VIRY.CZ

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 23-07-2017
Ran by toombar PC (administrator) on DESKTOP-ANQTDIM (23-07-2017 18:48:15)
Running from C:\Users\toombar PC\Desktop
Loaded Profiles: toombar PC (Available Profiles: defaultuser0 & toombar PC)
Platform: Windows 10 Pro Version 1607 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
Failed to access process -> SbieSvc.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe
(Intel(R) Corporation) C:\Program Files\Intel\Intel(R) Online Connect Access\LegacyCsLoaderService.exe
(Intel(R) Corporation) C:\Program Files\Intel\Intel(R) Online Connect Access\IntelTechnologyAccessService.exe
(Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\RAMDisk\MSI_RAMDisk_Service.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe
(MSI) C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Micro-Star Int'l Co., Ltd.) C:\Windows\SysWOW64\RAMDiskImage.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Online Connect\ioc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
Failed to access process -> DiscSoftBusServiceLite.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\OSD\x86\MsiGamingOSD_x86.exe
(H.D.S. Hungary) C:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\OSD\x64\MsiGamingOSD_x64.exe
(MSI) C:\Windows\SysWOW64\muachost.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\VideoCardMonitorII.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\EyeRest.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\TriggerModeMonitor.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3510 series\Bin\ScanToPCActivationApp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Micro-Star INT'L CO.,LTD.) C:\Program Files (x86)\MSI\Fast Boot\FastBoot.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft® Windows® Operating System) C:\Windows\System32\Taskmgr.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\toombar PC\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8842496 2016-06-24] (Realtek Semiconductor)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Fast Boot] => C:\Program Files (x86)\MSI\Fast Boot\StartFastBoot.exe [759120 2015-04-22] ()
HKLM-x32\...\Run: [Live Update] => C:\Program Files (x86)\MSI\Live Update\Live Update.exe [15371216 2017-03-07] (Micro-Star INT'L CO., LTD.)
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Run: [HP Deskjet 3510 series (NET)] => C:\Program Files\HP\HP Deskjet 3510 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Run: [DAEMON Tools Lite Automount] => D:\Deamon Tools Lite\DAEMON Tools Lite\DTAgent.exe [4701888 2016-12-22] (Disc Soft Ltd)
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3062048 2017-07-14] (Valve Corporation)
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23819304 2017-03-21] (Google)
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27716568 2017-05-04] (Skype Technologies S.A.)
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Run: [Internet Download Accelerator] => D:\DOWNLOAD MANAGER\IDA\ida.exe -autorun
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Run: [SandboxieControl] => D:\Sandboxie\SbieCtrl.exe [799368 2017-06-05] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Run: [Spotify] => C:\Users\toombar PC\AppData\Roaming\Spotify\Spotify.exe [7111792 2017-07-09] (Spotify Ltd)
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Run: [Spotify Web Helper] => C:\Users\toombar PC\AppData\Roaming\Spotify\Spotify.exe [7111792 2017-07-09] (Spotify Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AIDA64 Extreme.lnk [2017-01-03]
ShortcutTarget: AIDA64 Extreme.lnk -> C:\Program Files (x86)\FinalWire\AIDA64 Extreme\aida64.exe (No File)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Thunderbird.lnk [2017-01-02]
ShortcutTarget: Mozilla Thunderbird.lnk -> C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe (Mozilla Corporation)
Startup: C:\Users\toombar PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleUpdate.lnk [2017-02-21]
ShortcutTarget: GoogleUpdate.lnk -> C:\Users\toombar PC\AppData\Local\Temp\Chrome Updates\SeachEngine.exe (No File)
Startup: C:\Users\toombar PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sledovat výstrahy inkoustu - HP Deskjet 3510 series (Síť).lnk [2017-04-05]
Startup: C:\Users\toombar PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TeamViewer 12.lnk [2017-01-25]
ShortcutTarget: TeamViewer 12.lnk -> C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{4891d0ff-1a20-42ba-a7d6-8abe48e48a6a}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{f98c4fc4-24af-480f-9360-39db72a23b05}: [DhcpNameServer] 213.46.172.37 213.46.172.36

Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-4143605839-527040269-2466945285-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2017-06-22] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2017-07-23] (Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-23] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-07-23] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-23] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-07-23] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-23] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-07-23] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-23] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-07-23] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: xy92jgbi.default
FF ProfilePath: C:\Users\toombar PC\AppData\Roaming\Mozilla\Firefox\Profiles\xy92jgbi.default [2017-07-08]
FF NewTab: Mozilla\Firefox\Profiles\xy92jgbi.default -> about:newtab
FF Homepage: Mozilla\Firefox\Profiles\xy92jgbi.default -> about:home
FF Extension: (Internet Download Accelerator) - C:\Users\toombar PC\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\ida@westbyte.com.xpi [2017-05-15]
FF Extension: (Internet Download Accelerator Toolbar) - C:\Users\toombar PC\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\idabarff@westbyte.com.xpi [2017-02-10]
FF Extension: (Adblock Plus) - C:\Users\toombar PC\AppData\Roaming\Mozilla\Firefox\Profiles\xy92jgbi.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-01-02]
FF Extension: (TLS 1.3 Compatibility Testing 3) - C:\Users\toombar PC\AppData\Roaming\Mozilla\Firefox\Profiles\xy92jgbi.default\features\{f33d134b-ae02-4e76-939e-c9deba970867}\tls13-compat-ff51@mozilla.org.xpi [2017-03-01]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-06-22] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-07-29] (Adobe Systems)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2017-06-22] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-05-18] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-05-18] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-07-29] (Adobe Systems)

