 07:14 - 00975872 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-04-13 17:23 - 2017-03-28 07:13 - 04474368 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-04-13 17:23 - 2017-03-28 07:13 - 02095616 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-04-13 17:23 - 2017-03-28 07:13 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Midi.dll
2017-04-13 17:23 - 2017-03-28 07:12 - 05611008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2017-04-13 17:23 - 2017-03-28 07:11 - 01275392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2017-04-13 17:23 - 2017-03-28 07:10 - 01783296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-04-13 17:23 - 2017-03-28 07:10 - 01637888 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-04-13 17:23 - 2017-03-28 07:10 - 01586176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2017-04-13 17:23 - 2017-03-28 07:10 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2017-04-13 17:23 - 2017-03-28 07:08 - 02895872 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-04-13 17:23 - 2017-03-28 07:08 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll
2017-04-13 17:23 - 2017-03-28 07:07 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\FontProvider.dll
2017-04-13 17:23 - 2017-03-28 07:05 - 01633792 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2017-04-13 17:22 - 2017-03-28 08:36 - 01617760 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2017-04-13 17:22 - 2017-03-28 08:36 - 01294688 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2017-04-13 17:22 - 2017-03-28 08:36 - 00565088 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2017-04-13 17:22 - 2017-03-28 08:36 - 00343904 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2017-04-13 17:22 - 2017-03-28 08:36 - 00142176 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2017-04-13 17:22 - 2017-03-28 08:26 - 00603488 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2017-04-13 17:22 - 2017-03-28 08:22 - 02681200 _____ C:\Windows\system32\CoreUIComponents.dll
2017-04-13 17:22 - 2017-03-28 08:20 - 00764392 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2017-04-13 17:22 - 2017-03-28 08:10 - 00178528 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostUser.dll
2017-04-13 17:22 - 2017-03-28 08:10 - 00146776 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostCommon.dll
2017-04-13 17:22 - 2017-03-28 08:08 - 01267504 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2017-04-13 17:22 - 2017-03-28 08:04 - 01276760 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-04-13 17:22 - 2017-03-28 08:04 - 00241504 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2017-04-13 17:22 - 2017-03-28 08:04 - 00160088 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostBroker.dll
2017-04-13 17:22 - 2017-03-28 07:58 - 00372440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.MediaControl.dll
2017-04-13 17:22 - 2017-03-28 07:37 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\DdcWnsListener.dll
2017-04-13 17:22 - 2017-03-28 07:34 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
2017-04-13 17:22 - 2017-03-28 07:33 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\DeviceDirectoryClient.dll
2017-04-13 17:22 - 2017-03-28 07:31 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\CloudDomainJoinDataModelServer.dll
2017-04-13 17:22 - 2017-03-28 07:31 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SerialCommunication.dll
2017-04-13 17:22 - 2017-03-28 07:30 - 00692224 _____ (Microsoft Corporation) C:\Windows\system32\CellularAPI.dll
2017-04-13 17:22 - 2017-03-28 07:30 - 00651264 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.AllJoyn.dll
2017-04-13 17:22 - 2017-03-28 07:30 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\UserMgrProxy.dll
2017-04-13 17:22 - 2017-03-28 07:30 - 00239104 _____ (Microsoft Corporation) C:\Windows\system32\dafpos.dll
2017-04-13 17:22 - 2017-03-28 07:29 - 00912384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.dll
2017-04-13 17:22 - 2017-03-28 07:29 - 00379904 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2017-04-13 17:22 - 2017-03-28 07:29 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2017-04-13 17:22 - 2017-03-28 07:28 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Picker.dll
2017-04-13 17:22 - 2017-03-28 07:28 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2017-04-13 17:22 - 2017-03-28 07:26 - 00329728 _____ (Microsoft Corporation) C:\Windows\system32\deviceaccess.dll
2017-04-13 17:22 - 2017-03-28 07:25 - 00896512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.AccountsControl.dll
2017-04-13 17:22 - 2017-03-28 07:24 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2017-04-13 17:22 - 2017-03-28 07:21 - 01589760 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2017-04-13 17:22 - 2017-03-28 07:21 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\CastLaunch.dll
2017-04-13 17:22 - 2017-03-28 07:19 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dlnashext.dll
2017-04-13 17:22 - 2017-03-28 07:17 - 05114368 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll
2017-04-13 17:22 - 2017-03-28 07:14 - 01692160 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2017-04-13 17:22 - 2017-03-28 07:12 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\CryptoWinRT.dll
2017-04-13 17:22 - 2017-03-28 07:09 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
2017-04-13 17:22 - 2017-03-28 07:08 - 03542016 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2017-04-13 17:22 - 2017-03-18 18:50 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2017-04-13 17:22 - 2017-03-18 18:35 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2017-04-13 17:22 - 2017-03-16 06:47 - 00038768 _____ (Microsoft Corporation) C:\Windows\system32\CompPkgSup.dll
2017-04-13 17:21 - 2017-03-28 08:08 - 01100128 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2017-04-13 17:21 - 2017-03-28 08:08 - 00989024 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2017-04-13 17:21 - 2017-03-28 08:04 - 00277344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2017-04-13 17:21 - 2017-03-28 07:16 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetails.dll
2017-04-13 17:20 - 2017-03-28 07:37 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicRender.sys
2017-04-13 17:20 - 2017-03-28 07:36 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicDisplay.sys
2017-04-11 22:08 - 2017-04-11 22:04 - 00532136 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2017-04-11 21:58 - 2017-04-11 21:58 - 03480040 _____ (McAfee, Inc.) C:\Users\Sonidla\Downloads\MCPR.exe
2017-04-11 21:56 - 2017-04-11 21:56 - 00000029 _____ C:\Users\Sonidla\Desktop\office 2016 professionals product key.txt
2017-04-05 17:43 - 2017-04-05 18:05 - 00000000 ____D C:\Users\Sonidla\Desktop\Formuláře hotovo
2017-04-03 18:57 - 2017-04-20 19:36 - 00000000 ___RD C:\Users\Sonidla\OneDrive - Základní škola a mateřská škola logopedická, Brno, Veslařská 234
2017-03-26 11:36 - 2017-04-09 11:26 - 00000000 ____D C:\Users\Sonidla\Desktop\VUT
2017-03-25 23:02 - 2017-03-25 23:02 - 00594646 _____ C:\Users\Sonidla\Desktop\Porada ředitelů SPC,27-2-17.pptx
2017-03-25 23:00 - 2017-03-25 23:00 - 00594646 _____ C:\Users\Sonidla\Downloads\Porada+ředitelů+SPC,27-2-17.pptx
2017-03-22 23:21 - 2017-03-22 23:21 - 00045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
2017-03-22 23:21 - 2017-03-22 23:21 - 00045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
2017-03-22 23:21 - 2017-03-22 23:21 - 00045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
2017-03-22 22:03 - 2017-03-28 00:12 - 00697583 _____ C:\Users\Sonidla\Desktop\Alexandr Jaroš.zfo