Chrome:
=======
CHR HomePage: Default -> hxxps://www.google.cz/
CHR Profile: C:\Users\toombar PC\AppData\Local\Google\Chrome\User Data\Default [2017-07-23]
CHR Extension: (Disk Google) - C:\Users\toombar PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-07-08]
CHR Extension: (Dokumenty Google offline) - C:\Users\toombar PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-07-08]
CHR Extension: (AdBlock) - C:\Users\toombar PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-07-23]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\toombar PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2017-05-30]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\toombar PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-05-30]
CHR Extension: (Chrome Media Router) - C:\Users\toombar PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-13]
CHR HKU\S-1-5-21-4143605839-527040269-2466945285-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\TOOMBA~1\AppData\Local\Google\Drive\user_default\apdfllckaahabafndbhieahigkjlhalf_live.crx [2017-07-07]
CHR HKU\S-1-5-21-4143605839-527040269-2466945285-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [4424384 2017-07-18] (Microsoft Corporation)
R3 Disc Soft Lite Bus Service; D:\Deamon Tools Lite\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2016-12-22] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [395024 2016-12-27] (EasyAntiCheat Ltd)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2836296 2016-12-14] (ESET)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [342456 2017-03-09] (Futuremark)
R2 GamingApp_Service; C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe [47056 2017-02-17] (Micro-Star Int'l Co., Ltd.)
R2 GamingHotkey_Service; C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe [2019792 2016-10-13] (Micro-Star INT'L CO., LTD.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [987432 2016-07-26] (Intel(R) Corporation)
R3 Intel(R) Online Connect; C:\Program Files\Intel\Intel(R) Online Connect\ioc.exe [25824 2016-10-04] (Intel Corporation)
S2 Intel(R) Online Connect Helper; C:\Program Files\Intel\Intel(R) Online Connect\iocHelperService.exe [22752 2016-10-04] (Intel Corporation)
S3 Intel(R) Online Connect Software Asset Manager; C:\Program Files (x86)\Intel\Intel(R) Online Connect Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [18152 2016-09-29] (Intel Corporation)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335360 2016-03-18] (Intel Corporation) [File not signed]
R2 Intel(R) TechnologyAccessLegacyCSLoader; C:\Program Files\Intel\Intel(R) Online Connect Access\LegacyCsLoaderService.exe [173288 2016-10-05] (Intel(R) Corporation)
R2 Intel(R) TechnologyAccessService; C:\Program Files\Intel\Intel(R) Online Connect Access\IntelTechnologyAccessService.exe [496872 2016-10-05] (Intel(R) Corporation)
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-18] (Intel Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [177440 2016-10-20] (Intel Corporation)
R2 MSI_ActiveX_Service; C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe [75192 2017-04-05] (Micro-Star INT'L CO., LTD.)
R2 MSI_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe [105296 2015-06-04] (MSI)
R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2286032 2017-03-06] (Micro-Star INT'L CO., LTD.)
R2 MSI_RAMDisk_Service; C:\Program Files (x86)\MSI\RAMDisk\MSI_RAMDisk_Service.exe [70608 2016-12-02] (Micro-Star Int'l Co., Ltd.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495224 2017-06-21] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495224 2017-06-21] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-05-18] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [450168 2017-06-21] (NVIDIA Corporation)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [2162064 2017-05-17] (Electronic Arts)
S2 Origin Web Helper Service; D:\Origin\OriginWebHelperService.exe [3136920 2017-05-17] (Electronic Arts)
R2 RAMDrivService; C:\Windows\SysWoW64\RAMDiskImage.exe [343448 2016-03-10] (Micro-Star Int'l Co., Ltd.)
R2 SbieSvc; D:\Sandboxie\SbieSvc.exe [198792 2017-06-05] (Sandboxie Holdings, LLC)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10884848 2017-05-23] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347320 2017-04-28] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-04-28] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 athur; C:\Windows\System32\drivers\athuwbx.sys [2702336 2013-11-20] (Qualcomm Atheros Communications, Inc.)
R3 cpuz143; C:\Users\toombar PC\AppData\Local\Temp\cpuz143\cpuz143_x64.sys [48952 2017-07-13] (CPUID) <==== ATTENTION
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2017-01-04] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2017-01-04] (Disc Soft Ltd)
R3 e1dexpress; C:\Windows\system32\DRIVERS\e1d65x64.sys [541672 2015-11-24] (Intel Corporation)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [132272 2016-12-13] (ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [106768 2016-12-13] (ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [15488 2016-12-13] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [180544 2016-12-13] (ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [49672 2016-12-13] (ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [77616 2016-12-13] (ESET)
R1 epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [96856 2016-12-13] (ESET)
R3 I2cHkBurn; C:\Windows\system32\drivers\I2cHkBurn.sys [41760 2015-07-27] (FINTEK Corp.)
R3 iaLPSS2_GPIO2; C:\Windows\System32\drivers\iaLPSS2_GPIO2.sys [84264 2015-07-20] (Intel Corporation)
S3 massfilter_hs; C:\Windows\system32\drivers\massfilter_hs.sys [20232 2012-06-20] (HandSet Incorporated)
R1 ndisrd; C:\Windows\system32\DRIVERS\ndisrfl.sys [59792 2016-09-13] (Intel Corporation)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R2 NEWDRIVER; C:\Windows\SysWow64\WinVDEdrv6.sys [197648 2017-04-13] ()
R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2008-11-28] (CACE Technologies)
R3 NTIOLib_ACTIVE_X; C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\NTIOLib_X64.sys [13776 2016-04-12] (MSI)
S3 NTIOLib_MBAPI; C:\Program Files (x86)\MSI\Gaming APP\Lib\NTIOLib_X64.sys [14288 2017-03-08] (MSI)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_7209bde3180ef5f7\nvlddmkm.sys [14458264 2017-05-19] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30328 2017-06-21] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [48248 2017-06-21] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [57976 2017-06-21] (NVIDIA Corporation)
R2 RAMDriv; C:\Windows\system32\DRIVERS\ramdriv.sys [86936 2016-03-10] (Micro-Star Int'l Co., Ltd.)
R2 RAMDriv; C:\Windows\SysWOW64\DRIVERS\ramdriv.sys [86936 2016-03-10] (Micro-Star Int'l Co., Ltd.)
R3 SbieDrv; D:\Sandboxie\SbieDrv.sys [207496 2017-06-05] (Sandboxie Holdings, LLC)
S1 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [131144 2017-01-16] (Oracle Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-07-23 18:48 - 2017-07-23 18:48 - 00024312 _____ C:\Users\toombar PC\Desktop\FRST.txt
2017-07-23 18:48 - 2017-07-23 18:48 - 00000000 ____D C:\FRST
2017-07-23 18:47 - 2017-07-23 18:44 - 00112640 _____ (forum.viry.cz) C:\Users\toombar PC\Desktop\FRSTLauncher.exe
2017-07-23 18:47 - 2017-07-23 18:42 - 02382336 _____ (Farbar) C:\Users\toombar PC\Desktop\FRST64.exe
2017-07-23 18:12 - 2017-07-23 18:12 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-07-23 18:12 - 2017-07-23 18:12 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2017-07-14 15:35 - 2017-07-14 15:35 - 00000000 ____D C:\ProgramData\Adobe
2017-07-14 14:21 - 2017-07-14 14:21 - 00002549 _____ C:\Users\Public\Desktop\O&O SafeErase.lnk
2017-07-14 14:21 - 2017-07-14 14:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\O&O Software
2017-07-14 14:21 - 2017-07-14 14:21 - 00000000 ____D C:\Program Files\OO Software
2017-07-14 14:08 - 2017-07-14 14:08 - 00000000 ____D C:\Users\toombar PC\Documents\OO Software
2017-07-14 14:08 - 2017-07-14 14:08 - 00000000 ____D C:\Users\toombar PC\Documents\O&O
2017-07-14 14:07 - 2017-07-14 14:08 - 00000000 ____D C:\ProgramData\OO Software
2017-07-13 20:17 - 2017-07-13 20:17 - 00478392 ____N (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\8D1587E16.sys
2017-07-13 20:17 - 2017-07-13 20:17 - 00085600 ____N (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\27648387.sys
2017-07-13 19:55 - 2017-07-13 19:55 - 00000000 ____D C:\ProgramData\Sniper Elite 4
2017-07-13 19:54 - 2017-07-13 19:55 - 00000000 ____D C:\Users\toombar PC\AppData\Local\SniperElite4
2017-07-13 10:37 - 2017-05-16 18:35 - 02393336 _____ (devolo AG) C:\Users\toombar PC\Desktop\software-dlan-windows-v20.exe
2017-07-12 12:43 - 2017-07-14 14:33 - 00000037 _____ C:\Users\toombar PC\Desktop\Koš.txt
2017-07-12 12:41 - 2017-07-14 08:26 - 00000000 ____D C:\AdwCleaner
2017-07-12 12:39 - 2017-07-12 12:39 - 00000000 ____D C:\Users\toombar PC\AppData\Local\GHISLER
2017-07-11 20:35 - 2017-07-07 09:49 - 00340824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-07-11 20:35 - 2017-07-07 09:46 - 00781152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2017-07-11 20:35 - 2017-07-07 09:45 - 02263832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-07-11 20:35 - 2017-07-07 09:40 - 20967840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-07-11 20:35 - 2017-07-07 09:29 - 05686272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2017-07-11 20:35 - 2017-07-07 09:13 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll
2017-07-11 20:35 - 2017-07-07 09:10 - 00755200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-07-11 20:35 - 2017-07-07 09:09 - 00506368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-07-11 20:35 - 2017-07-07 09:06 - 07626752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2017-07-11 20:35 - 2017-07-07 08:55 - 04423680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-07-11 20:35 - 2017-07-07 08:55 - 01571840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2017-07-11 20:35 - 2017-07-07 08:54 - 02997248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2017-07-11 20:35 - 2017-07-07 08:53 - 02483200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-07-11 20:35 - 2017-07-07 08:52 - 04561408 _____ (Microsoft) C:\Windows\SysWOW64\dbgeng.dll
2017-07-11 20:35 - 2017-07-07 08:52 - 01599488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-07-11 20:35 - 2017-07-07 08:52 - 01413632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OpcServices.dll
2017-07-11 20:35 - 2017-06-21 10:18 - 01470816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppVEntSubsystems32.dll
2017-07-11 20:35 - 2017-06-21 09:52 - 00081760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2017-07-11 20:35 - 2017-06-21 09:42 - 00601712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2017-07-11 20:35 - 2017-06-21 09:39 - 02048496 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
2017-07-11 20:35 - 2017-06-21 09:36 - 00557408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2017-07-11 20:35 - 2017-06-21 09:29 - 05722320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2017-07-11 20:35 - 2017-06-21 09:28 - 02277288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2017-07-11 20:35 - 2017-06-21 09:28 - 01504056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2017-07-11 20:35 - 2017-06-21 09:27 - 01431232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2017-07-11 20:35 - 2017-06-21 09:27 - 00975744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2017-07-11 20:35 - 2017-06-21 09:27 - 00861024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2017-07-11 20:35 - 2017-06-21 09:27 - 00116576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostCommon.dll
2017-07-11 20:35 - 2017-06-21 09:25 - 02168288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2017-07-11 20:35 - 2017-06-21 09:25 - 01980776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2017-07-11 20:35 - 2017-06-21 09:24 - 00846560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2017-07-11 20:35 - 2017-06-21 09:22 - 00361104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll
2017-07-11 20:35 - 2017-06-21 09:21 - 06665440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-07-11 20:35 - 2017-06-21 09:21 - 04023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2017-07-11 20:35 - 2017-06-21 09:21 - 01845512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2017-07-11 20:35 - 2017-06-21 09:21 - 01277856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2017-07-11 20:35 - 2017-06-21 09:20 - 01360464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2017-07-11 20:35 - 2017-06-21 09:20 - 00981888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2017-07-11 20:35 - 2017-06-21 09:20 - 00962768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-07-11 20:35 - 2017-06-21 09:19 - 04312248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2017-07-11 20:35 - 2017-06-21 09:04 - 01631232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-07-11 20:35 - 2017-06-21 09:04 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcconf.dll
2017-07-11 20:35 - 2017-06-21 09:01 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Radios.dll
2017-07-11 20:35 - 2017-06-21 09:00 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDeviceRegistration.dll
2017-07-11 20:35 - 2017-06-21 08:59 - 00285184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-07-11 20:35 - 2017-06-21 08:59 - 00255488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unimdm.tsp
2017-07-11 20:35 - 2017-06-21 08:59 - 00177664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Diagnostics.dll
2017-07-11 20:35 - 2017-06-21 08:59 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.HostName.dll
2017-07-11 20:35 - 2017-06-21 08:59 - 00097792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.SystemManagement.dll
2017-07-11 20:35 - 2017-06-21 08:58 - 00136192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinRtTracing.dll
2017-07-11 20:35 - 2017-06-21 08:58 - 00129024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SerialCommunication.dll
2017-07-11 20:35 - 2017-06-21 08:58 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryClient.dll
2017-07-11 20:35 - 2017-06-21 08:58 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-07-11 20:35 - 2017-06-21 08:58 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.UserDeviceAssociation.dll
2017-07-11 20:35 - 2017-06-21 08:57 - 00142336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.WiFi.dll
2017-07-11 20:35 - 2017-06-21 08:56 - 00392192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.Input.dll
2017-07-11 20:35 - 2017-06-21 08:56 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.LowLevel.dll
2017-07-11 20:35 - 2017-06-21 08:56 - 00315904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
2017-07-11 20:35 - 2017-06-21 08:56 - 00237056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncSettings.dll
2017-07-11 20:35 - 2017-06-21 08:56 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-07-11 20:35 - 2017-06-21 08:56 - 00184320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserMgrProxy.dll
2017-07-11 20:35 - 2017-06-21 08:56 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2017-07-11 20:35 - 2017-06-21 08:56 - 00113152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Lights.dll
2017-07-11 20:35 - 2017-06-21 08:55 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2017-07-11 20:35 - 2017-06-21 08:55 - 00404992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsreg.dll
2017-07-11 20:35 - 2017-06-21 08:55 - 00117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthBroker.dll
2017-07-11 20:35 - 2017-06-21 08:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Core.dll
2017-07-11 20:35 - 2017-06-21 08:54 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Import.dll
2017-07-11 20:35 - 2017-06-21 08:54 - 00483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.AllJoyn.dll
2017-07-11 20:35 - 2017-06-21 08:54 - 00298496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2017-07-11 20:35 - 2017-06-21 08:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe
2017-07-11 20:35 - 2017-06-21 08:53 - 00431616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll
2017-07-11 20:35 - 2017-06-21 08:53 - 00390656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll
2017-07-11 20:35 - 2017-06-21 08:53 - 00386048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.WiFiDirect.dll
2017-07-11 20:35 - 2017-06-21 08:53 - 00332288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Bluetooth.dll
2017-07-11 20:35 - 2017-06-21 08:53 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2017-07-11 20:35 - 2017-06-21 08:53 - 00284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2017-07-11 20:35 - 2017-06-21 08:53 - 00271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceaccess.dll
2017-07-11 20:35 - 2017-06-21 08:53 - 00218624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WwaApi.dll
2017-07-11 20:35 - 2017-06-21 08:53 - 00202752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2017-07-11 20:35 - 2017-06-21 08:53 - 00185856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-07-11 20:35 - 2017-06-21 08:53 - 00175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Scanners.dll
2017-07-11 20:35 - 2017-06-21 08:53 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2017-07-11 20:35 - 2017-06-21 08:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Picker.dll
2017-07-11 20:35 - 2017-06-21 08:51 - 00747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Ocr.dll
2017-07-11 20:35 - 2017-06-21 08:51 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Usb.dll
2017-07-11 20:35 - 2017-06-21 08:51 - 00284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.dll
2017-07-11 20:35 - 2017-06-21 08:50 - 00857600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EmailApis.dll
2017-07-11 20:35 - 2017-06-21 08:50 - 00238080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AboveLockAppHost.dll
2017-07-11 20:35 - 2017-06-21 08:49 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CryptoWinRT.dll
2017-07-11 20:35 - 2017-06-21 08:48 - 02333184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2017-07-11 20:35 - 2017-06-21 08:47 - 13873664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2017-07-11 20:35 - 2017-06-21 08:46 - 04615168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2017-07-11 20:35 - 2017-06-21 08:46 - 01323008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_fs.dll
2017-07-11 20:35 - 2017-06-21 08:46 - 01137152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_health.dll
2017-07-11 20:35 - 2017-06-21 08:46 - 01077760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Editing.dll
2017-07-11 20:35 - 2017-06-21 08:46 - 00355328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RTMediaFrame.dll
2017-07-11 20:35 - 2017-06-21 08:45 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2017-07-11 20:35 - 2017-06-21 08:44 - 00795648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MiracastReceiver.dll
2017-07-11 20:35 - 2017-06-21 08:44 - 00343040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToDevice.dll
2017-07-11 20:35 - 2017-06-21 08:43 - 01534464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.3D.dll
2017-07-11 20:35 - 2017-06-21 08:43 - 00713216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
2017-07-11 20:35 - 2017-06-21 08:43 - 00653312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.AccountsControl.dll
2017-07-11 20:35 - 2017-06-21 08:43 - 00468992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.InkControls.dll
2017-07-11 20:35 - 2017-06-21 08:42 - 03307008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2017-07-11 20:35 - 2017-06-21 08:42 - 02749440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2017-07-11 20:35 - 2017-06-21 08:42 - 00525312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LogonController.dll
2017-07-11 20:35 - 2017-06-21 08:41 - 01255936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
2017-07-11 20:35 - 2017-06-21 08:40 - 02641920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-07-11 20:35 - 2017-06-21 08:40 - 02154496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2017-07-11 20:35 - 2017-06-21 08:40 - 00901120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2017-07-11 20:35 - 2017-06-21 08:40 - 00895488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2017-07-11 20:35 - 2017-06-21 08:40 - 00675840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2017-07-11 20:35 - 2017-06-21 08:40 - 00220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToReceiver.dll
2017-07-11 20:35 - 2017-06-21 08:40 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2017-07-11 20:35 - 2017-06-21 08:39 - 00546304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uReFS.dll
2017-07-11 20:35 - 2017-06-21 08:39 - 00134144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ErrorDetails.dll
2017-07-11 20:35 - 2017-06-21 08:38 - 03733504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2017-07-11 20:35 - 2017-06-21 08:38 - 01221120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Audio.dll
2017-07-11 20:35 - 2017-06-21 08:38 - 00886272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll
2017-07-11 20:35 - 2017-06-21 08:38 - 00753152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imapi2fs.dll
2017-07-11 20:35 - 2017-06-21 08:38 - 00709120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2017-07-11 20:35 - 2017-06-21 08:37 - 07468544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2017-07-11 20:35 - 2017-06-21 08:37 - 06109696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2017-07-11 20:35 - 2017-06-21 08:37 - 00400384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2017-07-11 20:35 - 2017-06-21 08:37 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Geolocation.dll
2017-07-11 20:35 - 2017-06-21 08:37 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Devices.dll
2017-07-11 20:35 - 2017-06-21 08:36 - 02648576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll
2017-07-11 20:35 - 2017-06-21 08:36 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-07-11 20:35 - 2017-06-21 08:36 - 01247232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2017-07-11 20:35 - 2017-06-21 08:35 - 02740224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2017-07-11 20:35 - 2017-06-21 08:35 - 02682880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netshell.dll
2017-07-11 20:35 - 2017-06-21 08:35 - 01656320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Perception.dll
2017-07-11 20:35 - 2017-06-21 08:35 - 01232384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Maps.dll
2017-07-11 20:35 - 2017-06-21 08:35 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2017-07-11 20:35 - 2017-06-21 08:35 - 00598528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.dll
2017-07-11 20:35 - 2017-06-21 08:35 - 00589312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
2017-07-11 20:35 - 2017-06-21 08:35 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Midi.dll
2017-07-11 20:35 - 2017-06-21 08:34 - 01886720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2017-07-11 20:35 - 2017-06-21 08:34 - 00773120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-07-11 20:35 - 2017-06-21 08:34 - 00654336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll
2017-07-11 20:35 - 2017-06-21 08:34 - 00621056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2017-07-11 20:35 - 2017-06-21 08:34 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll
2017-07-11 20:35 - 2017-06-21 08:34 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2017-07-11 20:35 - 2017-06-21 08:33 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Phone.dll
2017-07-11 20:35 - 2017-06-21 08:33 - 01013248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll
2017-07-11 20:35 - 2017-06-21 08:33 - 00751104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2017-07-11 20:35 - 2017-06-21 08:32 - 01556992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2017-07-11 20:35 - 2017-06-21 08:31 - 03106304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2017-07-11 20:35 - 2017-06-21 08:10 - 00483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2017-07-11 20:35 - 2017-03-04 08:56 - 00263472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.ApplicationData.dll
2017-07-11 20:35 - 2017-03-04 08:21 - 01243136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.FaceAnalysis.dll
2017-07-11 20:35 - 2017-03-04 08:21 - 00670208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.PointOfService.dll
2017-07-11 20:35 - 2017-03-04 08:20 - 00562176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SmartCards.dll
2017-07-11 20:35 - 2017-03-04 08:20 - 00426496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Wallet.dll
2017-07-11 20:35 - 2017-03-04 08:19 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll
2017-07-11 20:35 - 2017-03-04 08:18 - 00525824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll
2017-07-11 20:35 - 2017-03-04 08:16 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2017-07-11 20:35 - 2017-03-04 08:02 - 02138112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll
2017-07-11 20:35 - 2016-10-05 11:15 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dialclient.dll
2017-07-11 20:35 - 2016-09-15 18:58 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-07-11 20:35 - 2016-09-15 18:47 - 00134656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Energy.dll
2017-07-11 20:34 - 2017-07-07 09:44 - 00108896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2017-07-11 20:34 - 2017-07-07 09:42 - 07781720 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-07-11 20:34 - 2017-07-07 09:40 - 00376672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2017-07-11 20:34 - 2017-07-07 09:37 - 00468320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2017-07-11 20:34 - 2017-07-07 09:37 - 00118112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-07-11 20:34 - 2017-07-07 09:32 - 00404824 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-07-11 20:34 - 2017-07-07 09:29 - 02759712 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-07-11 20:34 - 2017-07-07 09:29 - 00857440 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2017-07-11 20:34 - 2017-07-07 09:28 - 00223584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-07-11 20:34 - 2017-07-07 09:24 - 22220856 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-07-11 20:34 - 2017-07-07 09:23 - 01600624 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2017-07-11 20:34 - 2017-07-07 09:23 - 00241504 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2017-07-11 20:34 - 2017-07-07 09:20 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\l2gpstore.dll
2017-07-11 20:34 - 2017-07-07 09:19 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-07-11 20:34 - 2017-07-07 09:19 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapprovp.dll
2017-07-11 20:34 - 2017-07-07 09:18 - 02532192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-07-11 20:34 - 2017-07-07 09:18 - 01100120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2017-07-11 20:34 - 2017-07-07 09:18 - 00450560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2017-07-11 20:34 - 2017-07-07 09:18 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\onex.dll
2017-07-11 20:34 - 2017-07-07 09:18 - 00057400 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-07-11 20:34 - 2017-07-07 09:17 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\raschap.dll
2017-07-11 20:34 - 2017-07-07 09:14 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-07-11 20:34 - 2017-07-07 09:14 - 00126464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2017-07-11 20:34 - 2017-07-07 09:13 - 00310272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2017-07-11 20:34 - 2017-07-07 09:11 - 00340480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-07-11 20:34 - 2017-07-07 09:09 - 00637952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2017-07-11 20:34 - 2017-07-07 09:06 - 18364928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2017-07-11 20:34 - 2017-07-07 09:05 - 19414528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-07-11 20:34 - 2017-07-07 09:03 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinfo32.exe
2017-07-11 20:34 - 2017-07-07 09:02 - 01313280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
2017-07-11 20:34 - 2017-07-07 09:00 - 12187136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-07-11 20:34 - 2017-07-07 09:00 - 00476160 _____ (Microsoft® Windows® Operating System) C:\Windows\SysWOW64\wvc.dll
2017-07-11 20:34 - 2017-07-07 08:58 - 07217152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2017-07-11 20:34 - 2017-07-07 08:57 - 00691712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-07-11 20:34 - 2017-07-07 08:56 - 06035456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2017-07-11 20:34 - 2017-07-07 08:55 - 03664896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-07-11 20:34 - 2017-07-07 08:54 - 02027008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-07-11 20:34 - 2017-07-07 08:51 - 22569984 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2017-07-11 20:34 - 2017-07-07 08:49 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys
2017-07-11 20:34 - 2017-07-07 08:48 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\l2gpstore.dll
2017-07-11 20:34 - 2017-07-07 08:48 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\eapprovp.dll
2017-07-11 20:34 - 2017-07-07 08:46 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\shutdownux.dll
2017-07-11 20:34 - 2017-07-07 08:46 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2017-07-11 20:34 - 2017-07-07 08:45 - 00488960 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2017-07-11 20:34 - 2017-07-07 08:45 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\DeveloperOptionsSettingsHandlers.dll
2017-07-11 20:34 - 2017-07-07 08:45 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-07-11 20:34 - 2017-07-07 08:45 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-07-11 20:34 - 2017-07-07 08:44 - 00502784 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2017-07-11 20:34 - 2017-07-07 08:44 - 00238592 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll
2017-07-11 20:34 - 2017-07-07 08:44 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-07-11 20:34 - 2017-07-07 08:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2017-07-11 20:34 - 2017-07-07 08:44 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll
2017-07-11 20:34 - 2017-07-07 08:43 - 01081856 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2017-07-11 20:34 - 2017-07-07 08:43 - 00431616 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2017-07-11 20:34 - 2017-07-07 08:43 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-07-11 20:34 - 2017-07-07 08:43 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-07-11 20:34 - 2017-07-07 08:42 - 00805888 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-07-11 20:34 - 2017-07-07 08:42 - 00352256 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2017-07-11 20:34 - 2017-07-07 08:39 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-07-11 20:34 - 2017-07-07 08:36 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2017-07-11 20:34 - 2017-07-07 08:35 - 01397760 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2017-07-11 20:34 - 2017-07-07 08:34 - 09131008 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2017-07-11 20:34 - 2017-07-07 08:33 - 00576000 _____ (Microsoft® Windows® Operating System) C:\Windows\system32\wvc.dll
2017-07-11 20:34 - 2017-07-07 08:31 - 23676416 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-07-11 20:34 - 2017-07-07 08:30 - 13090816 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-07-11 20:34 - 2017-07-07 08:29 - 04749824 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2017-07-11 20:34 - 2017-07-07 08:29 - 00932864 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-07-11 20:34 - 2017-07-07 08:28 - 02096640 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-07-11 20:34 - 2017-07-07 08:28 - 00927744 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2017-07-11 20:34 - 2017-07-07 08:28 - 00759296 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-07-11 20:34 - 2017-07-07 08:28 - 00589312 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-07-11 20:34 - 2017-07-07 08:27 - 08120832 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2017-07-11 20:34 - 2017-07-07 08:25 - 04708864 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-07-11 20:34 - 2017-07-07 08:24 - 05388800 _____ (Microsoft) C:\Windows\system32\dbgeng.dll
2017-07-11 20:34 - 2017-07-07 08:24 - 04744704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-07-11 20:34 - 2017-07-07 08:24 - 03615744 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2017-07-11 20:34 - 2017-07-07 08:24 - 02895872 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-07-11 20:34 - 2017-07-07 08:24 - 02217472 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll
2017-07-11 20:34 - 2017-07-07 08:24 - 01783296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-07-11 20:34 - 2017-07-07 08:24 - 01513472 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2017-07-11 20:34 - 2017-07-07 08:22 - 01826816 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2017-07-11 20:34 - 2017-06-21 09:56 - 01405280 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystemController.dll
2017-07-11 20:34 - 2017-06-21 09:55 - 02170720 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystems64.dll
2017-07-11 20:34 - 2017-06-21 09:54 - 00822624 _____ (Microsoft Corporation) C:\Windows\system32\AppVClient.exe
2017-07-11 20:34 - 2017-06-21 09:54 - 00758624 _____ (Microsoft Corporation) C:\Windows\system32\AppVOrchestration.dll
2017-07-11 20:34 - 2017-06-21 09:54 - 00704352 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntVirtualization.dll
2017-07-11 20:34 - 2017-06-21 09:54 - 00696160 _____ (Microsoft Corporation) C:\Windows\system32\AppVPublishing.dll
2017-07-11 20:34 - 2017-06-21 09:54 - 00603488 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2017-07-11 20:34 - 2017-06-21 09:54 - 00565088 _____ (Microsoft Corporation) C:\Windows\system32\AppVCatalog.dll
2017-07-11 20:34 - 2017-06-21 09:54 - 00406368 _____ (Microsoft Corporation) C:\Windows\system32\AppVScripting.dll
2017-07-11 20:34 - 2017-06-21 09:53 - 00794928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2017-07-11 20:34 - 2017-06-21 09:52 - 02213760 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-07-11 20:34 - 2017-06-21 09:52 - 01886344 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-07-11 20:34 - 2017-06-21 09:52 - 00774224 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2017-07-11 20:34 - 2017-06-21 09:52 - 00088416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scmbus.sys
2017-07-11 20:34 - 2017-06-21 09:51 - 02255712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-07-11 20:34 - 2017-06-21 09:51 - 00434528 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2017-07-11 20:34 - 2017-06-21 09:50 - 00126304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mup.sys
2017-07-11 20:34 - 2017-06-21 09:48 - 02681200 _____ C:\Windows\system32\CoreUIComponents.dll
2017-07-11 20:34 - 2017-06-21 09:47 - 00764392 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2017-07-11 20:34 - 2017-06-21 09:42 - 01573280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-07-11 20:34 - 2017-06-21 09:41 - 01706488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-07-11 20:34 - 2017-06-21 09:40 - 01069720 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2017-07-11 20:34 - 2017-06-21 09:40 - 00328008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll
2017-07-11 20:34 - 2017-06-21 09:40 - 00224096 _____ (Microsoft Corporation) C:\Windows\system32\ifsutil.dll
2017-07-11 20:34 - 2017-06-21 09:38 - 07220192 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2017-07-11 20:34 - 2017-06-21 09:38 - 01860288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2017-07-11 20:34 - 2017-06-21 09:38 - 01738560 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2017-07-11 20:34 - 2017-06-21 09:38 - 00790752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-07-11 20:34 - 2017-06-21 09:37 - 02446704 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2017-07-11 20:34 - 2017-06-21 09:37 - 01369240 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2017-07-11 20:34 - 2017-06-21 09:37 - 01157008 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2017-07-11 20:34 - 2017-06-21 09:37 - 00146784 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostCommon.dll
2017-07-11 20:34 - 2017-06-21 09:36 - 00624048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2017-07-11 20:34 - 2017-06-21 09:36 - 00129888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2017-07-11 20:34 - 2017-06-21 09:35 - 02915704 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2017-07-11 20:34 - 2017-06-21 09:35 - 01267512 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2017-07-11 20:34 - 2017-06-21 09:33 - 00408600 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2017-07-11 20:34 - 2017-06-21 09:33 - 00092512 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2017-07-11 20:34 - 2017-06-21 09:32 - 08169024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2017-07-11 20:34 - 2017-06-21 09:32 - 04260576 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2017-07-11 20:34 - 2017-06-21 09:32 - 01983408 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2017-07-11 20:34 - 2017-06-21 09:32 - 01702392 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2017-07-11 20:34 - 2017-06-21 09:32 - 01072248 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2017-07-11 20:34 - 2017-06-21 09:31 - 04674360 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2017-07-11 20:34 - 2017-06-21 09:31 - 01277824 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-07-11 20:34 - 2017-06-21 09:31 - 00160096 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostBroker.dll
2017-07-11 20:34 - 2017-06-21 09:30 - 00869848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2017-07-11 20:34 - 2017-06-21 09:30 - 00196960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ifsutil.dll
2017-07-11 20:34 - 2017-06-21 09:28 - 00524776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2017-07-11 20:34 - 2017-06-21 09:28 - 00170960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2017-07-11 20:34 - 2017-06-21 09:27 - 01122344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2017-07-11 20:34 - 2017-06-21 09:27 - 00549088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2017-07-11 20:34 - 2017-06-21 09:26 - 00387864 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
2017-07-11 20:34 - 2017-06-21 09:24 - 00154432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntmarta.dll
2017-07-11 20:34 - 2017-06-21 09:21 - 01557808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2017-07-11 20:34 - 2017-06-21 09:21 - 00952416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2017-07-11 20:34 - 2017-06-21 09:21 - 00374448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll
2017-07-11 20:34 - 2017-06-21 09:20 - 00312472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll
2017-07-11 20:34 - 2017-06-21 09:06 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2017-07-11 20:34 - 2017-06-21 09:04 - 01631232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2017-07-11 20:34 - 2017-06-21 09:03 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rootmdm.sys
2017-07-11 20:34 - 2017-06-21 09:02 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Diagnostics.dll
2017-07-11 20:34 - 2017-06-21 09:02 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scmdisk0101.sys
2017-07-11 20:34 - 2017-06-21 09:02 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.SystemManagement.dll
2017-07-11 20:34 - 2017-06-21 09:02 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-07-11 20:34 - 2017-06-21 09:02 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2017-07-11 20:34 - 2017-06-21 09:01 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll
2017-07-11 20:34 - 2017-06-21 09:01 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\Family.Client.dll
2017-07-11 20:34 - 2017-06-21 09:01 - 00138752 _____ (Microsoft Corporation) C:\Windows\system32\VEDataLayerHelpers.dll
2017-07-11 20:34 - 2017-06-21 09:01 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\snmptrap.exe
2017-07-11 20:34 - 2017-06-21 09:00 - 00519168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ngccredprov.dll
2017-07-11 20:34 - 2017-06-21 09:00 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
2017-07-11 20:34 - 2017-06-21 09:00 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\Family.SyncEngine.dll
2017-07-11 20:34 - 2017-06-21 09:00 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\ProvisioningHandlers.dll
2017-07-11 20:34 - 2017-06-21 09:00 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\WinRtTracing.dll
2017-07-11 20:34 - 2017-06-21 09:00 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFi.dll
2017-07-11 20:34 - 2017-06-21 09:00 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Profile.RetailInfo.dll
2017-07-11 20:34 - 2017-06-21 09:00 - 00143360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uudf.dll
2017-07-11 20:34 - 2017-06-21 09:00 - 00138240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DisplayManager.dll
2017-07-11 20:34 - 2017-06-21 09:00 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-07-11 20:34 - 2017-06-21 09:00 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-07-11 20:34 - 2017-06-21 09:00 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.UserDeviceAssociation.dll
2017-07-11 20:34 - 2017-06-21 09:00 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryBroker.dll
2017-07-11 20:34 - 2017-06-21 08:59 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.XboxLive.Storage.dll
2017-07-11 20:34 - 2017-06-21 08:59 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.dll
2017-07-11 20:34 - 2017-06-21 08:59 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\DeviceDirectoryClient.dll
2017-07-11 20:34 - 2017-06-21 08:59 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Core.dll
2017-07-11 20:34 - 2017-06-21 08:59 - 00137216 _____ (Microsoft Corporation) C:\Windows\system32\tdlrecover.exe
2017-07-11 20:34 - 2017-06-21 08:59 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryClient.dll
2017-07-11 20:34 - 2017-06-21 08:59 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.Ngc.dll
2017-07-11 20:34 - 2017-06-21 08:58 - 00547840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.Input.dll
2017-07-11 20:34 - 2017-06-21 08:58 - 00418304 _____ C:\Windows\system32\Windows.Perception.Stub.dll
2017-07-11 20:34 - 2017-06-21 08:58 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2017-07-11 20:34 - 2017-06-21 08:58 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Radios.dll
2017-07-11 20:34 - 2017-06-21 08:58 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2017-07-11 20:34 - 2017-06-21 08:57 - 00651264 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.AllJoyn.dll
2017-07-11 20:34 - 2017-06-21 08:57 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFiDirect.dll
2017-07-11 20:34 - 2017-06-21 08:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BlockedShutdown.dll
2017-07-11 20:34 - 2017-06-21 08:57 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2017-07-11 20:34 - 2017-06-21 08:57 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\credprovhost.dll
2017-07-11 20:34 - 2017-06-21 08:57 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SerialCommunication.dll
2017-07-11 20:34 - 2017-06-21 08:57 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Lights.dll
2017-07-11 20:34 - 2017-06-21 08:57 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sendmail.dll
2017-07-11 20:34 - 2017-06-21 08:57 - 00088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDeviceRegistration.Ngc.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 01507840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.FaceAnalysis.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 00912384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.dll