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-04-20 21:10 - 2017-01-12 05:12 - 00000000 ____D C:\Program Files (x86)\Dropbox
2017-04-20 20:20 - 2017-03-09 16:14 - 00000000 ____D C:\Users\Sonidla
2017-04-20 19:40 - 2017-01-12 04:47 - 00000000 ____D C:\Windows\system32\SleepStudy
2017-04-20 19:26 - 2017-01-12 05:05 - 02100358 _____ C:\Windows\system32\PerfStringBackup.INI
2017-04-20 19:26 - 2016-08-02 16:32 - 00760982 _____ C:\Windows\system32\perfh005.dat
2017-04-20 19:26 - 2016-08-02 16:32 - 00179118 _____ C:\Windows\system32\perfc005.dat
2017-04-20 19:22 - 2017-03-09 16:15 - 00000000 __SHD C:\Users\Sonidla\IntelGraphicsProfiles
2017-04-20 19:22 - 2017-01-12 04:47 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-04-20 19:21 - 2016-07-16 08:04 - 00524288 _____ C:\Windows\system32\config\BBI
2017-04-20 19:12 - 2016-07-16 13:45 - 00000000 ____D C:\Windows\INF
2017-04-20 16:49 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\AppReadiness
2017-04-19 22:28 - 2017-03-09 16:15 - 00000000 ____D C:\Users\Sonidla\AppData\Local\Packages
2017-04-19 12:54 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-04-14 22:27 - 2017-03-09 16:23 - 00003294 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task v2
2017-04-14 22:27 - 2017-03-09 16:22 - 00002442 _____ C:\Users\Sonidla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-04-14 22:27 - 2017-03-09 16:22 - 00000000 ___RD C:\Users\Sonidla\OneDrive
2017-04-14 10:55 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\rescache
2017-04-14 08:53 - 2017-01-12 05:56 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-04-14 08:48 - 2017-01-12 04:47 - 00230400 _____ C:\Windows\system32\FNTCACHE.DAT
2017-04-14 00:55 - 2016-07-16 13:47 - 00000000 ___SD C:\Windows\SysWOW64\F12
2017-04-14 00:55 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\SysWOW64\setup
2017-04-14 00:54 - 2016-07-16 13:47 - 00000000 ___SD C:\Windows\system32\F12
2017-04-14 00:54 - 2016-07-16 13:47 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2017-04-14 00:54 - 2016-07-16 13:47 - 00000000 ___RD C:\Program Files\Windows Defender
2017-04-14 00:54 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\setup
2017-04-14 00:54 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\appraiser
2017-04-14 00:54 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\ShellExperiences
2017-04-14 00:54 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\Provisioning
2017-04-14 00:54 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-04-14 00:54 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-04-14 00:54 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2017-04-14 00:54 - 2016-07-16 08:04 - 00000000 ____D C:\Windows\system32\Dism
2017-04-13 23:37 - 2016-07-16 13:36 - 00000000 ____D C:\Windows\CbsTemp
2017-04-13 22:45 - 2017-03-09 17:52 - 00003470 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-04-13 22:45 - 2017-03-09 17:52 - 00003346 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-04-13 18:37 - 2017-03-09 17:52 - 00000000 ____D C:\Program Files (x86)\Google
2017-04-13 17:45 - 2017-03-16 00:12 - 00000000 ____D C:\Windows\Minidump
2017-04-13 17:45 - 2017-01-12 13:14 - 00000000 ____D C:\Windows\Panther
2017-04-13 17:45 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\LiveKernelReports
2017-04-12 22:31 - 2016-07-16 08:04 - 00032768 _____ C:\Windows\system32\config\ELAM
2017-04-12 14:09 - 2017-03-11 12:31 - 00000000 ____D C:\Windows\system32\MRT
2017-04-12 13:57 - 2017-03-11 12:30 - 148601744 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-04-11 22:02 - 2017-01-12 05:12 - 00000000 ____D C:\Program Files\mcafee
2017-04-11 22:02 - 2017-01-12 05:12 - 00000000 ____D C:\Program Files\Common Files\McAfee
2017-04-11 21:50 - 2017-01-12 05:27 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-04-05 14:24 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-04-03 14:13 - 2017-03-09 16:39 - 00687644 _____ C:\Users\Sonidla\Desktop\Vzor.zfo
2017-04-01 20:52 - 2016-07-16 13:49 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-04-01 20:52 - 2016-07-16 13:49 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-03-29 18:22 - 2016-07-16 13:47 - 00000000 ___HD C:\Windows\ELAMBKUP
2017-03-29 18:21 - 2017-01-12 05:14 - 00003126 _____ C:\Windows\System32\Tasks\McAfeeLogon
2017-03-29 18:21 - 2017-01-12 05:14 - 00000000 ____D C:\Windows\System32\Tasks\McAfee
2017-03-28 13:59 - 2017-01-12 05:12 - 00000000 ____D C:\Program Files\Common Files\AV
2017-03-28 08:20 - 2017-01-12 05:01 - 02717184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2017-03-25 15:32 - 2016-07-16 16:11 - 00000000 ____D C:\Windows\OCR
2017-03-21 23:49 - 2017-01-12 05:00 - 00000000 ____D C:\ProgramData\PCDr

==================== Files in the root of some directories =======


Files to move or delete:
====================
C:\Users\Sonidla\AppData\Local\Temp\is-4EHC7.tmp\Setup.exe


Some files in TEMP:
====================
2017-04-20 17:55 - 2017-04-20 17:56 - 51185040 _____ (UCWeb Inc.) C:\Users\Sonidla\AppData\Local\Temp\Browser_V6.0.1471.913_f_4730_(Build1702151518).exe
2017-04-20 17:54 - 2017-04-20 17:55 - 51178256 _____ (UCWeb Inc.) C:\Users\Sonidla\AppData\Local\Temp\Browser_V6.0.1471.913_r_4727_(Build1702151518).exe
2017-04-20 17:56 - 2017-04-20 17:56 - 1958888 _____ (深圳市史宾赛科技有限公司) C:\Users\Sonidla\AppData\Local\Temp\FlowSpritSetup_slnt_5016.exe
2017-04-20 17:53 - 2017-04-20 17:53 - 0061440 _____ (The Gentee Group) C:\Users\Sonidla\AppData\Local\Temp\genteert.dll
2017-04-20 17:54 - 2017-04-20 17:54 - 8585520 _____ () C:\Users\Sonidla\AppData\Local\Temp\listicka-partner-16194-1.1.8-offline.exe
2017-04-20 17:57 - 2017-04-20 17:57 - 2983626 _____ () C:\Users\Sonidla\AppData\Local\Temp\MagicDiskSetup.exe
2017-04-20 17:56 - 2017-04-20 17:56 - 1006592 _____ (湖南七度网络科技有限公司) C:\Users\Sonidla\AppData\Local\Temp\PSoft_4010_1.0.0.104_Setup.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\Online Application V2G1.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
Task: C:\Windows\Tasks\Online Application V2G2.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
Task: C:\Windows\Tasks\Online Application V2G3.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
Task: C:\Windows\Tasks\UCBrowserUpdater.job => C:\Program Files (x86)\UCBrowser\Application\update_task.exe <==== ATTENTION
Task: C:\Windows\Tasks\Updater_Online_Application.job => C:\Program Files (x86)\Microleaves\Online Application\Online Application Updater.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\Windows\system32\drivers:ucdrv-x64.sys [25444]
AlternateDataStreams: C:\Windows\system32\drivers:x64 [1498914]
AlternateDataStreams: C:\Windows\system32\drivers:x86 [1223458]

==================== Security Center ==================

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Sonidla\Desktop" je 774 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]


==================== End Of Log ==============================

Otevřte poznámkový blok a zkopírujte do něj:

Start
HKU\S-1-5-21-413214280-1799941555-775631740-1001\...\Run: [Pritc] => C:\Users\Sonidla\AppData\Local\Temp\is-4EHC7.tmp\Setup.exe [1429504 2017-04-20] () <===== ATTENTION
ShellExecuteHooks: No Name - {5F51FFFE-7463-4220-B711-E5B9ACB8EDFE} - -> No File
C:\Users\Sonidla\AppData\Local\Temp\is-4EHC7.tmp\Setup.exe
ShellIconOverlayIdentifiers: [KzShlobj] -> {AAA0C5B8-933F-4200-93AD-B143D7FFF9F2} => -> No File
SearchScopes: HKU\S-1-5-21-413214280-1799941555-775631740-1001 -> DefaultScope {5EE31285-3F3F-4A38-A73D-114126779DBB} URL =
SearchScopes: HKU\S-1-5-21-413214280-1799941555-775631740-1001 -> {5EE31285-3F3F-4A38-A73D-114126779DBB} URL =
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-03-09] (Google Inc.)
BHO: No Name -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> No File
C:\Program Files (x86)\Google\Google Toolbar
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-03-09] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2017-03-09] (Google Inc.)
Toolbar: HKU\S-1-5-21-413214280-1799941555-775631740-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-03-09] (Google Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi => not found
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi => not found
C:\Windows\System32\Tasks\UCBrowserUpdater
C:\Users\Sonidla\AppData\Roaming\Microsoft\Windows\Start Menu\żěŃą.lnk
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\Sonidla\AppData\Local\Temp
ask: C:\Windows\Tasks\Online Application V2G1.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
Task: C:\Windows\Tasks\Online Application V2G2.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
Task: C:\Windows\Tasks\Online Application V2G3.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
Task: C:\Windows\Tasks\UCBrowserUpdater.job => C:\Program Files (x86)\UCBrowser\Application\update_task.exe <==== ATTENTION
AlternateDataStreams: C:\Windows\system32\drivers:ucdrv-x64.sys [25444]
AlternateDataStreams: C:\Windows\system32\drivers:x64 [1498914]
AlternateDataStreams: C:\Windows\system32\drivers:x86 [1223458]
Task: {2C6ED16F-D770-45C9-AE8D-65A46993F502} - System32\Tasks\McAfeeLogon => C:\PROGRA~1\COMMON~1\McAfee\Platform\McUICnt.exe
Task: {646286A6-E8A6-45A3-BB47-86716FAF014E} - System32\Tasks\UCBrowserUpdater => C:\Program Files (x86)\UCBrowser\Application\update_task.exe <==== ATTENTION
Task: {A9FFBCDF-7E3B-43B0-83A9-3D027ECAAA82} - System32\Tasks\{7F24E4D4-F442-49D0-82B9-968854A2126E} => pcalua.exe -a "C:\Program Files (x86)\YeaDesktop\unins000.exe" -d "C:\Program Files (x86)\YeaDesktop"
Task: {AF076678-A864-4CE5-8598-8EE67BA2510E} - System32\Tasks\PCDDataUploadTask => uaclauncher.exe
Task: {B7E730FD-324F-4689-96D3-C8888835CD8A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-03-09] (Google Inc.)
Task: {C3FEC4F7-0994-4212-8008-C09641841EA8} - System32\Tasks\Online Application V2G2 => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
Task: {CCD5E9C4-6D32-4792-A656-406F959EAF44} - System32\Tasks\Pritc => C:\Users\Sonidla\AppData\Local\Temp\is-4EHC7.tmp\Setup.exe [2017-04-20] () <==== ATTENTION
Task: C:\Windows\Tasks\Online Application V2G1.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
Task: C:\Windows\Tasks\Online Application V2G2.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
Task: C:\Windows\Tasks\Online Application V2G3.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
Task: C:\Windows\Tasks\UCBrowserUpdater.job => C:\Program Files (x86)\UCBrowser\Application\update_task.exe <==== ATTENTION
WMI_ActiveScriptEventConsumer_ASEC: <===== ATTENTION