2017-07-11 20:34 - 2017-06-21 08:56 - 00852480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Import.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 00748544 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 00719872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2017-07-11 20:34 - 2017-06-21 08:56 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 00568320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.LowLevel.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 00379904 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 00299520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccountApis.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\UserMgrProxy.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\vaultcli.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2017-07-11 20:34 - 2017-06-21 08:56 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credprovhost.dll
2017-07-11 20:34 - 2017-06-21 08:55 - 00561664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Wallet.dll
2017-07-11 20:34 - 2017-06-21 08:55 - 00533504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSCOMEX.dll
2017-07-11 20:34 - 2017-06-21 08:55 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2017-07-11 20:34 - 2017-06-21 08:55 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2017-07-11 20:34 - 2017-06-21 08:55 - 00358912 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.dll
2017-07-11 20:34 - 2017-06-21 08:55 - 00349184 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-07-11 20:34 - 2017-06-21 08:55 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\SyncSettings.dll
2017-07-11 20:34 - 2017-06-21 08:55 - 00265728 _____ C:\Windows\SysWOW64\Windows.Perception.Stub.dll
2017-07-11 20:34 - 2017-06-21 08:55 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-07-11 20:34 - 2017-06-21 08:55 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2017-07-11 20:34 - 2017-06-21 08:55 - 00020480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\regsvr32.exe
2017-07-11 20:34 - 2017-06-21 08:54 - 01159680 _____ (Microsoft Corporation) C:\Windows\system32\XblGameSave.dll
2017-07-11 20:34 - 2017-06-21 08:54 - 00949248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.PointOfService.dll
2017-07-11 20:34 - 2017-06-21 08:54 - 00671744 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll
2017-07-11 20:34 - 2017-06-21 08:54 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\tileobjserver.dll
2017-07-11 20:34 - 2017-06-21 08:54 - 00472064 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll
2017-07-11 20:34 - 2017-06-21 08:54 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Picker.dll
2017-07-11 20:34 - 2017-06-21 08:54 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\WwaApi.dll
2017-07-11 20:34 - 2017-06-21 08:54 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\easwrt.dll
2017-07-11 20:34 - 2017-06-21 08:53 - 01010176 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2017-07-11 20:34 - 2017-06-21 08:53 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.InkControls.dll
2017-07-11 20:34 - 2017-06-21 08:53 - 00437248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll
2017-07-11 20:34 - 2017-06-21 08:53 - 00425984 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
2017-07-11 20:34 - 2017-06-21 08:53 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.dll
2017-07-11 20:34 - 2017-06-21 08:53 - 00329728 _____ (Microsoft Corporation) C:\Windows\system32\deviceaccess.dll
2017-07-11 20:34 - 2017-06-21 08:53 - 00284160 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
2017-07-11 20:34 - 2017-06-21 08:53 - 00201728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExecModelClient.dll
2017-07-11 20:34 - 2017-06-21 08:52 - 17198592 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2017-07-11 20:34 - 2017-06-21 08:52 - 06288384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2017-07-11 20:34 - 2017-06-21 08:52 - 00963584 _____ (Microsoft Corporation) C:\Windows\system32\WebcamUi.dll
2017-07-11 20:34 - 2017-06-21 08:52 - 00896512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.AccountsControl.dll
2017-07-11 20:34 - 2017-06-21 08:52 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2017-07-11 20:34 - 2017-06-21 08:52 - 00560128 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2017-07-11 20:34 - 2017-06-21 08:52 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\DevicesFlowBroker.dll
2017-07-11 20:34 - 2017-06-21 08:52 - 00352256 _____ (Microsoft Corporation) C:\Windows\system32\XpsDocumentTargetPrint.dll
2017-07-11 20:34 - 2017-06-21 08:52 - 00331264 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnrSvc.dll
2017-07-11 20:34 - 2017-06-21 08:52 - 00182784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BioCredProv.dll
2017-07-11 20:34 - 2017-06-21 08:51 - 00846336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebcamUi.dll
2017-07-11 20:34 - 2017-06-21 08:51 - 00634368 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2017-07-11 20:34 - 2017-06-21 08:51 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2017-07-11 20:34 - 2017-06-21 08:51 - 00258048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsDocumentTargetPrint.dll
2017-07-11 20:34 - 2017-06-21 08:50 - 01167360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2017-07-11 20:34 - 2017-06-21 08:50 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2017-07-11 20:34 - 2017-06-21 08:50 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WpcWebFilter.dll
2017-07-11 20:34 - 2017-06-21 08:50 - 00529920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2017-07-11 20:34 - 2017-06-21 08:50 - 00297472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2017-07-11 20:34 - 2017-06-21 08:49 - 03778048 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2017-07-11 20:34 - 2017-06-21 08:49 - 02104320 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2017-07-11 20:34 - 2017-06-21 08:49 - 01913856 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
2017-07-11 20:34 - 2017-06-21 08:49 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\wsp_health.dll
2017-07-11 20:34 - 2017-06-21 08:49 - 01403392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Editing.dll
2017-07-11 20:34 - 2017-06-21 08:49 - 00500224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.dll
2017-07-11 20:34 - 2017-06-21 08:49 - 00458752 _____ (Microsoft Corporation) C:\Windows\system32\RTMediaFrame.dll
2017-07-11 20:34 - 2017-06-21 08:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.dll
2017-07-11 20:34 - 2017-06-21 08:49 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.DeviceEncryptionHandlers.dll
2017-07-11 20:34 - 2017-06-21 08:49 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Energy.dll
2017-07-11 20:34 - 2017-06-21 08:48 - 00968192 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
2017-07-11 20:34 - 2017-06-21 08:48 - 00395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmenrollengine.dll
2017-07-11 20:34 - 2017-06-21 08:48 - 00336384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\azroleui.dll
2017-07-11 20:34 - 2017-06-21 08:47 - 07655424 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2017-07-11 20:34 - 2017-06-21 08:47 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\MiracastReceiver.dll
2017-07-11 20:34 - 2017-06-21 08:47 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2017-07-11 20:34 - 2017-06-21 08:47 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll
2017-07-11 20:34 - 2017-06-21 08:46 - 03290112 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2017-07-11 20:34 - 2017-06-21 08:46 - 01908224 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2017-07-11 20:34 - 2017-06-21 08:46 - 00925184 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe
2017-07-11 20:34 - 2017-06-21 08:46 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\SpaceControl.dll
2017-07-11 20:34 - 2017-06-21 08:46 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\dialclient.dll
2017-07-11 20:34 - 2017-06-21 08:45 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2017-07-11 20:34 - 2017-06-21 08:45 - 00891904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe
2017-07-11 20:34 - 2017-06-21 08:45 - 00471552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2017-07-11 20:34 - 2017-06-21 08:45 - 00102400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uexfat.dll
2017-07-11 20:34 - 2017-06-21 08:44 - 00588288 _____ (Microsoft Corporation) C:\Windows\system32\wlidprov.dll
2017-07-11 20:34 - 2017-06-21 08:44 - 00535040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2017-07-11 20:34 - 2017-06-21 08:44 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetails.dll
2017-07-11 20:34 - 2017-06-21 08:44 - 00136704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ufat.dll
2017-07-11 20:34 - 2017-06-21 08:44 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdProxy.dll
2017-07-11 20:34 - 2017-06-21 08:43 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Audio.dll
2017-07-11 20:34 - 2017-06-21 08:43 - 00961536 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll
2017-07-11 20:34 - 2017-06-21 08:43 - 00953344 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe
2017-07-11 20:34 - 2017-06-21 08:43 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\uReFS.dll
2017-07-11 20:34 - 2017-06-21 08:43 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\SpaceAgent.exe
2017-07-11 20:34 - 2017-06-21 08:43 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cnvfat.dll
2017-07-11 20:34 - 2017-06-21 08:42 - 00981504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2017-07-11 20:34 - 2017-06-21 08:42 - 00853504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autofmt.exe
2017-07-11 20:34 - 2017-06-21 08:42 - 00779776 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2017-07-11 20:34 - 2017-06-21 08:42 - 00539136 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2017-07-11 20:34 - 2017-06-21 08:42 - 00470016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2017-07-11 20:34 - 2017-06-21 08:42 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\Geolocation.dll
2017-07-11 20:34 - 2017-06-21 08:42 - 00380416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uReFSv1.dll
2017-07-11 20:34 - 2017-06-21 08:42 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Devices.dll
2017-07-11 20:34 - 2017-06-21 08:42 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\LocationFrameworkInternalPS.dll
2017-07-11 20:34 - 2017-06-21 08:41 - 03400704 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-07-11 20:34 - 2017-06-21 08:41 - 02279424 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2017-07-11 20:34 - 2017-06-21 08:41 - 01692160 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2017-07-11 20:34 - 2017-06-21 08:41 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2017-07-11 20:34 - 2017-06-21 08:41 - 01080320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Ocr.dll
2017-07-11 20:34 - 2017-06-21 08:41 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\usermgr.dll
2017-07-11 20:34 - 2017-06-21 08:41 - 00983040 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
2017-07-11 20:34 - 2017-06-21 08:41 - 00945664 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll
2017-07-11 20:34 - 2017-06-21 08:41 - 00913920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2017-07-11 20:34 - 2017-06-21 08:41 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Midi.dll
2017-07-11 20:34 - 2017-06-21 08:41 - 00459776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2017-07-11 20:34 - 2017-06-21 08:40 - 04474368 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-07-11 20:34 - 2017-06-21 08:40 - 01891328 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2017-07-11 20:34 - 2017-06-21 08:40 - 01586176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2017-07-11 20:34 - 2017-06-21 08:40 - 01421824 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2017-07-11 20:34 - 2017-06-21 08:40 - 00886784 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2017-07-11 20:34 - 2017-06-21 08:40 - 00611328 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.dll
2017-07-11 20:34 - 2017-06-21 08:40 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\CryptoWinRT.dll
2017-07-11 20:34 - 2017-06-21 08:39 - 08076288 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2017-07-11 20:34 - 2017-06-21 08:39 - 02916864 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2017-07-11 20:34 - 2017-06-21 08:39 - 02538496 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-07-11 20:34 - 2017-06-21 08:39 - 02208768 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.3D.dll
2017-07-11 20:34 - 2017-06-21 08:39 - 01643008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2017-07-11 20:34 - 2017-06-21 08:39 - 01490432 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-07-11 20:34 - 2017-06-21 08:39 - 00971264 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2017-07-11 20:34 - 2017-06-21 08:39 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2017-07-11 20:34 - 2017-06-21 08:39 - 00673792 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2017-07-11 20:34 - 2017-06-21 08:38 - 05611008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2017-07-11 20:34 - 2017-06-21 08:38 - 03520512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xpsrchvw.exe
2017-07-11 20:34 - 2017-06-21 08:38 - 02695680 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2017-07-11 20:34 - 2017-06-21 08:38 - 02424320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Perception.dll
2017-07-11 20:34 - 2017-06-21 08:38 - 01984000 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2017-07-11 20:34 - 2017-06-21 08:38 - 01275392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2017-07-11 20:34 - 2017-06-21 08:38 - 00908800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2017-07-11 20:34 - 2017-06-21 08:38 - 00877056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoconv.exe
2017-07-11 20:34 - 2017-06-21 08:38 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2017-07-11 20:34 - 2017-06-21 08:38 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2017-07-11 20:34 - 2017-06-21 08:37 - 00875520 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2017-07-11 20:34 - 2017-06-21 08:37 - 00774656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.dll
2017-07-11 20:34 - 2017-06-21 08:37 - 00735744 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2017-07-11 20:34 - 2017-06-21 08:37 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
2017-07-11 20:34 - 2017-06-21 08:36 - 02318848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-07-11 20:34 - 2017-06-21 08:36 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Maps.dll
2017-07-11 20:34 - 2017-06-21 08:36 - 00903680 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-07-11 20:34 - 2017-06-21 08:36 - 00881152 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.dll
2017-07-11 20:34 - 2017-06-21 08:36 - 00701952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2017-07-11 20:34 - 2017-06-21 08:36 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll
2017-07-11 20:34 - 2017-06-21 08:35 - 04149248 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2017-07-11 20:34 - 2017-06-21 08:35 - 01726976 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2017-07-11 20:34 - 2017-06-21 08:35 - 01369088 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Phone.dll
2017-07-11 20:34 - 2017-06-21 08:35 - 01328640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2017-07-11 20:34 - 2017-06-21 08:35 - 00924672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2017-07-11 20:34 - 2017-06-21 08:35 - 00827904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2017-07-11 20:34 - 2017-06-21 08:35 - 00732160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsSpellCheckingFacility.dll
2017-07-11 20:34 - 2017-06-21 08:34 - 03299840 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2017-07-11 20:34 - 2017-06-21 08:34 - 01121280 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2017-07-11 20:34 - 2017-06-21 08:34 - 00711168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2017-07-11 20:34 - 2017-06-21 08:34 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\tssrvlic.dll
2017-07-11 20:34 - 2017-06-21 08:34 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\spaceman.exe
2017-07-11 20:34 - 2017-06-21 08:33 - 00691200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2017-07-11 20:34 - 2017-06-21 08:33 - 00439296 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2017-07-11 20:34 - 2017-06-21 08:33 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll
2017-07-11 20:34 - 2017-06-21 08:32 - 00353280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TextInputFramework.dll
2017-07-11 20:34 - 2017-06-21 08:30 - 00038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tlscsp.dll
2017-07-11 20:34 - 2017-05-23 06:58 - 00448576 _____ C:\Windows\system32\ApnDatabase.xml
2017-07-11 20:34 - 2017-03-04 09:10 - 00360040 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2017-07-11 20:34 - 2017-03-04 08:28 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2017-07-11 20:34 - 2017-03-04 08:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2017-07-11 20:34 - 2017-03-04 08:26 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs3D.dll
2017-07-11 20:34 - 2017-03-04 08:23 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll
2017-07-11 20:34 - 2017-03-04 08:23 - 00583680 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll
2017-07-11 20:34 - 2017-03-04 08:20 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2017-07-11 20:34 - 2017-03-04 08:20 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vaultcli.dll
2017-07-11 20:34 - 2017-03-04 08:19 - 01589760 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2017-07-11 20:34 - 2017-03-04 08:17 - 00864256 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2017-07-11 20:34 - 2017-03-04 08:15 - 01078784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2017-07-11 20:34 - 2017-03-04 08:14 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\PlayToReceiver.dll
2017-07-11 20:34 - 2017-03-04 08:12 - 04596224 _____ (Microsoft Corporation) C:\Windows\system32\xpsrchvw.exe
2017-07-11 20:34 - 2016-10-15 05:45 - 01790464 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll
2017-07-11 20:34 - 2016-10-05 11:32 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll
2017-07-11 20:34 - 2016-08-27 07:12 - 00244816 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2017-07-11 20:33 - 2017-07-07 08:47 - 00201728 _____ (Microsoft Corporation) C:\Windows\system32\ScDeviceEnum.dll
2017-07-11 20:33 - 2017-07-07 08:44 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll
2017-07-11 20:33 - 2017-06-21 09:54 - 01669984 _____ (Microsoft Corporation) C:\Windows\system32\AppVIntegration.dll
2017-07-11 20:33 - 2017-06-21 09:54 - 00813408 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntStreamingManager.dll
2017-07-11 20:33 - 2017-06-21 09:03 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\uudf.dll
2017-07-11 20:33 - 2017-06-21 09:01 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\Family.Authentication.dll
2017-07-11 20:33 - 2017-06-21 09:00 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_SignInOptions.dll
2017-07-11 20:33 - 2017-06-21 08:59 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll
2017-07-11 20:33 - 2017-06-21 08:59 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\KdsCli.dll
2017-07-11 20:33 - 2017-06-21 08:58 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\CloudDomainJoinDataModelServer.dll
2017-07-11 20:33 - 2017-06-21 08:58 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll
2017-07-11 20:33 - 2017-06-21 08:57 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\XamlTileRender.dll
2017-07-11 20:33 - 2017-06-21 08:57 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2017-07-11 20:33 - 2017-06-21 08:54 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ExecModelClient.dll
2017-07-11 20:33 - 2017-06-21 08:54 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll
2017-07-11 20:33 - 2017-06-21 08:52 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2017-07-11 20:33 - 2017-06-21 08:48 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\uexfat.dll
2017-07-11 20:33 - 2017-06-21 08:47 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\ufat.dll
2017-07-11 20:33 - 2017-06-21 08:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\fdProxy.dll
2017-07-11 20:33 - 2017-06-21 08:46 - 00516608 _____ (Microsoft Corporation) C:\Windows\system32\uReFSv1.dll
2017-07-11 20:33 - 2017-06-21 08:46 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\cnvfat.dll
2017-07-11 10:41 - 2017-07-13 19:59 - 00000000 ____D C:\Users\toombar PC\AppData\Roaming\KeePass
2017-07-11 10:35 - 2017-07-11 10:35 - 00000665 _____ C:\Users\toombar PC\Desktop\KeePass 2.lnk
2017-07-11 10:35 - 2017-07-11 10:35 - 00000665 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePass 2.lnk
2017-07-11 09:42 - 2017-07-11 09:42 - 00000589 _____ C:\DelFix.txt
2017-07-08 22:21 - 2017-07-08 22:21 - 00000000 ____D C:\Users\toombar PC\AppData\Local\PeerDistRepub
2017-07-08 15:58 - 2017-07-08 15:58 - 00001141 _____ C:\Users\toombar PC\Desktop\Your Unin-staller!.lnk
2017-07-08 15:58 - 2017-07-08 15:58 - 00000000 ____D C:\Program Files (x86)\Your Uninstaller! 7
2017-07-08 15:49 - 2017-07-08 15:38 - 00024064 _____ C:\Windows\zoek-delete.exe
2017-07-08 10:41 - 2017-07-08 10:41 - 00000711 _____ C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2017-07-05 16:50 - 2017-07-13 20:02 - 00345448 _____ C:\Windows\system32\FNTCACHE.DAT
2017-07-05 11:39 - 2017-07-05 11:39 - 00001058 _____ C:\Users\Public\Desktop\BioShock Infinite.lnk
2017-07-05 11:39 - 2017-07-05 11:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BioShock Infinite
2017-07-04 08:16 - 2017-07-07 08:59 - 00003386 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4143605839-527040269-2466945285-1001
2017-07-03 22:02 - 2017-07-03 22:02 - 00000000 ____D C:\ProgramData\BDLogging
2017-07-03 22:02 - 2016-12-05 15:32 - 00520032 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys
2017-07-03 21:58 - 2017-07-03 21:58 - 00000000 ____D C:\Users\toombar PC\Documents\Abelssoft
2017-07-03 21:57 - 2017-07-03 21:57 - 00001630 _____ C:\Users\Public\Desktop\WashAndGo.lnk
2017-07-03 21:57 - 2017-07-03 21:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WashAndGo
2017-07-03 21:53 - 2017-07-09 13:09 - 00000000 ____D C:\Users\toombar PC\AppData\Roaming\IObit
2017-07-03 21:53 - 2017-07-09 13:09 - 00000000 ____D C:\Users\toombar PC\AppData\LocalLow\IObit
2017-07-03 20:43 - 2017-07-03 20:43 - 00478392 ____N (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\8D1587E1.sys
2017-07-03 20:43 - 2017-07-03 20:43 - 00085600 ____N (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\35073608.sys
2017-07-03 20:41 - 2017-06-21 09:07 - 00179320 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2017-07-03 20:41 - 2017-06-21 09:07 - 00146552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2017-06-28 17:46 - 2017-04-21 23:53 - 00029376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2017-06-28 17:46 - 2017-04-21 23:53 - 00018600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100_clr0400.dll
2017-06-28 17:46 - 2017-04-21 23:50 - 00030912 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2017-06-28 17:46 - 2017-04-21 23:50 - 00018592 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100_clr0400.dll
2017-06-28 17:46 - 2017-04-11 20:27 - 00993632 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2017-06-28 17:46 - 2017-04-11 20:27 - 00690008 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll
2017-06-28 17:46 - 2017-03-15 20:15 - 00987840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2017-06-28 17:46 - 2017-03-15 20:15 - 00485576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp120_clr0400.dll
2017-06-23 20:08 - 2017-06-23 20:08 - 00000000 ____D C:\Users\toombar PC\AppData\Local\Tempzxpsign874f466da20422b5
2017-06-23 20:08 - 2017-06-23 20:08 - 00000000 ____D C:\Users\toombar PC\AppData\Local\Tempzxpsign8392ef7b2a59e8ae
2017-06-23 20:08 - 2017-06-23 20:08 - 00000000 ____D C:\Users\toombar PC\AppData\Local\Tempzxpsign5c6ad63c57b95dca
2017-06-23 20:07 - 2017-06-23 20:07 - 00000000 ____D C:\Users\toombar PC\AppData\Local\Tempzxpsign4d146dbb9a39ceee
2017-06-23 20:07 - 2017-06-23 20:07 - 00000000 ____D C:\Users\toombar PC\AppData\Local\Tempzxpsign2187ab63b5386fc4
2017-06-23 20:07 - 2017-06-23 20:07 - 00000000 ____D C:\Users\toombar PC\AppData\Local\Tempzxpsign13a8f23920f36c62