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Smazáno. Posílám nový log:
=================================================
Fix result of Farbar Recovery Scan Tool (x64) Version: 20-04-2017
Ran by Sonidla (21-04-2017 16:51:39) Run:1
Running from C:\Users\Sonidla\Desktop
Loaded Profiles: Sonidla (Available Profiles: defaultuser0 & Sonidla)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
HKU\S-1-5-21-413214280-1799941555-775631740-1001\...\Run: [Pritc] => C:\Users\Sonidla\AppData\Local\Temp\is-4EHC7.tmp\Setup.exe [1429504 2017-04-20] () <===== ATTENTION
ShellExecuteHooks: No Name - {5F51FFFE-7463-4220-B711-E5B9ACB8EDFE} - -> No File
C:\Users\Sonidla\AppData\Local\Temp\is-4EHC7.tmp\Setup.exe
ShellIconOverlayIdentifiers: [KzShlobj] -> {AAA0C5B8-933F-4200-93AD-B143D7FFF9F2} => -> No File
SearchScopes: HKU\S-1-5-21-413214280-1799941555-775631740-1001 -> DefaultScope {5EE31285-3F3F-4A38-A73D-114126779DBB} URL =
SearchScopes: HKU\S-1-5-21-413214280-1799941555-775631740-1001 -> {5EE31285-3F3F-4A38-A73D-114126779DBB} URL =
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-03-09] (Google Inc.)
BHO: No Name -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> No File
C:\Program Files (x86)\Google\Google Toolbar
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-03-09] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2017-03-09] (Google Inc.)
Toolbar: HKU\S-1-5-21-413214280-1799941555-775631740-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-03-09] (Google Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - No File
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi => not found
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi => not found
C:\Windows\System32\Tasks\UCBrowserUpdater
C:\Users\Sonidla\AppData\Roaming\Microsoft\Windows\Start Menu\żěŃą.lnk
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\Sonidla\AppData\Local\Temp
ask: C:\Windows\Tasks\Online Application V2G1.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
Task: C:\Windows\Tasks\Online Application V2G2.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
Task: C:\Windows\Tasks\Online Application V2G3.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
Task: C:\Windows\Tasks\UCBrowserUpdater.job => C:\Program Files (x86)\UCBrowser\Application\update_task.exe <==== ATTENTION
AlternateDataStreams: C:\Windows\system32\drivers:ucdrv-x64.sys [25444]
AlternateDataStreams: C:\Windows\system32\drivers:x64 [1498914]
AlternateDataStreams: C:\Windows\system32\drivers:x86 [1223458]
Task: {2C6ED16F-D770-45C9-AE8D-65A46993F502} - System32\Tasks\McAfeeLogon => C:\PROGRA~1\COMMON~1\McAfee\Platform\McUICnt.exe
Task: {646286A6-E8A6-45A3-BB47-86716FAF014E} - System32\Tasks\UCBrowserUpdater => C:\Program Files (x86)\UCBrowser\Application\update_task.exe <==== ATTENTION
Task: {A9FFBCDF-7E3B-43B0-83A9-3D027ECAAA82} - System32\Tasks\{7F24E4D4-F442-49D0-82B9-968854A2126E} => pcalua.exe -a "C:\Program Files (x86)\YeaDesktop\unins000.exe" -d "C:\Program Files (x86)\YeaDesktop"
Task: {AF076678-A864-4CE5-8598-8EE67BA2510E} - System32\Tasks\PCDDataUploadTask => uaclauncher.exe
Task: {B7E730FD-324F-4689-96D3-C8888835CD8A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-03-09] (Google Inc.)
Task: {C3FEC4F7-0994-4212-8008-C09641841EA8} - System32\Tasks\Online Application V2G2 => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
Task: {CCD5E9C4-6D32-4792-A656-406F959EAF44} - System32\Tasks\Pritc => C:\Users\Sonidla\AppData\Local\Temp\is-4EHC7.tmp\Setup.exe [2017-04-20] () <==== ATTENTION
Task: C:\Windows\Tasks\Online Application V2G1.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
Task: C:\Windows\Tasks\Online Application V2G2.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
Task: C:\Windows\Tasks\Online Application V2G3.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
Task: C:\Windows\Tasks\UCBrowserUpdater.job => C:\Program Files (x86)\UCBrowser\Application\update_task.exe <==== ATTENTION
WMI_ActiveScriptEventConsumer_ASEC: <===== ATTENTION

EmptyTemp:
End
*****************

HKU\S-1-5-21-413214280-1799941555-775631740-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Pritc => value removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\ShellExecuteHooks\\{5F51FFFE-7463-4220-B711-E5B9ACB8EDFE} => value removed successfully
HKCR\CLSID\{5F51FFFE-7463-4220-B711-E5B9ACB8EDFE} => key not found.
C:\Users\Sonidla\AppData\Local\Temp\is-4EHC7.tmp\Setup.exe => moved successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\KzShlobj => key removed successfully
HKCR\CLSID\{AAA0C5B8-933F-4200-93AD-B143D7FFF9F2} => key not found.
HKU\S-1-5-21-413214280-1799941555-775631740-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-21-413214280-1799941555-775631740-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{5EE31285-3F3F-4A38-A73D-114126779DBB} => key removed successfully
HKCR\CLSID\{5EE31285-3F3F-4A38-A73D-114126779DBB} => key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7} => key removed successfully
HKCR\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7} => key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF} => key removed successfully
HKCR\CLSID\{B164E929-A1B6-4A06-B104-2CD0E90A88FF} => key not found.
C:\Program Files (x86)\Google\Google Toolbar => moved successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{2318C2B1-4965-11d4-9B18-009027A5CD4F} => value removed successfully
HKCR\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F} => key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{2318C2B1-4965-11d4-9B18-009027A5CD4F} => value removed successfully
HKCR\Wow6432Node\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F} => key not found.
HKU\S-1-5-21-413214280-1799941555-775631740-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => value removed successfully
HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => key not found.
HKCR\PROTOCOLS\Handler\sacore => key not found.
HKCR\CLSID\{5513F07E-936B-4E52-9B00-067394E91CC5} => key not found.
HKCR\PROTOCOLS\Filter\application/x-mfe-ipt => key not found.
HKCR\CLSID\{3EF5086B-5478-4598-A054-786C45D75692} => key not found.
HKLM\Software\Mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92} => value removed successfully
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92} => value removed successfully
C:\Windows\System32\Tasks\UCBrowserUpdater => moved successfully
C:\Users\Sonidla\AppData\Roaming\Microsoft\Windows\Start Menu\żěŃą.lnk => moved successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully