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-07-23 18:33 - 2017-01-03 07:54 - 00000000 ____D C:\Users\toombar PC\AppData\Roaming\Skype
2017-07-23 18:27 - 2017-01-02 09:37 - 00000000 ____D C:\Windows\system32\SleepStudy
2017-07-23 18:12 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-07-23 18:11 - 2017-01-03 19:23 - 00000000 ____D C:\Program Files\Microsoft Office
2017-07-23 18:04 - 2017-01-02 11:01 - 00000000 ____D C:\ProgramData\NVIDIA
2017-07-23 18:03 - 2017-02-13 17:55 - 00000000 ____D C:\Users\toombar PC\AppData\Roaming\Kodi
2017-07-23 18:01 - 2017-01-09 21:14 - 00000000 ____D C:\Program Files (x86)\Steam
2017-07-23 18:01 - 2017-01-02 10:29 - 00000000 ____D C:\Users\toombar PC\AppData\LocalLow\Mozilla
2017-07-23 18:01 - 2017-01-02 09:40 - 00000000 ____D C:\Users\toombar PC
2017-07-23 18:01 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\AppReadiness
2017-07-14 14:16 - 2017-01-03 19:27 - 00000000 ____D C:\ProgramData\TEMP
2017-07-14 14:10 - 2017-01-28 17:55 - 00000000 ____D C:\Users\toombar PC\Documents\3DMark
2017-07-14 13:17 - 2017-05-01 17:07 - 00000000 ____D C:\Users\toombar PC\AppData\Local\Spotify
2017-07-14 13:08 - 2017-01-12 19:23 - 00000000 ____D C:\ProgramData\Abelssoft
2017-07-14 13:05 - 2017-01-13 15:16 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2017-07-14 13:01 - 2017-01-10 20:56 - 00000000 ____D C:\Users\toombar PC\Desktop\Sken
2017-07-14 12:59 - 2017-01-15 22:20 - 00000000 ____D C:\Users\toombar PC\Desktop\Firefox odkaty
2017-07-14 12:51 - 2017-05-01 17:06 - 00000000 ____D C:\Users\toombar PC\AppData\Roaming\Spotify
2017-07-14 12:47 - 2017-06-12 17:57 - 00002842 _____ C:\Windows\Sandboxie.ini
2017-07-14 12:37 - 2017-06-19 16:19 - 00120548 _____ C:\Users\toombar PC\Desktop\1.save
2017-07-14 07:21 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-07-14 06:30 - 2017-02-21 21:43 - 00001116 _____ C:\Users\toombar PC\Desktop\Total Commander 64 bit.lnk
2017-07-14 06:20 - 2017-04-27 15:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-07-13 21:46 - 2017-01-10 20:26 - 00000703 _____ C:\Users\toombar PC\Desktop\Start Tor Browser.lnk
2017-07-13 20:08 - 2017-01-02 09:42 - 03542710 _____ C:\Windows\system32\PerfStringBackup.INI
2017-07-13 20:08 - 2016-07-17 00:25 - 01509334 _____ C:\Windows\system32\perfh005.dat
2017-07-13 20:08 - 2016-07-17 00:25 - 00411710 _____ C:\Windows\system32\perfc005.dat
2017-07-13 20:03 - 2017-05-29 18:13 - 00002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-07-13 20:03 - 2017-05-29 18:13 - 00002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-07-13 20:03 - 2017-01-02 09:40 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-07-13 20:02 - 2017-02-26 17:35 - 33555456 _____ C:\Windows\SysWOW64\RAMDiskImage.data
2017-07-13 20:02 - 2017-01-02 09:37 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-07-13 20:02 - 2016-07-16 13:45 - 00000000 ____D C:\Windows\INF
2017-07-13 20:02 - 2016-07-16 08:04 - 00262144 _____ C:\Windows\system32\config\BBI
2017-07-13 20:01 - 2016-07-16 13:47 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2017-07-13 20:01 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\oobe
2017-07-13 20:01 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\appraiser
2017-07-13 20:01 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\ShellExperiences
2017-07-13 20:01 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-07-13 20:01 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-07-13 19:52 - 2017-01-04 17:06 - 00000000 ____D C:\Users\toombar PC\AppData\Roaming\vlc
2017-07-11 23:10 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\LiveKernelReports
2017-07-11 20:40 - 2016-07-16 13:36 - 00000000 ____D C:\Windows\CbsTemp
2017-07-11 20:36 - 2017-01-02 21:02 - 00000000 ____D C:\Windows\system32\MRT
2017-07-11 20:35 - 2017-01-02 21:02 - 135225752 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-07-11 20:08 - 2016-07-16 13:43 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\enrollmentapi.dll
2017-07-11 11:59 - 2017-03-19 18:04 - 00000000 ___RD C:\Users\toombar PC\Disk Google
2017-07-09 16:11 - 2017-01-10 20:15 - 00000000 ____D C:\Users\toombar PC\AppData\LocalLow\Temp
2017-07-08 22:21 - 2017-01-02 09:56 - 00000000 ____D C:\MSI
2017-07-08 15:58 - 2017-02-28 22:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Your Uninstaller! 7
2017-07-08 15:48 - 2016-07-16 13:47 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2017-07-08 11:05 - 2017-01-28 17:58 - 00000022 _____ C:\Windows\GPU-Z.INI
2017-07-08 10:41 - 2017-01-25 22:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2017-07-07 08:59 - 2017-01-02 09:41 - 00002402 _____ C:\Users\toombar PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-07-07 08:59 - 2017-01-02 09:41 - 00000000 ___RD C:\Users\toombar PC\OneDrive
2017-07-06 07:27 - 2017-01-15 13:12 - 00000008 __RSH C:\ProgramData\ntuser.pol
2017-07-06 07:26 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2017-07-05 12:05 - 2017-02-22 19:39 - 00000000 ____D C:\Users\toombar PC\Documents\My Games
2017-07-05 12:05 - 2017-01-14 10:34 - 00000000 ____D C:\ProgramData\Steam
2017-07-05 11:07 - 2017-01-04 18:47 - 00000000 ____D C:\Users\toombar PC\AppData\Roaming\DAEMON Tools Lite
2017-07-04 08:57 - 2017-01-02 09:40 - 00000000 ____D C:\Users\toombar PC\AppData\Local\VirtualStore
2017-07-03 22:08 - 2017-03-20 07:14 - 00000000 ___HD C:\$WINDOWS.~BT
2017-07-03 22:08 - 2017-01-02 09:56 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-07-03 22:07 - 2017-06-07 21:30 - 00000000 ____D C:\Users\toombar PC\AppData\Roaming\Internet Download Accelerator
2017-07-03 22:07 - 2017-03-22 20:36 - 00000000 ____D C:\Windows\Minidump
2017-07-03 22:07 - 2017-01-25 12:10 - 00000000 ____D C:\Users\toombar PC\AppData\Roaming\TeamViewer
2017-07-03 22:07 - 2017-01-15 18:15 - 00000000 ____D C:\Users\toombar PC\AppData\Roaming\Sony
2017-07-03 22:07 - 2017-01-02 11:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2017-07-03 22:07 - 2017-01-02 09:36 - 00000000 ____D C:\Windows\Panther
2017-07-03 21:58 - 2017-01-12 19:24 - 00000000 ____D C:\Users\toombar PC\AppData\Local\Abelssoft
2017-07-03 21:49 - 2017-06-12 18:03 - 00000000 ____D C:\Users\toombar PC\AppData\Roaming\Viv
2017-07-03 20:42 - 2017-05-23 18:29 - 00004000 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-03 20:42 - 2017-01-03 17:49 - 00004308 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-03 20:42 - 2017-01-03 17:49 - 00003994 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-03 20:42 - 2017-01-03 17:49 - 00003894 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-03 20:42 - 2017-01-03 17:49 - 00003866 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-03 20:42 - 2017-01-03 17:49 - 00003858 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-03 20:42 - 2017-01-03 17:49 - 00003696 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-03 20:42 - 2017-01-03 17:49 - 00003654 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-03 20:42 - 2017-01-02 09:56 - 00001485 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2017-07-03 20:42 - 2017-01-02 09:56 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-07-03 20:42 - 2017-01-02 09:56 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-07-03 19:23 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\NDF
2017-07-03 18:18 - 2017-04-24 15:03 - 00000000 ____D C:\Users\toombar PC\AppData\Local\ElevatedDiagnostics
2017-06-30 16:46 - 2016-07-16 13:49 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-06-30 16:46 - 2016-07-16 13:49 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-06-28 17:50 - 2017-05-12 14:15 - 00000000 ____D C:\Windows\system32\UNP
2017-06-28 17:50 - 2017-05-12 14:15 - 00000000 ____D C:\Program Files\UNP
2017-06-27 21:52 - 2017-01-02 10:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

==================== Files in the root of some directories =======

2017-04-13 15:53 - 2017-04-21 18:43 - 0000700 ___SH () C:\Users\toombar PC\AppData\Local\systemFL7.dat
2017-03-27 21:27 - 2017-04-17 20:58 - 0000182 _____ () C:\Users\toombar PC\AppData\Local\uts.ini
2017-01-11 16:53 - 2017-01-11 16:53 - 0000037 _____ () C:\Users\toombar PC\AppData\Local\X-Plane Installer.prf
2017-01-11 16:57 - 2017-05-14 19:46 - 0000015 _____ () C:\Users\toombar PC\AppData\Local\X-Plane_drm_11.prf
2017-01-11 16:27 - 2017-01-11 16:27 - 0000024 _____ () C:\Users\toombar PC\AppData\Local\x-plane_install_11.txt

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-07-05 11:57

==================== End of FRST.txt ============================



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive b: (RAMDisk) (Fixed) (Total:3 GB) (Free:2.98 GB) NTFS
Drive c: () (Fixed) (Total:223.57 GB) (Free:56.99 GB) NTFS
Drive d: () (Fixed) (Total:930.97 GB) (Free:599.9 GB) NTFS

Available physical RAM: 8393.74 MB
Total physical RAM: 16344 MB
Percentage of memory in use: 48%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 72232B3D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 223.6 GB) (Disk ID: 9CC853E6)
Partition 1: (Not Active) - (Size=223.6 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\ProgramData\TEMP:1CE11B51 [152]

==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Smart Security 10.0.390.0 (Enabled - Up to date) {EC1D6F37-E411-475A-DF50-12FF7FE4AC70}
AS: ESET Smart Security 10.0.390.0 (Enabled - Up to date) {577C8ED3-C22B-48D4-E5E0-298D0463E6CD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Personální firewall (Enabled) {D426EE12-AE7E-4602-F40F-BBCA8137EB0B}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\toombar PC\Desktop" je 16 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]


==================== End Of Log ==============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 23-07-2017
Ran by toombar PC (23-07-2017 18:48:39)
Running from C:\Users\toombar PC\Desktop
Windows 10 Pro Version 1607 (X64) (2017-01-02 07:39:48)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-4143605839-527040269-2466945285-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4143605839-527040269-2466945285-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-4143605839-527040269-2466945285-1000 - Limited - Disabled) => C:\Users\defaultuser0
Guest (S-1-5-21-4143605839-527040269-2466945285-501 - Limited - Disabled)
toombar PC (S-1-5-21-4143605839-527040269-2466945285-1001 - Administrator - Enabled) => C:\Users\toombar PC

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Smart Security 10.0.390.0 (Enabled - Up to date) {EC1D6F37-E411-475A-DF50-12FF7FE4AC70}
AS: ESET Smart Security 10.0.390.0 (Enabled - Up to date) {577C8ED3-C22B-48D4-E5E0-298D0463E6CD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Personální firewall (Enabled) {D426EE12-AE7E-4602-F40F-BBCA8137EB0B}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

3DMark (HKLM\...\{F611E93B-8EC1-4662-BDFF-6909DB820862}) (Version: 2.2.3509.0 - Futuremark) Hidden
3DMark (HKLM-x32\...\{4bf26510-8c4e-447c-b819-2967aeca2839}) (Version: 2.2.3509.0 - Futuremark)
Aktualizace NVIDIA 25.6.0.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 25.6.0.0 - NVIDIA Corporation) Hidden
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 382.33 - NVIDIA Corporation) Hidden
Ashampoo Burning Studio 2017 (HKLM-x32\...\{91B33C97-C878-6579-69BA-23E5405C7AAB}_is1) (Version: 18.0.0 - Ashampoo GmbH & Co. KG)
Auslogics Disk Defrag Professional (HKLM-x32\...\{ADE1535C-C836-4F2E-BDA1-1C7C304743E3}_is1) (Version: 4.8.0.0 - Auslogics Labs Pty Ltd)
BioShock Infinite version 1.1.25.5165 (HKLM-x32\...\BioShock Infinite_is1) (Version: 1.1.25.5165 - 2K Games)
CPUID CPU-Z 1.78 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
CPUID HWMonitor 1.31 (HKLM\...\CPUID HWMonitor_is1) (Version: - )
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.5.0.0222 - Disc Soft Ltd)
devolo dLAN Configuration Wizard (HKLM-x32\...\dlanconf) (Version: 17.0.0.0 - devolo AG)
devolo Informer (HKLM-x32\...\dslmon) (Version: 26.0.0.0 - devolo AG)
ESET Smart Security (HKLM\...\{E483B847-824D-4659-A760-0AC8FE24055E}) (Version: 10.0.386.1 - ESET, spol. s r.o.)
Far Cry 4 (HKLM-x32\...\Uplay Install 420) (Version: - Ubisoft)
Far Cry Primal (HKLM-x32\...\{80BD47AF-CF13-49B2-99BF-7E78FBA26124}_is1) (Version: - Ubisoft)
Fraps (HKLM-x32\...\Fraps) (Version: - )
Futuremark SystemInfo (HKLM-x32\...\{6583B359-134F-480D-9B31-9B94EFFAFE40}) (Version: 5.0.609.0 - Futuremark)
Genie Timeline (HKLM-x32\...\Genie Timeline) (Version: 7.0 - Genie9)
Google Drive (HKLM-x32\...\{A1238426-ECDF-4639-BE2F-8D12A97AE23C}) (Version: 2.34.5075.1619 - Google, Inc.)
Google Earth (HKLM-x32\...\{F6430171-B86B-4639-839E-374913E7911D}) (Version: 7.1.8.3036 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 59.0.3071.115 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Hard Disk Sentinel PRO (HKLM-x32\...\Hard Disk Sentinel_is1) (Version: - HDS)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.6.0.1036 - Intel Corporation)
Intel(R) Network Connections 20.7.67.0 (HKLM\...\PROSetDX) (Version: 20.7.67.0 - Intel)
Intel(R) Online Connect Software Asset Manager (HKLM-x32\...\{AE956AB9-CD98-4F1E-8B9E-C3C66E290D64}) (Version: 3.4.2072 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.63.1519.7 - Intel Corporation)
Intel® Chipset Device Software (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel(R) Corporation) Hidden
Intel® Security Assist (HKLM-x32\...\{B294CE94-FE0F-4427-910C-180AF9FCFED1}) (Version: 1.0.1.620 - Intel Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
KeePass Password Safe 2.36 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.36 - Dominik Reichl)
Mafia III Update v1.01 Hotfix (HKLM\...\bWFmaWFpaWk_is1) (Version: 1 - )
Microsoft Office Professional Plus 2016 - cs-cz (HKLM\...\ProplusRetail - cs-cz) (Version: 16.0.8326.2052 - Microsoft Corporation)
Microsoft Office Professional Plus 2016 - en-us (HKLM\...\ProplusRetail - en-us) (Version: 16.0.8326.2052 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\OneDriveSetup.exe) (Version: 17.3.6944.0627 - Microsoft Corporation)
Microsoft Project Professional 2016 - cs-cz (HKLM\...\ProjectProRetail - cs-cz) (Version: 16.0.8326.2052 - Microsoft Corporation)
Microsoft Project Professional 2016 - en-us (HKLM\...\ProjectProRetail - en-us) (Version: 16.0.8326.2052 - Microsoft Corporation)
Microsoft Visio Professional 2016 - cs-cz (HKLM\...\VisioProRetail - cs-cz) (Version: 16.0.8326.2052 - Microsoft Corporation)
Microsoft Visio Professional 2016 - en-us (HKLM\...\VisioProRetail - en-us) (Version: 16.0.8326.2052 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.2.1.6382 - Mozilla)
Mozilla Thunderbird 52.2.1 (x86 cs) (HKLM-x32\...\Mozilla Thunderbird 52.2.1 (x86 cs)) (Version: 52.2.1 - Mozilla)
MSI Fast Boot (HKLM-x32\...\{0F212E7A-65EB-4668-A8D7-749026A64F8E}_is1) (Version: 1.0.1.8 - MSI)
MSI Gaming APP (HKLM-x32\...\{E0229316-E73B-484B-B9E0-45098AB38D8C}}_is1) (Version: 6.2.0.10 - MSI)
MSI Live Update 6 (HKLM-x32\...\{4F46CF54-47D2-41F4-B230-B0954C544420}}_is1) (Version: 6.2.0.10 - MSI)
MSI RAMDisk (HKLM-x32\...\{F29CF050-7278-4CDB-9EF8-2DC6DAA87453}}_is1) (Version: 1.0.0.22 - MSI)
MXGP3 The Official Motocross Videogame (HKLM-x32\...\MXGP3 The Official Motocross Videogame_is1) (Version: - )
NVIDIA GeForce Experience 3.7.0.81 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.7.0.81 - NVIDIA Corporation)
NVIDIA Ovladač 3D Vision 382.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 382.33 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.34.26 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.26 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 382.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 382.33 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.17.0329 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0329 - NVIDIA Corporation)
NvNodejs (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvNodejs) (Version: 3.7.0.81 - NVIDIA Corporation) Hidden
NvTelemetry (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetry) (Version: 2.6.1.0 - NVIDIA Corporation) Hidden
NvvHci (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvvHci) (Version: 2.02.0.5 - NVIDIA Corporation) Hidden
O&O SafeErase Professional (HKLM\...\{648C9190-86AF-4D84-8302-A53390205132}) (Version: 11.0.151 - O&O Software GmbH)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.8326.2052 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.8326.2052 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.8229.2041 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.8229.2041 - Microsoft Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 10.4.10.46586 - Electronic Arts, Inc.)
Outlast 2 (HKLM-x32\...\1453301453_is1) (Version: gog-1 - GOG.com)
Ovládací panel NVIDIA 382.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 382.33 - NVIDIA Corporation) Hidden
Pomocník při upgradu na Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.17384 - Microsoft Corporation)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7855 - Realtek Semiconductor Corp.)
Registry Cleaner (HKLM-x32\...\Registry Cleaner_is1) (Version: 2.0 - Abelssoft)
Sandboxie 5.20 (64-bit) (HKLM\...\Sandboxie) (Version: 5.20 - Sandboxie Holdings, LLC)
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0380 - NVIDIA Corporation) Hidden
Skype™ 7.36 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.36.101 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Spotify) (Version: 1.0.58.573.g57c9cd87 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.78313 - TeamViewer)
The Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.0.615 - Electronic Arts)
The Witcher 2 - Assassins of Kings Enhanced Edition (HKLM-x32\...\The Witcher 2 - Assassins of Kings Enhanced Edition_is1) (Version: - GOG.com)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.0a - Ghisler Software GmbH)
TP-LINK TL-WN721N_TL-WN722N Driver (HKLM-x32\...\{38A1E3ED-D913-41D2-9953-A93D5ACE3ADF}) (Version: 1.3.1 - TP-LINK)
Uplay (HKLM-x32\...\Uplay) (Version: 30.0 - Ubisoft)
VEGAS Pro 14.0 (64-bit) (HKLM\...\{4C79D80F-79F9-11E6-8402-BB95F5A309BD}) (Version: 14.0.161 - VEGAS)
VivPDF Editor (HKLM-x32\...\VivPDFEditor_is1) (Version: 3.0.1.1013 - )
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN)
Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)
WashAndGo (HKLM-x32\...\AbAppId-53_is1) (Version: 23.0 - Abelssoft)
Windows 10 Update and Privacy Settings (HKLM\...\{4DFCD818-036A-4229-A67D-CF17DC461D92}) (Version: 1.0.14.0 - Microsoft Corporation)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
Your Uninstaller! 7 (HKLM-x32\...\YU2010_is1) (Version: 7.5.2014.3 - URSoft, Inc.)
Základní software zařízení HP Deskjet 3510 series (HKLM\...\{1719C693-20CF-4BC3-831F-B65E79268114}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google)
ContextMenuHandlers01: [ESET Smart Security - Context Menu Shell Extension] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Smart Security\shellExt.dll [2016-12-14] (ESET)
ContextMenuHandlers01: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-03-21] (Google)
ContextMenuHandlers01: [SafeErase] -> {E8D43C7E-EFA1-41A2-9AD9-0CFECD1678B7} => C:\Program Files\OO Software\SafeErase\oosesh.dll [2017-06-01] (O&O Software GmbH)
ContextMenuHandlers01: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers02: [ESET Smart Security - Context Menu Shell Extension] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Smart Security\shellExt.dll [2016-12-14] (ESET)
ContextMenuHandlers02: [SafeErase] -> {E8D43C7E-EFA1-41A2-9AD9-0CFECD1678B7} => C:\Program Files\OO Software\SafeErase\oosesh.dll [2017-06-01] (O&O Software GmbH)
ContextMenuHandlers04: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-03-21] (Google)
ContextMenuHandlers05: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2017-05-18] (NVIDIA Corporation)
ContextMenuHandlers06: [ESET Smart Security - Context Menu Shell Extension] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Smart Security\shellExt.dll [2016-12-14] (ESET)
ContextMenuHandlers06: [SafeErase] -> {E8D43C7E-EFA1-41A2-9AD9-0CFECD1678B7} => C:\Program Files\OO Software\SafeErase\oosesh.dll [2017-06-01] (O&O Software GmbH)
ContextMenuHandlers06: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {005E4777-0B2D-4161-9221-A4410BCAA41B} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-06-21] (NVIDIA Corporation)
Task: {1689C970-B79D-4AFB-B115-F9C7DE6F5A85} - System32\Tasks\Core Temp Autostart toombar PC => D:\Core Temp\Core Temp\Core Temp.exe
Task: {27E02E48-8A2A-4AE9-B9D6-05031C5D6A1B} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-06-21] (NVIDIA Corporation)
Task: {29F72EF3-124D-41E8-A281-5560DBF19469} - System32\Tasks\MSIGH_Host => C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey.exe [2017-01-19] (Micro-Star INT'L CO., LTD.)
Task: {2C91CC2A-E08A-4EB2-814A-391F8791F104} - System32\Tasks\MSIOSDx86_Host => C:\Program Files (x86)\MSI\Gaming APP\OSD\x86\MsiGamingOSD_x86.exe [2016-07-28] (Micro-Star INT'L CO., LTD.)
Task: {2DF9629A-CBE3-4963-BBC2-EF1B8C950AE3} - System32\Tasks\HardDiskSentinel\Hard Disk Sentinel_toombar_20PC => C:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe [2017-01-10] (H.D.S. Hungary)
Task: {4BE5A328-E335-4AAC-85AE-15BD822ED63B} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-06-21] (NVIDIA Corporation)
Task: {4F874D82-9C9F-479F-8C7F-B4D1433D9507} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-07-18] (Microsoft Corporation)
Task: {593A4FB7-0297-4168-BE3B-06AF3187A53A} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
Task: {59AEA707-8AB5-4859-BC70-1158066032EB} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2017-07-23] (Microsoft Corporation)
Task: {78D1863C-DD35-4D29-945B-A4F618E5D2BA} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2017-07-23] (Microsoft Corporation)
Task: {7AA67E60-37AC-432A-8A40-CD04ACD04D72} - System32\Tasks\MSISW_Host => C:\Windows\SysWoW64\muachost.exe [2015-08-18] (MSI)
Task: {8AE86DE8-6CB4-4B3A-89BE-17E1FFC718B2} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-06-21] (NVIDIA Corporation)
Task: {945C32EA-C9A6-4C2B-9DE1-A65C449874F1} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-07-18] (Microsoft Corporation)
Task: {963167D3-B253-4207-86F4-655D27DF90CF} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-06-21] (NVIDIA Corporation)
Task: {98BAEAD2-5C91-4286-B88E-8D2B7A770418} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-06-22] ()
Task: {9ED3B29F-C3DF-4D5C-8D55-BFC3C076AE36} - System32\Tasks\IntelIOC-Upgrade-f1c8187b-2653-47cd-a9be-b554b98f68a7 => C:\Program Files (x86)\Intel\Intel(R) Online Connect Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [2016-09-29] (Intel Corporation)
Task: {A3908112-A23A-4D7B-82A9-9E82535A44E5} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-06-21] (NVIDIA Corporation)
Task: {A54DE53F-395D-4378-879F-05F5940C872C} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-06-22] ()
Task: {A54EE21B-A0B3-4E0C-9F32-90DF66728C18} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-06-21] (NVIDIA Corporation)
Task: {B6C73325-5F81-4E5F-877F-04BAA493C4B8} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-06-21] (NVIDIA Corporation)
Task: {B7A641CD-4665-41CF-89CE-53D5F3087993} - System32\Tasks\IntelIOC-Upgrade-f1c8187b-2653-47cd-a9be-b554b98f68a7-Logon => C:\Program Files (x86)\Intel\Intel(R) Online Connect Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [2016-09-29] (Intel Corporation)
Task: {B8C07CBD-159F-4910-841C-134ECC6C4E6D} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2016-07-26] (Intel(R) Corporation)
Task: {DA72F29E-EEBD-443A-AC0D-FFA80D3FE39F} - System32\Tasks\MSIOSDx64_Host => C:\Program Files (x86)\MSI\Gaming APP\OSD\x64\MsiGamingOSD_x64.exe [2016-07-28] (Micro-Star INT'L CO., LTD.)
Task: {E6C3D4DC-B3A2-4C77-BD1A-DB7250601E4C} - System32\Tasks\ABRC_RegularCheck => C:\Program Files (x86)\RegistryCleaner\RegistryCleaner.exe [2016-09-26] (Ascora GmbH)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2016-10-05 13:15 - 2016-10-05 13:15 - 00107752 _____ () C:\Program Files\Intel\Intel(R) Online Connect Access\libglog.dll
2016-10-05 13:15 - 2016-10-05 13:15 - 00412904 _____ () C:\Program Files\Intel\Intel(R) Online Connect Access\JsonCpp.dll
2017-01-03 17:49 - 2017-06-21 09:07 - 01267320 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-10-04 18:09 - 2016-10-04 18:09 - 00253664 _____ () C:\Program Files\Intel\Intel(R) Online Connect\CSLibWrapper.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\Windows\SYSTEM32\ism32k.dll
2017-07-11 20:34 - 2017-06-21 09:48 - 02681200 _____ () C:\Windows\System32\CoreUIComponents.dll
2017-04-13 15:31 - 2016-06-14 16:35 - 00187392 _____ () C:\Program Files (x86)\MSI\Gaming APP\OSD\x64\D3D11FontDraw.dll
2017-01-02 21:01 - 2016-09-07 06:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-15 21:40 - 2017-03-04 08:31 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-06-21 14:40 - 2017-06-21 14:40 - 00074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-06-21 14:40 - 2017-06-21 14:40 - 00203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-06-21 14:40 - 2017-06-21 14:40 - 43454464 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-06-21 14:40 - 2017-06-21 14:40 - 02437120 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\skypert.dll
2017-06-27 14:52 - 2017-06-23 05:21 - 03807064 _____ () C:\Program Files (x86)\Google\Chrome\Application\59.0.3071.115\libglesv2.dll
2017-06-27 14:52 - 2017-06-23 05:21 - 00100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\59.0.3071.115\libegl.dll
2017-03-15 21:41 - 2017-03-04 08:12 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-15 21:41 - 2017-03-04 08:05 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-15 21:41 - 2017-03-04 08:05 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-07-11 20:34 - 2017-06-21 08:35 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-07-11 20:34 - 2017-06-21 08:37 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-03-18 10:43 - 2005-07-18 14:43 - 00160256 _____ () C:\Program Files (x86)\MSI\Live Update\unrar.dll
2016-10-20 02:28 - 2016-10-20 02:28 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2017-01-03 17:49 - 2017-06-21 09:07 - 01040504 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-04-13 15:31 - 2016-06-14 16:35 - 00163328 _____ () C:\Program Files (x86)\MSI\Gaming APP\OSD\x86\D3D11FontDraw.dll
2017-01-03 17:49 - 2017-06-21 09:06 - 66837112 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
2017-01-09 21:15 - 2017-05-17 03:54 - 00678176 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2017-01-09 21:15 - 2016-09-01 03:02 - 04969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2017-01-09 21:15 - 2017-07-14 04:33 - 02496800 _____ () C:\Program Files (x86)\Steam\video.dll
2017-01-09 21:15 - 2016-01-27 09:49 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2017-01-09 21:15 - 2016-01-27 09:49 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2017-01-09 21:15 - 2016-01-27 09:49 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2017-01-09 21:15 - 2016-01-27 09:49 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2017-01-09 21:15 - 2016-01-27 09:49 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2017-01-09 21:15 - 2016-09-01 03:02 - 01563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2017-01-09 21:15 - 2016-09-01 03:02 - 01195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2017-01-09 21:15 - 2017-07-14 04:33 - 00884512 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2017-01-09 21:15 - 2016-07-05 00:17 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2017-04-26 15:19 - 2017-04-26 15:19 - 02005976 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll
2017-01-09 21:16 - 2017-07-06 19:58 - 73088800 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2017-06-09 13:42 - 2017-05-17 03:54 - 00678176 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\SDL2.dll
2017-01-09 21:15 - 2017-07-14 04:33 - 00384288 _____ () C:\Program Files (x86)\Steam\steam.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:1CE11B51 [152]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-05-01 21:13 - 2017-07-09 16:11 - 00000027 _____ C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4143605839-527040269-2466945285-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img2.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: off)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "Malwarebytes TrayApp"
HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"
HKLM\...\StartupApproved\Run32: => "Live Update"
HKLM\...\StartupApproved\Run32: => "MSIRegister"
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\StartupApproved\StartupFolder: => "GoogleUpdate.lnk"
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\StartupApproved\StartupFolder: => "TeamViewer 12.lnk"
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\StartupApproved\Run: => "GoogleDriveSync"
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\StartupApproved\Run: => "WTFast Tray"
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\StartupApproved\Run: => "Internet Download Accelerator"
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\StartupApproved\Run: => "SandboxieControl"
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\StartupApproved\Run: => "IDMan"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{1BB87FC1-7ADE-489F-9D4F-B8040F43995A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{8AE420C2-70CD-468E-9F8B-7AA15C03AB77}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{0C56CAC2-8D27-48FD-96F6-5F2B6F2A0E25}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{BB6D2ECE-87A2-4869-BBAE-215A940DC7DF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{054994F0-3D6C-44D8-9F0A-3088ECF85AB8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{A06208B1-51B1-4216-B5E5-6B32C4B87F15}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{542FB5E4-7E04-4B8E-9FB4-D77E35E4C281}] => (Allow) C:\Program Files\HP\HP Deskjet 3510 series\Bin\DeviceSetup.exe
FirewallRules: [{6E020CC2-F01E-4CF6-BA70-1E8207543871}] => (Allow) C:\Program Files\HP\HP Deskjet 3510 series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{2006F230-F773-476E-8808-981D327D18FF}] => (Allow) C:\Program Files\HP\HP Deskjet 3510 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{3BB9D368-A439-424F-92B1-5547CB5BDA91}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6F832742-179A-442B-86B9-2D18CDCF4D3F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{3F7D1996-7891-4DD0-B028-1D23520EC21E}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{03E3F36C-22B4-44EE-B088-2B3BADA62CAF}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{FF94A641-F0D8-4488-BF30-E035A7DE78DB}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{970C9A08-A9EC-4C2D-925B-2BA0EF5AAAF1}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Rogue\ACC.exe
FirewallRules: [{0DEBFC3B-0F33-4155-B211-BDFF49F2892A}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Rogue\ACC.exe
FirewallRules: [{5415E77C-7A3D-4CAD-A77F-E997A9AB6821}] => (Allow) D:\Hry\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{C84A1A03-F355-41A7-839A-DB5A4152FBCE}] => (Allow) D:\Hry\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{C710728D-5345-44B8-BC74-2720F2DD7F33}] => (Allow) D:\Hry\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{6E5BC75F-825C-45D5-B9F1-535C85DF9E55}] => (Allow) D:\Hry\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{6EBB338B-2487-47E2-9E23-CA9746D1DFDA}] => (Allow) C:\Program Files (x86)\devolo\informer\devinf.exe
FirewallRules: [{8A401C9F-A52D-4E5F-AC23-B4035AA7D18F}] => (Allow) C:\Program Files (x86)\devolo\informer\devinf.exe
FirewallRules: [{8446E624-A84A-4A01-BE84-34E7E66C5947}] => (Allow) C:\Program Files (x86)\devolo\easyshare\easyshare.exe
FirewallRules: [{613463AE-D325-4A84-B964-EFCEF048F66F}] => (Allow) C:\Program Files (x86)\devolo\easyshare\easyshare.exe
FirewallRules: [{8F0C27FD-FC3F-440E-990E-06D271BBF254}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{4E686FA2-97B6-4E87-8AE2-9843F1920BA9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{B1BB7B94-B859-4BE2-9C39-48DC7864D4E1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{B360DB71-416D-4F9B-B89A-9A3340747C1D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{02DD9530-32F3-4020-80CA-448B151EA13C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{FF7B0050-9408-4185-9B3C-DB4820FAA9B8}] => (Allow) LPort=26789
FirewallRules: [{70FFEC8A-D99F-4AFE-BD3F-D21A79D26E9B}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe

==================== Restore Points =========================

09-07-2017 15:37:41 RegistryCleaner 09.07.2017 15:37:41
09-07-2017 15:39:39 RegistryCleaner 09.07.2017 15:39:39
14-07-2017 06:20:03 Before uninstalling Sniper Elite 4
14-07-2017 12:56:52 Before uninstalling Adobe Photoshop CC 2017
14-07-2017 13:01:44 RegistryCleaner 14.07.2017 13:01:44
14-07-2017 14:07:51 Installed O&O SafeErase Professional
14-07-2017 14:14:00 Before uninstalling O&O SafeErase Professional
14-07-2017 14:14:06 Removed O&O SafeErase Professional
14-07-2017 14:21:09 Installed O&O SafeErase Professional

==================== Faulty Device Manager Devices =============

Name: Standardní klávesnice PS/2
Description: Standardní klávesnice PS/2
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní klávesnice)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Myš Microsoft PS/2
Description: Myš Microsoft PS/2
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/23/2017 06:04:37 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0xC004F074
Argument příkazového řádku:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=TimerEvent

Error: (07/23/2017 06:01:33 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: Systém Windows nemůže načíst knihovnu DLL rozšiřitelných čítačů rdyboost. První čtyři bajty (DWORD) datové sekce obsahují kód chyby systému Windows.

Error: (07/14/2017 09:27:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: HWMonitor.exe, verze: 1.3.1.0, časové razítko: 0x58d3ef5b
Název chybujícího modulu: ntdll.dll, verze: 10.0.14393.1378, časové razítko: 0x594a1350
Kód výjimky: 0xc0000005
Posun chyby: 0x00000000000495dc
ID chybujícího procesu: 0x15b4
Čas spuštění chybující aplikace: 0x01d2fc58473ee5c9
Cesta k chybující aplikaci: D:\hwmonitor\HWMonitor\HWMonitor.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: 7d7e2590-2128-4075-8f7c-3abfdff261b1
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (07/14/2017 08:18:25 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Službě Windows Search se nepodařilo zpracovat seznam zahrnutých a vyloučených umístění, a to s chybou <30, 0x80040d07, iehistory://{S-1-5-21-4143605839-527040269-2466945285-1001}/>.

Error: (07/14/2017 02:32:23 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Službě Windows Search se nepodařilo zpracovat seznam zahrnutých a vyloučených umístění, a to s chybou <30, 0x80040d07, iehistory://{S-1-5-21-4143605839-527040269-2466945285-1001}/>.

Error: (07/14/2017 02:26:52 PM) (Source: Application Error) (EventID: 1005) (User: )
Description: Systém Windows nemůže získat přístup k souboru z jednoho z těchto důvodů:
došlo k problému s připojením k síti, s diskem, na kterém je soubor uložen, nebo
s ovladači ukládání nainstalovanými v tomto počítači; nebo disk chybí.
Systém Windows kvůli této chybě ukončil program OriginWebHelperService.exe.

Program: OriginWebHelperService.exe
Soubor:

Hodnota chyby je uvedena v části Další údaje.
Akce uživatele
1. Otevřete soubor znovu.
Může se jednat o dočasný problém, který se při novém spuštění programu nebude opakovat.
2.
Pokud k souboru stále nelze získat přístup a:
- Nachází se v síti,
měl by správce sítě ověřit, zda nedošlo k problému se sítí a zda lze server kontaktovat.
- Je na vyměnitelném disku (například disketě nebo disku CD-ROM), ověřte, zda je disk správně vložen do počítače.
3. Zkontrolujte a opravte systém souborů pomocí nástroje CHKDSK. Ten lze spustit tak, že kliknete na tlačítko Start a příkaz Spustit, zadáte příkaz CMD a kliknete na tlačítko OK. Do příkazového řádku zadejte příkaz CHKDSK /F a stiskněte klávesu ENTER.
4. Pokud potíže potrvají, obnovte soubor ze záložní kopie.
5. Zjistěte, zda lze otevřít jiné soubory na stejném disku. Pokud ne, může být disk poškozen. Jedná-li se o pevný disk, obraťte se na správce nebo na dodavatele počítačového hardwaru
se žádostí o pomoc.