"C:\Users\Sonidla\AppData\Local\Temp" folder move:

Could not move "C:\Users\Sonidla\AppData\Local\Temp" => Scheduled to move on reboot.

ask: C:\Windows\Tasks\Online Application V2G1.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION => Error: No automatic fix found for this entry.
C:\Windows\Tasks\Online Application V2G2.job => moved successfully
C:\Windows\Tasks\Online Application V2G3.job => moved successfully
C:\Windows\Tasks\UCBrowserUpdater.job => moved successfully
C:\Windows\system32\drivers => ":ucdrv-x64.sys" ADS removed successfully.
C:\Windows\system32\drivers => ":x64" ADS removed successfully.
C:\Windows\system32\drivers => ":x86" ADS removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2C6ED16F-D770-45C9-AE8D-65A46993F502} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2C6ED16F-D770-45C9-AE8D-65A46993F502} => key removed successfully
C:\Windows\System32\Tasks\McAfeeLogon => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\McAfeeLogon => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{646286A6-E8A6-45A3-BB47-86716FAF014E} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{646286A6-E8A6-45A3-BB47-86716FAF014E} => key removed successfully
C:\Windows\System32\Tasks\UCBrowserUpdater => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UCBrowserUpdater => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A9FFBCDF-7E3B-43B0-83A9-3D027ECAAA82} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A9FFBCDF-7E3B-43B0-83A9-3D027ECAAA82} => key removed successfully
C:\Windows\System32\Tasks\{7F24E4D4-F442-49D0-82B9-968854A2126E} => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{7F24E4D4-F442-49D0-82B9-968854A2126E} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AF076678-A864-4CE5-8598-8EE67BA2510E} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AF076678-A864-4CE5-8598-8EE67BA2510E} => key removed successfully
C:\Windows\System32\Tasks\PCDDataUploadTask => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PCDDataUploadTask => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B7E730FD-324F-4689-96D3-C8888835CD8A} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B7E730FD-324F-4689-96D3-C8888835CD8A} => key removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C3FEC4F7-0994-4212-8008-C09641841EA8} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C3FEC4F7-0994-4212-8008-C09641841EA8} => key removed successfully
C:\Windows\System32\Tasks\Online Application V2G2 => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Online Application V2G2 => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{CCD5E9C4-6D32-4792-A656-406F959EAF44} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CCD5E9C4-6D32-4792-A656-406F959EAF44} => key removed successfully
C:\Windows\System32\Tasks\Pritc => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Pritc => key removed successfully
C:\Windows\Tasks\Online Application V2G1.job => moved successfully
C:\Windows\Tasks\Online Application V2G2.job => not found.
C:\Windows\Tasks\Online Application V2G3.job => not found.
C:\Windows\Tasks\UCBrowserUpdater.job => not found.
WMI_ActiveScriptEventConsumer_ASEC: <===== ATTENTION => removed successfully

=========== EmptyTemp: ==========

BITS transfer queue => 32768 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 12693666 B
Java, Flash, Steam htmlcache => 506 B
Windows/system/drivers => 1060292 B
Edge => 2965022 B
Chrome => 0 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 999 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 0 B
defaultuser0 => 595457 B
Sonidla => 237966763 B

RecycleBin => 2065 B
EmptyTemp: => 243.5 MB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 21-04-2017 16:53:18)

C:\Users\Sonidla\AppData\Local\Temp => moved successfully

==== End of Fixlog 16:53:19 ====

Smazáno. Nastala nějaká změna?

Bohužel ne. Skript WMI je tam pořád, způsobuje, že po restartu PC se u zástupce IE v řádku cíl objevuje "C:\Program Files (x86)\Internet Explorer\iexplore.exe" www.qitj.com. Lze to smazat, ale po restartu je to tam zase. Na netu jsou nějaké rady, ale já se v tom neumím hrabat. Název toho škodlivého skriptu jsem posílal v příloze.

Tak jsem asi kecal. Projel jsem to ADWcleanerem, a je to čisté. Také WMI Explorer neukazuje v root\subscription žádnou instanci.
Takže díky, a kdyby něco, tak se zase ozvu.

OK a není zač!