Další údaje
Hodnota chyby: C000026E
Typ disku: 0

Error: (07/14/2017 02:26:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: OriginWebHelperService.exe, verze: 0.0.0.0, časové razítko: 0x5914dc97
Název chybujícího modulu: ntdll.dll, verze: 10.0.14393.1378, časové razítko: 0x594a1295
Kód výjimky: 0xc0000006
Posun chyby: 0x0005f3b9
ID chybujícího procesu: 0xbb4
Čas spuštění chybující aplikace: 0x01d2fc023c7405b5
Cesta k chybující aplikaci: D:\Origin\OriginWebHelperService.exe
Cesta k chybujícímu modulu: C:\Windows\SYSTEM32\ntdll.dll
ID zprávy: da50331c-f199-406f-97f5-7e49e29131a4
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (07/14/2017 02:23:28 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Službě Windows Search se nepodařilo zpracovat seznam zahrnutých a vyloučených umístění, a to s chybou <30, 0x80040d07, iehistory://{S-1-5-21-4143605839-527040269-2466945285-1001}/>.

Error: (07/14/2017 02:21:10 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Protokol Microsoft LLDP (Link-Layer Discovery Protocol).

System Error:
Přístup byl odepřen.
.

Error: (07/14/2017 02:14:09 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Protokol Microsoft LLDP (Link-Layer Discovery Protocol).

System Error:
Přístup byl odepřen.
.


System errors:
=============
Error: (07/23/2017 06:01:53 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Steam Client Service neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (07/23/2017 06:01:53 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Steam Client Service bylo dosaženo časového limitu (60000 ms).

Error: (07/14/2017 09:27:54 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-ANQTDIM)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (07/14/2017 09:27:53 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-ANQTDIM)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (07/14/2017 09:27:51 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (07/14/2017 02:26:53 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Origin Web Helper Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (07/14/2017 12:10:27 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (07/14/2017 06:18:37 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (07/13/2017 10:23:48 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-ANQTDIM)
Description: Server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} se v daném časovém limitu neregistroval u služby DCOM.

Error: (07/13/2017 10:23:47 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.


CodeIntegrity:
===================================
Date: 2017-07-13 10:34:39.293
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

Date: 2017-07-12 12:57:47.254
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

Date: 2017-07-09 13:07:35.316
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

Date: 2017-07-07 20:00:27.025
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

Date: 2017-07-07 19:58:11.460
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

Date: 2017-07-05 17:01:37.660
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

Date: 2017-07-03 22:41:12.129
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\ESET\ESET Smart Security\Modules\em023_64\10445\em023_64.dll.raw because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-07-03 22:41:11.994
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\ESET\ESET Smart Security\Modules\em023_64\10445\em023_64.dll.raw because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-07-03 22:32:38.694
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ProgramData\ESET\ESET Smart Security\Updfiles\base_nonnups\nod7D44.dll.nup.raw because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-07-03 22:32:38.580
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ProgramData\ESET\ESET Smart Security\Updfiles\base_nonnups\nod7D44.dll.nup.raw because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-6600K CPU @ 3.50GHz
Percentage of memory in use: 48%
Total physical RAM: 16344 MB
Available physical RAM: 8393.74 MB
Total Virtual: 32728 MB
Available Virtual: 24230.22 MB

==================== Drives ================================

Drive b: (RAMDisk) (Fixed) (Total:3 GB) (Free:2.98 GB) NTFS
Drive c: () (Fixed) (Total:223.57 GB) (Free:56.99 GB) NTFS
Drive d: () (Fixed) (Total:930.97 GB) (Free:599.9 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 72232B3D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 223.6 GB) (Disk ID: 9CC853E6)
Partition 1: (Not Active) - (Size=223.6 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

Ahoj, mohli by jste mi zkontrolovat log? Ne že by se PC chovalo divně ale měsíc už skoro uběhl tak sem si řekl že bych se nechal zkontrolovat log.

DÍKY

// Oprava: Byl jsem týden na Moravě a všiml jsem si že se mi smazali nějaké staré verze DirectX nebo něčeho takovýho a taky herní klient Uplay a hra Far Cry 4. Už předtím jsem si ale všiml že se mi smazal Your Uninstaler 7.

Zdravim

Priste si sam neodpovidejte, jinak hrozi, ze zapadnete, protoze to pak vypada, ze uz tema nekdo resi.

Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner[C?].txt ). Ten mi sem zkopirujte.

Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu (cili Vlastni sken vsech disku) http://forum.viry.cz/viewtopic.php?f=29&t=144868 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

# AdwCleaner 7.0.0.0 - Logfile created on Tue Jul 25 05:55:54 2017
# Updated on 2017/17/07 by Malwarebytes
# Running on Windows 10 Pro (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

No malicious folders deleted.

***** [ Files ] *****

No malicious files deleted.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks deleted.

***** [ Registry ] *****

Deleted: [Key] - HKLM\SOFTWARE\CLASSES\CLSID\{278029E0-2347-4254-A65E-204AC55E2508}
Deleted: [Key] - HKLM\SOFTWARE\CLASSES\INTERFACE\{DCC049B0-CA04-4E58-B4C8-CE62AC6F5096}
Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{278029E0-2347-4254-A65E-204AC55E2508}


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries deleted.

*************************

::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0



*************************

C:/AdwCleaner/AdwCleaner[S0].txt - [1370 B] - [2017/7/12 10:42:52]
C:/AdwCleaner/AdwCleaner[S1].txt - [1443 B] - [2017/7/14 6:26:54]
C:/AdwCleaner/AdwCleaner[S2].txt - [1518 B] - [2017/7/23 17:3:41]
C:/AdwCleaner/AdwCleaner[S3].txt - [1431 B] - [2017/7/25 5:55:31]


########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########

Malwarebytes
www.malwarebytes.com

-Podrobnosti logovacího souboru-
Datum skenování: 25.07.17
Čas skenování: 8:03
Logovací soubor: MB log.txt
Správce: Ano

-Informace o softwaru-
Verze: 3.1.2.1733
Verze komponentů: 1.0.160
Aktualizovat verzi balíku komponent: 1.0.2430
Licence: Bezplatný

-Systémová informace-
OS: Windows 10 (Build 14393.1480)
CPU: x64
Systém souborů: NTFS
Uživatel: DESKTOP-ANQTDIM\toombar PC

-Shrnutí skenování-
Typ skenování: Vlastní skenování
Výsledek: Dokončeno
Skenované objekty: 271386
Zjištěné hrozby: 0
(Nebyly zjištěny žádné škodlivé položky)
Hrozby umístěné do karantény: 0
(Nebyly zjištěny žádné škodlivé položky)
Uplynulý čas: 36 min, 55 sek

-Možnosti skenování-
Paměť: Povoleno
Start: Zakázáno
Systém souborů: Povoleno
Archivy: Povoleno
Rootkity: Povoleno
Heuristika: Povoleno
Potenciálně nežádoucí program: Povoleno
Potenciálně nežádoucí modifikace: Povoleno

-Podrobnosti skenování-
Proces: 0
(Nebyly zjištěny žádné škodlivé položky)

Modul: 0
(Nebyly zjištěny žádné škodlivé položky)

Klíč registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Hodnota v registru: 0
(Nebyly zjištěny žádné škodlivé položky)

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 0
(Nebyly zjištěny žádné škodlivé položky)

Soubor: 0
(Nebyly zjištěny žádné škodlivé položky)

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)

Dejte nove logy z FRST a budem mazat.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 23-07-2017
Ran by toombar PC (administrator) on DESKTOP-ANQTDIM (25-07-2017 09:58:40)
Running from C:\Users\toombar PC\Desktop
Loaded Profiles: toombar PC (Available Profiles: defaultuser0 & toombar PC)
Platform: Windows 10 Pro Version 1607 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Sandboxie Holdings, LLC) D:\Sandboxie\SbieSvc.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe
(Intel(R) Corporation) C:\Program Files\Intel\Intel(R) Online Connect Access\IntelTechnologyAccessService.exe
(Intel(R) Corporation) C:\Program Files\Intel\Intel(R) Online Connect Access\LegacyCsLoaderService.exe
(Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\RAMDisk\MSI_RAMDisk_Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
(MSI) C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Micro-Star Int'l Co., Ltd.) C:\Windows\SysWOW64\RAMDiskImage.exe
(Electronic Arts) D:\Origin\OriginWebHelperService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\VideoCardMonitorII.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\EyeRest.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\TriggerModeMonitor.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\OSD\x86\MsiGamingOSD_x86.exe
(H.D.S. Hungary) C:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe
(MSI) C:\Windows\SysWOW64\muachost.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\OSD\x64\MsiGamingOSD_x64.exe
(Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\Gaming APP\MSI_LED.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3510 series\Bin\ScanToPCActivationApp.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Online Connect\ioc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AppWork GmbH) D:\JDownloader v2.0\JDownloader2.exe
(Sandboxie Holdings, LLC) D:\Sandboxie\SbieCtrl.exe
(Microsoft® Windows® Operating System) C:\Windows\System32\Taskmgr.exe
(Piriform Ltd) C:\recuva64.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11706.1001.25.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\toombar PC\Desktop\FRSTLauncher.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\PING.EXE

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8842496 2016-06-24] (Realtek Semiconductor)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Fast Boot] => C:\Program Files (x86)\MSI\Fast Boot\StartFastBoot.exe [759120 2015-04-22] ()
HKLM-x32\...\Run: [Live Update] => C:\Program Files (x86)\MSI\Live Update\Live Update.exe [15371216 2017-03-07] (Micro-Star INT'L CO., LTD.)
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Run: [HP Deskjet 3510 series (NET)] => C:\Program Files\HP\HP Deskjet 3510 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Run: [DAEMON Tools Lite Automount] => D:\Deamon Tools Lite\DAEMON Tools Lite\DTAgent.exe [4701888 2016-12-22] (Disc Soft Ltd)
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3062560 2017-07-18] (Valve Corporation)
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23819304 2017-03-21] (Google)
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27716568 2017-05-04] (Skype Technologies S.A.)
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Run: [Internet Download Accelerator] => D:\DOWNLOAD MANAGER\IDA\ida.exe -autorun
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Run: [SandboxieControl] => D:\Sandboxie\SbieCtrl.exe [799368 2017-06-05] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Run: [Spotify] => C:\Users\toombar PC\AppData\Roaming\Spotify\Spotify.exe [7111792 2017-07-09] (Spotify Ltd)
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Run: [Spotify Web Helper] => C:\Users\toombar PC\AppData\Roaming\Spotify\Spotify.exe [7111792 2017-07-09] (Spotify Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AIDA64 Extreme.lnk [2017-01-03]
ShortcutTarget: AIDA64 Extreme.lnk -> C:\Program Files (x86)\FinalWire\AIDA64 Extreme\aida64.exe (No File)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Thunderbird.lnk [2017-01-02]
ShortcutTarget: Mozilla Thunderbird.lnk -> C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe (Mozilla Corporation)
Startup: C:\Users\toombar PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleUpdate.lnk [2017-02-21]
ShortcutTarget: GoogleUpdate.lnk -> C:\Users\toombar PC\AppData\Local\Temp\Chrome Updates\SeachEngine.exe (No File)
Startup: C:\Users\toombar PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sledovat výstrahy inkoustu - HP Deskjet 3510 series (Síť).lnk [2017-04-05]
Startup: C:\Users\toombar PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TeamViewer 12.lnk [2017-01-25]
ShortcutTarget: TeamViewer 12.lnk -> C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{4891d0ff-1a20-42ba-a7d6-8abe48e48a6a}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{f98c4fc4-24af-480f-9360-39db72a23b05}: [DhcpNameServer] 213.46.172.37 213.46.172.36

Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-4143605839-527040269-2466945285-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2017-06-22] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2017-07-23] (Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-23] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-07-23] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-23] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-07-23] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-23] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-07-23] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-23] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-07-23] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: xy92jgbi.default
FF ProfilePath: C:\Users\toombar PC\AppData\Roaming\Mozilla\Firefox\Profiles\xy92jgbi.default [2017-07-08]
FF NewTab: Mozilla\Firefox\Profiles\xy92jgbi.default -> about:newtab
FF Homepage: Mozilla\Firefox\Profiles\xy92jgbi.default -> about:home
FF Extension: (Internet Download Accelerator) - C:\Users\toombar PC\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\ida@westbyte.com.xpi [2017-05-15]
FF Extension: (Internet Download Accelerator Toolbar) - C:\Users\toombar PC\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\idabarff@westbyte.com.xpi [2017-02-10]
FF Extension: (Adblock Plus) - C:\Users\toombar PC\AppData\Roaming\Mozilla\Firefox\Profiles\xy92jgbi.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-01-02]
FF Extension: (TLS 1.3 Compatibility Testing 3) - C:\Users\toombar PC\AppData\Roaming\Mozilla\Firefox\Profiles\xy92jgbi.default\features\{f33d134b-ae02-4e76-939e-c9deba970867}\tls13-compat-ff51@mozilla.org.xpi [2017-03-01]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-06-22] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-07-29] (Adobe Systems)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2017-06-22] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-05-18] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-05-18] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-07-29] (Adobe Systems)

Chrome:
=======
CHR HomePage: Default -> hxxps://www.google.cz/
CHR Profile: C:\Users\toombar PC\AppData\Local\Google\Chrome\User Data\Default [2017-07-25]
CHR Extension: (Disk Google) - C:\Users\toombar PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-07-08]
CHR Extension: (Dokumenty Google offline) - C:\Users\toombar PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-07-08]
CHR Extension: (AdBlock) - C:\Users\toombar PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-07-24]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\toombar PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2017-05-30]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\toombar PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-05-30]
CHR Extension: (Chrome Media Router) - C:\Users\toombar PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-13]
CHR HKU\S-1-5-21-4143605839-527040269-2466945285-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\TOOMBA~1\AppData\Local\Google\Drive\user_default\apdfllckaahabafndbhieahigkjlhalf_live.crx [2017-07-07]
CHR HKU\S-1-5-21-4143605839-527040269-2466945285-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [4424384 2017-07-18] (Microsoft Corporation)
S3 Disc Soft Lite Bus Service; D:\Deamon Tools Lite\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2016-12-22] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [395024 2016-12-27] (EasyAntiCheat Ltd)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2836296 2016-12-14] (ESET)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [342456 2017-03-09] (Futuremark)
R2 GamingApp_Service; C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe [47056 2017-02-17] (Micro-Star Int'l Co., Ltd.)
R2 GamingHotkey_Service; C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe [2019792 2016-10-13] (Micro-Star INT'L CO., LTD.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [987432 2016-07-26] (Intel(R) Corporation)
R3 Intel(R) Online Connect; C:\Program Files\Intel\Intel(R) Online Connect\ioc.exe [25824 2016-10-04] (Intel Corporation)
S2 Intel(R) Online Connect Helper; C:\Program Files\Intel\Intel(R) Online Connect\iocHelperService.exe [22752 2016-10-04] (Intel Corporation)
S3 Intel(R) Online Connect Software Asset Manager; C:\Program Files (x86)\Intel\Intel(R) Online Connect Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [18152 2016-09-29] (Intel Corporation)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335360 2016-03-18] (Intel Corporation) [File not signed]
R2 Intel(R) TechnologyAccessLegacyCSLoader; C:\Program Files\Intel\Intel(R) Online Connect Access\LegacyCsLoaderService.exe [173288 2016-10-05] (Intel(R) Corporation)
R2 Intel(R) TechnologyAccessService; C:\Program Files\Intel\Intel(R) Online Connect Access\IntelTechnologyAccessService.exe [496872 2016-10-05] (Intel(R) Corporation)
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-18] (Intel Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [177440 2016-10-20] (Intel Corporation)
R2 MSI_ActiveX_Service; C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe [75192 2017-04-05] (Micro-Star INT'L CO., LTD.)
R2 MSI_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe [105296 2015-06-04] (MSI)
R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2286032 2017-03-06] (Micro-Star INT'L CO., LTD.)
R2 MSI_RAMDisk_Service; C:\Program Files (x86)\MSI\RAMDisk\MSI_RAMDisk_Service.exe [70608 2016-12-02] (Micro-Star Int'l Co., Ltd.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495224 2017-06-21] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495224 2017-06-21] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-05-18] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [450168 2017-06-21] (NVIDIA Corporation)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [2162064 2017-05-17] (Electronic Arts)
R2 Origin Web Helper Service; D:\Origin\OriginWebHelperService.exe [3136920 2017-05-17] (Electronic Arts)
R2 RAMDrivService; C:\Windows\SysWoW64\RAMDiskImage.exe [343448 2016-03-10] (Micro-Star Int'l Co., Ltd.)
R2 SbieSvc; D:\Sandboxie\SbieSvc.exe [198792 2017-06-05] (Sandboxie Holdings, LLC)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10884848 2017-05-23] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347320 2017-04-28] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-04-28] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 athur; C:\Windows\System32\drivers\athuwbx.sys [2702336 2013-11-20] (Qualcomm Atheros Communications, Inc.)
S3 cpuz143; C:\Users\toombar PC\AppData\Local\Temp\cpuz143\cpuz143_x64.sys [48952 2017-07-13] (CPUID) <==== ATTENTION
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2017-01-04] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2017-01-04] (Disc Soft Ltd)
R3 e1dexpress; C:\Windows\system32\DRIVERS\e1d65x64.sys [541672 2015-11-24] (Intel Corporation)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [132272 2016-12-13] (ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [106768 2016-12-13] (ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [15488 2016-12-13] (ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [180544 2016-12-13] (ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [49672 2016-12-13] (ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [77616 2016-12-13] (ESET)
R1 epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [96856 2016-12-13] (ESET)
R3 I2cHkBurn; C:\Windows\system32\drivers\I2cHkBurn.sys [41760 2015-07-27] (FINTEK Corp.)
R3 iaLPSS2_GPIO2; C:\Windows\System32\drivers\iaLPSS2_GPIO2.sys [84264 2015-07-20] (Intel Corporation)
S3 massfilter_hs; C:\Windows\system32\drivers\massfilter_hs.sys [20232 2012-06-20] (HandSet Incorporated)
R1 ndisrd; C:\Windows\system32\DRIVERS\ndisrfl.sys [59792 2016-09-13] (Intel Corporation)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R2 NEWDRIVER; C:\Windows\SysWow64\WinVDEdrv6.sys [197648 2017-04-13] ()
R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2008-11-28] (CACE Technologies)
R3 NTIOLib_ACTIVE_X; C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\NTIOLib_X64.sys [13776 2016-04-12] (MSI)
S3 NTIOLib_MBAPI; C:\Program Files (x86)\MSI\Gaming APP\Lib\NTIOLib_X64.sys [14288 2017-03-08] (MSI)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_7209bde3180ef5f7\nvlddmkm.sys [14458264 2017-05-19] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30328 2017-06-21] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [48248 2017-06-21] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [57976 2017-06-21] (NVIDIA Corporation)
R2 RAMDriv; C:\Windows\system32\DRIVERS\ramdriv.sys [86936 2016-03-10] (Micro-Star Int'l Co., Ltd.)
R2 RAMDriv; C:\Windows\SysWOW64\DRIVERS\ramdriv.sys [86936 2016-03-10] (Micro-Star Int'l Co., Ltd.)
R3 SbieDrv; D:\Sandboxie\SbieDrv.sys [207496 2017-06-05] (Sandboxie Holdings, LLC)
S1 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [131144 2017-01-16] (Oracle Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-07-25 09:58 - 2017-07-25 09:58 - 00029696 _____ C:\Users\toombar PC\AppData\Local\MSGBOX.EXE
2017-07-25 09:58 - 2017-07-25 09:58 - 00024345 _____ C:\Users\toombar PC\Desktop\FRST.txt
2017-07-25 09:58 - 2017-07-25 09:58 - 00015327 _____ C:\Users\toombar PC\Desktop\LM.bat
2017-07-25 09:57 - 2017-07-25 09:57 - 02382336 _____ (Farbar) C:\Users\toombar PC\Desktop\FRST64.exe
2017-07-25 09:27 - 2017-07-25 09:27 - 00001328 _____ C:\Users\toombar PC\Desktop\Recuva.lnk
2017-07-25 09:27 - 2017-07-25 09:27 - 00000000 ____D C:\Users\toombar PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Recuva
2017-07-25 09:27 - 2017-07-25 09:27 - 00000000 ____D C:\Lang
2017-07-25 09:21 - 2017-07-25 09:22 - 00000000 ____D C:\Users\toombar PC\Desktop\Save
2017-07-23 18:48 - 2017-07-25 09:58 - 00000000 ____D C:\FRST
2017-07-23 18:44 - 2017-07-23 18:44 - 00112640 _____ (forum.viry.cz) C:\Users\toombar PC\Desktop\FRSTLauncher.exe
2017-07-23 18:12 - 2017-07-23 18:12 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-07-23 18:12 - 2017-07-23 18:12 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2017-07-14 15:35 - 2017-07-14 15:35 - 00000000 ____D C:\ProgramData\Adobe
2017-07-14 14:21 - 2017-07-14 14:21 - 00002549 _____ C:\Users\Public\Desktop\O&O SafeErase.lnk
2017-07-14 14:21 - 2017-07-14 14:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\O&O Software
2017-07-14 14:21 - 2017-07-14 14:21 - 00000000 ____D C:\Program Files\OO Software
2017-07-14 14:08 - 2017-07-14 14:08 - 00000000 ____D C:\Users\toombar PC\Documents\OO Software
2017-07-14 14:08 - 2017-07-14 14:08 - 00000000 ____D C:\Users\toombar PC\Documents\O&O
2017-07-14 14:07 - 2017-07-14 14:08 - 00000000 ____D C:\ProgramData\OO Software
2017-07-13 19:55 - 2017-07-13 19:55 - 00000000 ____D C:\ProgramData\Sniper Elite 4
2017-07-13 19:54 - 2017-07-13 19:55 - 00000000 ____D C:\Users\toombar PC\AppData\Local\SniperElite4
2017-07-13 10:37 - 2017-05-16 18:35 - 02393336 _____ (devolo AG) C:\Users\toombar PC\Desktop\software-dlan-windows-v20.exe
2017-07-12 12:43 - 2017-07-14 14:33 - 00000037 _____ C:\Users\toombar PC\Desktop\Koš.txt
2017-07-12 12:41 - 2017-07-25 07:55 - 00000000 ____D C:\AdwCleaner
2017-07-12 12:39 - 2017-07-12 12:39 - 00000000 ____D C:\Users\toombar PC\AppData\Local\GHISLER
2017-07-11 20:35 - 2017-07-07 09:49 - 00340824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-07-11 20:35 - 2017-07-07 09:46 - 00781152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2017-07-11 20:35 - 2017-07-07 09:45 - 02263832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-07-11 20:35 - 2017-07-07 09:40 - 20967840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-07-11 20:35 - 2017-07-07 09:29 - 05686272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2017-07-11 20:35 - 2017-07-07 09:13 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll
2017-07-11 20:35 - 2017-07-07 09:10 - 00755200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-07-11 20:35 - 2017-07-07 09:09 - 00506368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-07-11 20:35 - 2017-07-07 09:06 - 07626752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2017-07-11 20:35 - 2017-07-07 08:55 - 04423680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-07-11 20:35 - 2017-07-07 08:55 - 01571840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2017-07-11 20:35 - 2017-07-07 08:54 - 02997248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2017-07-11 20:35 - 2017-07-07 08:53 - 02483200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-07-11 20:35 - 2017-07-07 08:52 - 04561408 _____ (Microsoft) C:\Windows\SysWOW64\dbgeng.dll
2017-07-11 20:35 - 2017-07-07 08:52 - 01599488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-07-11 20:35 - 2017-07-07 08:52 - 01413632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OpcServices.dll
2017-07-11 20:35 - 2017-06-21 10:18 - 01470816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppVEntSubsystems32.dll
2017-07-11 20:35 - 2017-06-21 09:52 - 00081760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2017-07-11 20:35 - 2017-06-21 09:42 - 00601712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2017-07-11 20:35 - 2017-06-21 09:39 - 02048496 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
2017-07-11 20:35 - 2017-06-21 09:36 - 00557408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2017-07-11 20:35 - 2017-06-21 09:29 - 05722320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2017-07-11 20:35 - 2017-06-21 09:28 - 02277288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2017-07-11 20:35 - 2017-06-21 09:28 - 01504056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2017-07-11 20:35 - 2017-06-21 09:27 - 01431232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2017-07-11 20:35 - 2017-06-21 09:27 - 00975744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2017-07-11 20:35 - 2017-06-21 09:27 - 00861024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2017-07-11 20:35 - 2017-06-21 09:27 - 00116576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostCommon.dll
2017-07-11 20:35 - 2017-06-21 09:25 - 02168288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2017-07-11 20:35 - 2017-06-21 09:25 - 01980776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2017-07-11 20:35 - 2017-06-21 09:24 - 00846560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2017-07-11 20:35 - 2017-06-21 09:22 - 00361104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll
2017-07-11 20:35 - 2017-06-21 09:21 - 06665440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-07-11 20:35 - 2017-06-21 09:21 - 04023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2017-07-11 20:35 - 2017-06-21 09:21 - 01845512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2017-07-11 20:35 - 2017-06-21 09:21 - 01277856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2017-07-11 20:35 - 2017-06-21 09:20 - 01360464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2017-07-11 20:35 - 2017-06-21 09:20 - 00981888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2017-07-11 20:35 - 2017-06-21 09:20 - 00962768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-07-11 20:35 - 2017-06-21 09:19 - 04312248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2017-07-11 20:35 - 2017-06-21 09:04 - 01631232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-07-11 20:35 - 2017-06-21 09:04 - 00026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcconf.dll
2017-07-11 20:35 - 2017-06-21 09:01 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Radios.dll
2017-07-11 20:35 - 2017-06-21 09:00 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDeviceRegistration.dll
2017-07-11 20:35 - 2017-06-21 08:59 - 00285184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-07-11 20:35 - 2017-06-21 08:59 - 00255488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unimdm.tsp
2017-07-11 20:35 - 2017-06-21 08:59 - 00177664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Diagnostics.dll
2017-07-11 20:35 - 2017-06-21 08:59 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.HostName.dll
2017-07-11 20:35 - 2017-06-21 08:59 - 00097792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.SystemManagement.dll
2017-07-11 20:35 - 2017-06-21 08:58 - 00136192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinRtTracing.dll
2017-07-11 20:35 - 2017-06-21 08:58 - 00129024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SerialCommunication.dll
2017-07-11 20:35 - 2017-06-21 08:58 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryClient.dll
2017-07-11 20:35 - 2017-06-21 08:58 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-07-11 20:35 - 2017-06-21 08:58 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.System.UserDeviceAssociation.dll
2017-07-11 20:35 - 2017-06-21 08:57 - 00142336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.WiFi.dll
2017-07-11 20:35 - 2017-06-21 08:56 - 00392192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.Input.dll
2017-07-11 20:35 - 2017-06-21 08:56 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.LowLevel.dll
2017-07-11 20:35 - 2017-06-21 08:56 - 00315904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Gaming.XboxLive.Storage.dll
2017-07-11 20:35 - 2017-06-21 08:56 - 00237056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncSettings.dll
2017-07-11 20:35 - 2017-06-21 08:56 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-07-11 20:35 - 2017-06-21 08:56 - 00184320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserMgrProxy.dll
2017-07-11 20:35 - 2017-06-21 08:56 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2017-07-11 20:35 - 2017-06-21 08:56 - 00113152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Lights.dll
2017-07-11 20:35 - 2017-06-21 08:55 - 00557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2017-07-11 20:35 - 2017-06-21 08:55 - 00404992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsreg.dll
2017-07-11 20:35 - 2017-06-21 08:55 - 00117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthBroker.dll
2017-07-11 20:35 - 2017-06-21 08:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Core.dll
2017-07-11 20:35 - 2017-06-21 08:54 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Import.dll
2017-07-11 20:35 - 2017-06-21 08:54 - 00483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.AllJoyn.dll
2017-07-11 20:35 - 2017-06-21 08:54 - 00298496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll
2017-07-11 20:35 - 2017-06-21 08:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe
2017-07-11 20:35 - 2017-06-21 08:53 - 00431616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll
2017-07-11 20:35 - 2017-06-21 08:53 - 00390656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredProvDataModel.dll
2017-07-11 20:35 - 2017-06-21 08:53 - 00386048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.WiFiDirect.dll
2017-07-11 20:35 - 2017-06-21 08:53 - 00332288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Bluetooth.dll
2017-07-11 20:35 - 2017-06-21 08:53 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2017-07-11 20:35 - 2017-06-21 08:53 - 00284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2017-07-11 20:35 - 2017-06-21 08:53 - 00271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceaccess.dll
2017-07-11 20:35 - 2017-06-21 08:53 - 00218624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WwaApi.dll
2017-07-11 20:35 - 2017-06-21 08:53 - 00202752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2017-07-11 20:35 - 2017-06-21 08:53 - 00185856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-07-11 20:35 - 2017-06-21 08:53 - 00175616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Scanners.dll
2017-07-11 20:35 - 2017-06-21 08:53 - 00125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2017-07-11 20:35 - 2017-06-21 08:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Picker.dll
2017-07-11 20:35 - 2017-06-21 08:51 - 00747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Ocr.dll
2017-07-11 20:35 - 2017-06-21 08:51 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Usb.dll
2017-07-11 20:35 - 2017-06-21 08:51 - 00284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.dll
2017-07-11 20:35 - 2017-06-21 08:50 - 00857600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EmailApis.dll
2017-07-11 20:35 - 2017-06-21 08:50 - 00238080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AboveLockAppHost.dll
2017-07-11 20:35 - 2017-06-21 08:49 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CryptoWinRT.dll
2017-07-11 20:35 - 2017-06-21 08:48 - 02333184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2017-07-11 20:35 - 2017-06-21 08:47 - 13873664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2017-07-11 20:35 - 2017-06-21 08:46 - 04615168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2017-07-11 20:35 - 2017-06-21 08:46 - 01323008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_fs.dll
2017-07-11 20:35 - 2017-06-21 08:46 - 01137152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsp_health.dll
2017-07-11 20:35 - 2017-06-21 08:46 - 01077760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Editing.dll
2017-07-11 20:35 - 2017-06-21 08:46 - 00355328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RTMediaFrame.dll
2017-07-11 20:35 - 2017-06-21 08:45 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2017-07-11 20:35 - 2017-06-21 08:44 - 00795648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MiracastReceiver.dll
2017-07-11 20:35 - 2017-06-21 08:44 - 00343040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToDevice.dll
2017-07-11 20:35 - 2017-06-21 08:43 - 01534464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.3D.dll
2017-07-11 20:35 - 2017-06-21 08:43 - 00713216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpnapps.dll
2017-07-11 20:35 - 2017-06-21 08:43 - 00653312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.AccountsControl.dll
2017-07-11 20:35 - 2017-06-21 08:43 - 00468992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.InkControls.dll
2017-07-11 20:35 - 2017-06-21 08:42 - 03307008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2017-07-11 20:35 - 2017-06-21 08:42 - 02749440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2017-07-11 20:35 - 2017-06-21 08:42 - 00525312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LogonController.dll
2017-07-11 20:35 - 2017-06-21 08:41 - 01255936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
2017-07-11 20:35 - 2017-06-21 08:40 - 02641920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-07-11 20:35 - 2017-06-21 08:40 - 02154496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2017-07-11 20:35 - 2017-06-21 08:40 - 00901120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2017-07-11 20:35 - 2017-06-21 08:40 - 00895488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2017-07-11 20:35 - 2017-06-21 08:40 - 00675840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2017-07-11 20:35 - 2017-06-21 08:40 - 00220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToReceiver.dll
2017-07-11 20:35 - 2017-06-21 08:40 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2017-07-11 20:35 - 2017-06-21 08:39 - 00546304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uReFS.dll
2017-07-11 20:35 - 2017-06-21 08:39 - 00134144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ErrorDetails.dll
2017-07-11 20:35 - 2017-06-21 08:38 - 03733504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2017-07-11 20:35 - 2017-06-21 08:38 - 01221120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Audio.dll
2017-07-11 20:35 - 2017-06-21 08:38 - 00886272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll
2017-07-11 20:35 - 2017-06-21 08:38 - 00753152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imapi2fs.dll
2017-07-11 20:35 - 2017-06-21 08:38 - 00709120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2017-07-11 20:35 - 2017-06-21 08:37 - 07468544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2017-07-11 20:35 - 2017-06-21 08:37 - 06109696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2017-07-11 20:35 - 2017-06-21 08:37 - 00400384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2017-07-11 20:35 - 2017-06-21 08:37 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Geolocation.dll
2017-07-11 20:35 - 2017-06-21 08:37 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Devices.dll
2017-07-11 20:35 - 2017-06-21 08:36 - 02648576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll
2017-07-11 20:35 - 2017-06-21 08:36 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-07-11 20:35 - 2017-06-21 08:36 - 01247232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2017-07-11 20:35 - 2017-06-21 08:35 - 02740224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2017-07-11 20:35 - 2017-06-21 08:35 - 02682880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netshell.dll
2017-07-11 20:35 - 2017-06-21 08:35 - 01656320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Perception.dll
2017-07-11 20:35 - 2017-06-21 08:35 - 01232384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Maps.dll
2017-07-11 20:35 - 2017-06-21 08:35 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2017-07-11 20:35 - 2017-06-21 08:35 - 00598528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.dll
2017-07-11 20:35 - 2017-06-21 08:35 - 00589312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
2017-07-11 20:35 - 2017-06-21 08:35 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Midi.dll
2017-07-11 20:35 - 2017-06-21 08:34 - 01886720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2017-07-11 20:35 - 2017-06-21 08:34 - 00773120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-07-11 20:35 - 2017-06-21 08:34 - 00654336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll
2017-07-11 20:35 - 2017-06-21 08:34 - 00621056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2017-07-11 20:35 - 2017-06-21 08:34 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll
2017-07-11 20:35 - 2017-06-21 08:34 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2017-07-11 20:35 - 2017-06-21 08:33 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Phone.dll
2017-07-11 20:35 - 2017-06-21 08:33 - 01013248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll
2017-07-11 20:35 - 2017-06-21 08:33 - 00751104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2017-07-11 20:35 - 2017-06-21 08:32 - 01556992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2017-07-11 20:35 - 2017-06-21 08:31 - 03106304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2017-07-11 20:35 - 2017-06-21 08:10 - 00483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2017-07-11 20:35 - 2017-03-04 08:56 - 00263472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Storage.ApplicationData.dll
2017-07-11 20:35 - 2017-03-04 08:21 - 01243136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.FaceAnalysis.dll
2017-07-11 20:35 - 2017-03-04 08:21 - 00670208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.PointOfService.dll
2017-07-11 20:35 - 2017-03-04 08:20 - 00562176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.SmartCards.dll
2017-07-11 20:35 - 2017-03-04 08:20 - 00426496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Wallet.dll
2017-07-11 20:35 - 2017-03-04 08:19 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll
2017-07-11 20:35 - 2017-03-04 08:18 - 00525824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll
2017-07-11 20:35 - 2017-03-04 08:16 - 00584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2017-07-11 20:35 - 2017-03-04 08:02 - 02138112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll
2017-07-11 20:35 - 2016-10-05 11:15 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dialclient.dll
2017-07-11 20:35 - 2016-09-15 18:58 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-07-11 20:35 - 2016-09-15 18:47 - 00134656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Energy.dll
2017-07-11 20:34 - 2017-07-07 09:44 - 00108896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2017-07-11 20:34 - 2017-07-07 09:42 - 07781720 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-07-11 20:34 - 2017-07-07 09:40 - 00376672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2017-07-11 20:34 - 2017-07-07 09:37 - 00468320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2017-07-11 20:34 - 2017-07-07 09:37 - 00118112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-07-11 20:34 - 2017-07-07 09:32 - 00404824 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-07-11 20:34 - 2017-07-07 09:29 - 02759712 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-07-11 20:34 - 2017-07-07 09:29 - 00857440 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2017-07-11 20:34 - 2017-07-07 09:28 - 00223584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-07-11 20:34 - 2017-07-07 09:24 - 22220856 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-07-11 20:34 - 2017-07-07 09:23 - 01600624 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2017-07-11 20:34 - 2017-07-07 09:23 - 00241504 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2017-07-11 20:34 - 2017-07-07 09:20 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\l2gpstore.dll
2017-07-11 20:34 - 2017-07-07 09:19 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-07-11 20:34 - 2017-07-07 09:19 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapprovp.dll
2017-07-11 20:34 - 2017-07-07 09:18 - 02532192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-07-11 20:34 - 2017-07-07 09:18 - 01100120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2017-07-11 20:34 - 2017-07-07 09:18 - 00450560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2017-07-11 20:34 - 2017-07-07 09:18 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\onex.dll
2017-07-11 20:34 - 2017-07-07 09:18 - 00057400 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-07-11 20:34 - 2017-07-07 09:17 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\raschap.dll
2017-07-11 20:34 - 2017-07-07 09:14 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-07-11 20:34 - 2017-07-07 09:14 - 00126464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2017-07-11 20:34 - 2017-07-07 09:13 - 00310272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2017-07-11 20:34 - 2017-07-07 09:11 - 00340480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-07-11 20:34 - 2017-07-07 09:09 - 00637952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2017-07-11 20:34 - 2017-07-07 09:06 - 18364928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2017-07-11 20:34 - 2017-07-07 09:05 - 19414528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-07-11 20:34 - 2017-07-07 09:03 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinfo32.exe
2017-07-11 20:34 - 2017-07-07 09:02 - 01313280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
2017-07-11 20:34 - 2017-07-07 09:00 - 12187136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-07-11 20:34 - 2017-07-07 09:00 - 00476160 _____ (Microsoft® Windows® Operating System) C:\Windows\SysWOW64\wvc.dll
2017-07-11 20:34 - 2017-07-07 08:58 - 07217152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2017-07-11 20:34 - 2017-07-07 08:57 - 00691712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-07-11 20:34 - 2017-07-07 08:56 - 06035456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2017-07-11 20:34 - 2017-07-07 08:55 - 03664896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-07-11 20:34 - 2017-07-07 08:54 - 02027008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-07-11 20:34 - 2017-07-07 08:51 - 22569984 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2017-07-11 20:34 - 2017-07-07 08:49 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys
2017-07-11 20:34 - 2017-07-07 08:48 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\l2gpstore.dll
2017-07-11 20:34 - 2017-07-07 08:48 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\eapprovp.dll
2017-07-11 20:34 - 2017-07-07 08:46 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\shutdownux.dll
2017-07-11 20:34 - 2017-07-07 08:46 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2017-07-11 20:34 - 2017-07-07 08:45 - 00488960 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2017-07-11 20:34 - 2017-07-07 08:45 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\DeveloperOptionsSettingsHandlers.dll
2017-07-11 20:34 - 2017-07-07 08:45 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-07-11 20:34 - 2017-07-07 08:45 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-07-11 20:34 - 2017-07-07 08:44 - 00502784 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2017-07-11 20:34 - 2017-07-07 08:44 - 00238592 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll
2017-07-11 20:34 - 2017-07-07 08:44 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-07-11 20:34 - 2017-07-07 08:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2017-07-11 20:34 - 2017-07-07 08:44 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll
2017-07-11 20:34 - 2017-07-07 08:43 - 01081856 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2017-07-11 20:34 - 2017-07-07 08:43 - 00431616 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2017-07-11 20:34 - 2017-07-07 08:43 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-07-11 20:34 - 2017-07-07 08:43 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-07-11 20:34 - 2017-07-07 08:42 - 00805888 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-07-11 20:34 - 2017-07-07 08:42 - 00352256 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2017-07-11 20:34 - 2017-07-07 08:39 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-07-11 20:34 - 2017-07-07 08:36 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2017-07-11 20:34 - 2017-07-07 08:35 - 01397760 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2017-07-11 20:34 - 2017-07-07 08:34 - 09131008 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2017-07-11 20:34 - 2017-07-07 08:33 - 00576000 _____ (Microsoft® Windows® Operating System) C:\Windows\system32\wvc.dll
2017-07-11 20:34 - 2017-07-07 08:31 - 23676416 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-07-11 20:34 - 2017-07-07 08:30 - 13090816 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-07-11 20:34 - 2017-07-07 08:29 - 04749824 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2017-07-11 20:34 - 2017-07-07 08:29 - 00932864 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-07-11 20:34 - 2017-07-07 08:28 - 02096640 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-07-11 20:34 - 2017-07-07 08:28 - 00927744 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2017-07-11 20:34 - 2017-07-07 08:28 - 00759296 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-07-11 20:34 - 2017-07-07 08:28 - 00589312 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-07-11 20:34 - 2017-07-07 08:27 - 08120832 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2017-07-11 20:34 - 2017-07-07 08:25 - 04708864 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-07-11 20:34 - 2017-07-07 08:24 - 05388800 _____ (Microsoft) C:\Windows\system32\dbgeng.dll
2017-07-11 20:34 - 2017-07-07 08:24 - 04744704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-07-11 20:34 - 2017-07-07 08:24 - 03615744 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2017-07-11 20:34 - 2017-07-07 08:24 - 02895872 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-07-11 20:34 - 2017-07-07 08:24 - 02217472 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll
2017-07-11 20:34 - 2017-07-07 08:24 - 01783296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-07-11 20:34 - 2017-07-07 08:24 - 01513472 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2017-07-11 20:34 - 2017-07-07 08:22 - 01826816 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2017-07-11 20:34 - 2017-06-21 09:56 - 01405280 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystemController.dll
2017-07-11 20:34 - 2017-06-21 09:55 - 02170720 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntSubsystems64.dll
2017-07-11 20:34 - 2017-06-21 09:54 - 00822624 _____ (Microsoft Corporation) C:\Windows\system32\AppVClient.exe
2017-07-11 20:34 - 2017-06-21 09:54 - 00758624 _____ (Microsoft Corporation) C:\Windows\system32\AppVOrchestration.dll
2017-07-11 20:34 - 2017-06-21 09:54 - 00704352 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntVirtualization.dll
2017-07-11 20:34 - 2017-06-21 09:54 - 00696160 _____ (Microsoft Corporation) C:\Windows\system32\AppVPublishing.dll
2017-07-11 20:34 - 2017-06-21 09:54 - 00603488 _____ (Microsoft Corporation) C:\Windows\system32\ContentDeliveryManager.Utilities.dll
2017-07-11 20:34 - 2017-06-21 09:54 - 00565088 _____ (Microsoft Corporation) C:\Windows\system32\AppVCatalog.dll
2017-07-11 20:34 - 2017-06-21 09:54 - 00406368 _____ (Microsoft Corporation) C:\Windows\system32\AppVScripting.dll
2017-07-11 20:34 - 2017-06-21 09:53 - 00794928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Shell.Broker.dll
2017-07-11 20:34 - 2017-06-21 09:52 - 02213760 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-07-11 20:34 - 2017-06-21 09:52 - 01886344 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-07-11 20:34 - 2017-06-21 09:52 - 00774224 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2017-07-11 20:34 - 2017-06-21 09:52 - 00088416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scmbus.sys
2017-07-11 20:34 - 2017-06-21 09:51 - 02255712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-07-11 20:34 - 2017-06-21 09:51 - 00434528 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2017-07-11 20:34 - 2017-06-21 09:50 - 00126304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mup.sys
2017-07-11 20:34 - 2017-06-21 09:48 - 02681200 _____ C:\Windows\system32\CoreUIComponents.dll
2017-07-11 20:34 - 2017-06-21 09:47 - 00764392 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2017-07-11 20:34 - 2017-06-21 09:42 - 01573280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-07-11 20:34 - 2017-06-21 09:41 - 01706488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-07-11 20:34 - 2017-06-21 09:40 - 01069720 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2017-07-11 20:34 - 2017-06-21 09:40 - 00328008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Storage.ApplicationData.dll
2017-07-11 20:34 - 2017-06-21 09:40 - 00224096 _____ (Microsoft Corporation) C:\Windows\system32\ifsutil.dll
2017-07-11 20:34 - 2017-06-21 09:38 - 07220192 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2017-07-11 20:34 - 2017-06-21 09:38 - 01860288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2017-07-11 20:34 - 2017-06-21 09:38 - 01738560 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2017-07-11 20:34 - 2017-06-21 09:38 - 00790752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-07-11 20:34 - 2017-06-21 09:37 - 02446704 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2017-07-11 20:34 - 2017-06-21 09:37 - 01369240 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2017-07-11 20:34 - 2017-06-21 09:37 - 01157008 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2017-07-11 20:34 - 2017-06-21 09:37 - 00146784 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostCommon.dll
2017-07-11 20:34 - 2017-06-21 09:36 - 00624048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2017-07-11 20:34 - 2017-06-21 09:36 - 00129888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2017-07-11 20:34 - 2017-06-21 09:35 - 02915704 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2017-07-11 20:34 - 2017-06-21 09:35 - 01267512 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2017-07-11 20:34 - 2017-06-21 09:33 - 00408600 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2017-07-11 20:34 - 2017-06-21 09:33 - 00092512 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2017-07-11 20:34 - 2017-06-21 09:32 - 08169024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2017-07-11 20:34 - 2017-06-21 09:32 - 04260576 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2017-07-11 20:34 - 2017-06-21 09:32 - 01983408 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2017-07-11 20:34 - 2017-06-21 09:32 - 01702392 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2017-07-11 20:34 - 2017-06-21 09:32 - 01072248 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2017-07-11 20:34 - 2017-06-21 09:31 - 04674360 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2017-07-11 20:34 - 2017-06-21 09:31 - 01277824 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-07-11 20:34 - 2017-06-21 09:31 - 00160096 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostBroker.dll
2017-07-11 20:34 - 2017-06-21 09:30 - 00869848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2017-07-11 20:34 - 2017-06-21 09:30 - 00196960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ifsutil.dll
2017-07-11 20:34 - 2017-06-21 09:28 - 00524776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2017-07-11 20:34 - 2017-06-21 09:28 - 00170960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2017-07-11 20:34 - 2017-06-21 09:27 - 01122344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2017-07-11 20:34 - 2017-06-21 09:27 - 00549088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2017-07-11 20:34 - 2017-06-21 09:26 - 00387864 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
2017-07-11 20:34 - 2017-06-21 09:24 - 00154432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntmarta.dll
2017-07-11 20:34 - 2017-06-21 09:21 - 01557808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2017-07-11 20:34 - 2017-06-21 09:21 - 00952416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2017-07-11 20:34 - 2017-06-21 09:21 - 00374448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFPlay.dll
2017-07-11 20:34 - 2017-06-21 09:20 - 00312472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll
2017-07-11 20:34 - 2017-06-21 09:06 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2017-07-11 20:34 - 2017-06-21 09:04 - 01631232 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll
2017-07-11 20:34 - 2017-06-21 09:03 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rootmdm.sys
2017-07-11 20:34 - 2017-06-21 09:02 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Diagnostics.dll
2017-07-11 20:34 - 2017-06-21 09:02 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scmdisk0101.sys
2017-07-11 20:34 - 2017-06-21 09:02 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.SystemManagement.dll
2017-07-11 20:34 - 2017-06-21 09:02 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-07-11 20:34 - 2017-06-21 09:02 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2017-07-11 20:34 - 2017-06-21 09:01 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\DisplayManager.dll
2017-07-11 20:34 - 2017-06-21 09:01 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\Family.Client.dll
2017-07-11 20:34 - 2017-06-21 09:01 - 00138752 _____ (Microsoft Corporation) C:\Windows\system32\VEDataLayerHelpers.dll
2017-07-11 20:34 - 2017-06-21 09:01 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\snmptrap.exe
2017-07-11 20:34 - 2017-06-21 09:00 - 00519168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ngccredprov.dll
2017-07-11 20:34 - 2017-06-21 09:00 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
2017-07-11 20:34 - 2017-06-21 09:00 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\Family.SyncEngine.dll
2017-07-11 20:34 - 2017-06-21 09:00 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\ProvisioningHandlers.dll
2017-07-11 20:34 - 2017-06-21 09:00 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\WinRtTracing.dll
2017-07-11 20:34 - 2017-06-21 09:00 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFi.dll
2017-07-11 20:34 - 2017-06-21 09:00 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.Profile.RetailInfo.dll
2017-07-11 20:34 - 2017-06-21 09:00 - 00143360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uudf.dll
2017-07-11 20:34 - 2017-06-21 09:00 - 00138240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DisplayManager.dll
2017-07-11 20:34 - 2017-06-21 09:00 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-07-11 20:34 - 2017-06-21 09:00 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-07-11 20:34 - 2017-06-21 09:00 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\Windows.System.UserDeviceAssociation.dll
2017-07-11 20:34 - 2017-06-21 09:00 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryBroker.dll
2017-07-11 20:34 - 2017-06-21 08:59 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.XboxLive.Storage.dll
2017-07-11 20:34 - 2017-06-21 08:59 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.dll
2017-07-11 20:34 - 2017-06-21 08:59 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\DeviceDirectoryClient.dll
2017-07-11 20:34 - 2017-06-21 08:59 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Core.dll
2017-07-11 20:34 - 2017-06-21 08:59 - 00137216 _____ (Microsoft Corporation) C:\Windows\system32\tdlrecover.exe
2017-07-11 20:34 - 2017-06-21 08:59 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryClient.dll
2017-07-11 20:34 - 2017-06-21 08:59 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\UserDeviceRegistration.Ngc.dll
2017-07-11 20:34 - 2017-06-21 08:58 - 00547840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Gaming.Input.dll
2017-07-11 20:34 - 2017-06-21 08:58 - 00418304 _____ C:\Windows\system32\Windows.Perception.Stub.dll
2017-07-11 20:34 - 2017-06-21 08:58 - 00211968 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2017-07-11 20:34 - 2017-06-21 08:58 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Radios.dll
2017-07-11 20:34 - 2017-06-21 08:58 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2017-07-11 20:34 - 2017-06-21 08:57 - 00651264 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.AllJoyn.dll
2017-07-11 20:34 - 2017-06-21 08:57 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.WiFiDirect.dll
2017-07-11 20:34 - 2017-06-21 08:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.BlockedShutdown.dll
2017-07-11 20:34 - 2017-06-21 08:57 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2017-07-11 20:34 - 2017-06-21 08:57 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\credprovhost.dll
2017-07-11 20:34 - 2017-06-21 08:57 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SerialCommunication.dll
2017-07-11 20:34 - 2017-06-21 08:57 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Lights.dll
2017-07-11 20:34 - 2017-06-21 08:57 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sendmail.dll
2017-07-11 20:34 - 2017-06-21 08:57 - 00088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDeviceRegistration.Ngc.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 01507840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.FaceAnalysis.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 00912384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.SmartCards.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 00852480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Import.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 00748544 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 00719872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2017-07-11 20:34 - 2017-06-21 08:56 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 00568320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.LowLevel.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 00379904 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.LockScreen.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 00299520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataAccountApis.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\UserMgrProxy.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\vaultcli.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2017-07-11 20:34 - 2017-06-21 08:56 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll
2017-07-11 20:34 - 2017-06-21 08:56 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credprovhost.dll
2017-07-11 20:34 - 2017-06-21 08:55 - 00561664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Wallet.dll
2017-07-11 20:34 - 2017-06-21 08:55 - 00533504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSCOMEX.dll
2017-07-11 20:34 - 2017-06-21 08:55 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2017-07-11 20:34 - 2017-06-21 08:55 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll
2017-07-11 20:34 - 2017-06-21 08:55 - 00358912 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.dll
2017-07-11 20:34 - 2017-06-21 08:55 - 00349184 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-07-11 20:34 - 2017-06-21 08:55 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\SyncSettings.dll
2017-07-11 20:34 - 2017-06-21 08:55 - 00265728 _____ C:\Windows\SysWOW64\Windows.Perception.Stub.dll
2017-07-11 20:34 - 2017-06-21 08:55 - 00252416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-07-11 20:34 - 2017-06-21 08:55 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2017-07-11 20:34 - 2017-06-21 08:55 - 00020480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\regsvr32.exe
2017-07-11 20:34 - 2017-06-21 08:54 - 01159680 _____ (Microsoft Corporation) C:\Windows\system32\XblGameSave.dll
2017-07-11 20:34 - 2017-06-21 08:54 - 00949248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.PointOfService.dll
2017-07-11 20:34 - 2017-06-21 08:54 - 00671744 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll
2017-07-11 20:34 - 2017-06-21 08:54 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\tileobjserver.dll
2017-07-11 20:34 - 2017-06-21 08:54 - 00472064 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Bluetooth.dll
2017-07-11 20:34 - 2017-06-21 08:54 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Picker.dll
2017-07-11 20:34 - 2017-06-21 08:54 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\WwaApi.dll
2017-07-11 20:34 - 2017-06-21 08:54 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\easwrt.dll
2017-07-11 20:34 - 2017-06-21 08:53 - 01010176 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2017-07-11 20:34 - 2017-06-21 08:53 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.InkControls.dll
2017-07-11 20:34 - 2017-06-21 08:53 - 00437248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll
2017-07-11 20:34 - 2017-06-21 08:53 - 00425984 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
2017-07-11 20:34 - 2017-06-21 08:53 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.dll
2017-07-11 20:34 - 2017-06-21 08:53 - 00329728 _____ (Microsoft Corporation) C:\Windows\system32\deviceaccess.dll
2017-07-11 20:34 - 2017-06-21 08:53 - 00284160 _____ (Microsoft Corporation) C:\Windows\system32\AboveLockAppHost.dll
2017-07-11 20:34 - 2017-06-21 08:53 - 00201728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExecModelClient.dll
2017-07-11 20:34 - 2017-06-21 08:52 - 17198592 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2017-07-11 20:34 - 2017-06-21 08:52 - 06288384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2017-07-11 20:34 - 2017-06-21 08:52 - 00963584 _____ (Microsoft Corporation) C:\Windows\system32\WebcamUi.dll
2017-07-11 20:34 - 2017-06-21 08:52 - 00896512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.AccountsControl.dll
2017-07-11 20:34 - 2017-06-21 08:52 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2017-07-11 20:34 - 2017-06-21 08:52 - 00560128 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2017-07-11 20:34 - 2017-06-21 08:52 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\DevicesFlowBroker.dll
2017-07-11 20:34 - 2017-06-21 08:52 - 00352256 _____ (Microsoft Corporation) C:\Windows\system32\XpsDocumentTargetPrint.dll
2017-07-11 20:34 - 2017-06-21 08:52 - 00331264 _____ (Microsoft Corporation) C:\Windows\system32\NgcCtnrSvc.dll
2017-07-11 20:34 - 2017-06-21 08:52 - 00182784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BioCredProv.dll
2017-07-11 20:34 - 2017-06-21 08:51 - 00846336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebcamUi.dll
2017-07-11 20:34 - 2017-06-21 08:51 - 00634368 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2017-07-11 20:34 - 2017-06-21 08:51 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2017-07-11 20:34 - 2017-06-21 08:51 - 00258048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsDocumentTargetPrint.dll
2017-07-11 20:34 - 2017-06-21 08:50 - 01167360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2017-07-11 20:34 - 2017-06-21 08:50 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2017-07-11 20:34 - 2017-06-21 08:50 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WpcWebFilter.dll
2017-07-11 20:34 - 2017-06-21 08:50 - 00529920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2017-07-11 20:34 - 2017-06-21 08:50 - 00297472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2017-07-11 20:34 - 2017-06-21 08:49 - 03778048 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2017-07-11 20:34 - 2017-06-21 08:49 - 02104320 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2017-07-11 20:34 - 2017-06-21 08:49 - 01913856 _____ (Microsoft Corporation) C:\Windows\system32\wsp_fs.dll
2017-07-11 20:34 - 2017-06-21 08:49 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\wsp_health.dll
2017-07-11 20:34 - 2017-06-21 08:49 - 01403392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Editing.dll
2017-07-11 20:34 - 2017-06-21 08:49 - 00500224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.dll
2017-07-11 20:34 - 2017-06-21 08:49 - 00458752 _____ (Microsoft Corporation) C:\Windows\system32\RTMediaFrame.dll
2017-07-11 20:34 - 2017-06-21 08:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.dll
2017-07-11 20:34 - 2017-06-21 08:49 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.DeviceEncryptionHandlers.dll
2017-07-11 20:34 - 2017-06-21 08:49 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Energy.dll
2017-07-11 20:34 - 2017-06-21 08:48 - 00968192 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
2017-07-11 20:34 - 2017-06-21 08:48 - 00395264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmenrollengine.dll
2017-07-11 20:34 - 2017-06-21 08:48 - 00336384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\azroleui.dll
2017-07-11 20:34 - 2017-06-21 08:47 - 07655424 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2017-07-11 20:34 - 2017-06-21 08:47 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\MiracastReceiver.dll
2017-07-11 20:34 - 2017-06-21 08:47 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2017-07-11 20:34 - 2017-06-21 08:47 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll
2017-07-11 20:34 - 2017-06-21 08:46 - 03290112 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2017-07-11 20:34 - 2017-06-21 08:46 - 01908224 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2017-07-11 20:34 - 2017-06-21 08:46 - 00925184 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe
2017-07-11 20:34 - 2017-06-21 08:46 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\SpaceControl.dll
2017-07-11 20:34 - 2017-06-21 08:46 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\dialclient.dll
2017-07-11 20:34 - 2017-06-21 08:45 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2017-07-11 20:34 - 2017-06-21 08:45 - 00891904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe
2017-07-11 20:34 - 2017-06-21 08:45 - 00471552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2017-07-11 20:34 - 2017-06-21 08:45 - 00102400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uexfat.dll
2017-07-11 20:34 - 2017-06-21 08:44 - 00588288 _____ (Microsoft Corporation) C:\Windows\system32\wlidprov.dll
2017-07-11 20:34 - 2017-06-21 08:44 - 00535040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2017-07-11 20:34 - 2017-06-21 08:44 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetails.dll
2017-07-11 20:34 - 2017-06-21 08:44 - 00136704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ufat.dll
2017-07-11 20:34 - 2017-06-21 08:44 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdProxy.dll
2017-07-11 20:34 - 2017-06-21 08:43 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Audio.dll
2017-07-11 20:34 - 2017-06-21 08:43 - 00961536 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll
2017-07-11 20:34 - 2017-06-21 08:43 - 00953344 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe
2017-07-11 20:34 - 2017-06-21 08:43 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\uReFS.dll
2017-07-11 20:34 - 2017-06-21 08:43 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\SpaceAgent.exe
2017-07-11 20:34 - 2017-06-21 08:43 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cnvfat.dll
2017-07-11 20:34 - 2017-06-21 08:42 - 00981504 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2017-07-11 20:34 - 2017-06-21 08:42 - 00853504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autofmt.exe
2017-07-11 20:34 - 2017-06-21 08:42 - 00779776 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2017-07-11 20:34 - 2017-06-21 08:42 - 00539136 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2017-07-11 20:34 - 2017-06-21 08:42 - 00470016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2017-07-11 20:34 - 2017-06-21 08:42 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\Geolocation.dll
2017-07-11 20:34 - 2017-06-21 08:42 - 00380416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uReFSv1.dll
2017-07-11 20:34 - 2017-06-21 08:42 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Devices.dll
2017-07-11 20:34 - 2017-06-21 08:42 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\LocationFrameworkInternalPS.dll
2017-07-11 20:34 - 2017-06-21 08:41 - 03400704 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-07-11 20:34 - 2017-06-21 08:41 - 02279424 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2017-07-11 20:34 - 2017-06-21 08:41 - 01692160 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2017-07-11 20:34 - 2017-06-21 08:41 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\SharedStartModel.dll
2017-07-11 20:34 - 2017-06-21 08:41 - 01080320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Ocr.dll
2017-07-11 20:34 - 2017-06-21 08:41 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\usermgr.dll
2017-07-11 20:34 - 2017-06-21 08:41 - 00983040 _____ (Microsoft Corporation) C:\Windows\system32\ngcsvc.dll
2017-07-11 20:34 - 2017-06-21 08:41 - 00945664 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll
2017-07-11 20:34 - 2017-06-21 08:41 - 00913920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2017-07-11 20:34 - 2017-06-21 08:41 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Midi.dll
2017-07-11 20:34 - 2017-06-21 08:41 - 00459776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2017-07-11 20:34 - 2017-06-21 08:40 - 04474368 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-07-11 20:34 - 2017-06-21 08:40 - 01891328 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2017-07-11 20:34 - 2017-06-21 08:40 - 01586176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2017-07-11 20:34 - 2017-06-21 08:40 - 01421824 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2017-07-11 20:34 - 2017-06-21 08:40 - 00886784 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2017-07-11 20:34 - 2017-06-21 08:40 - 00611328 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.dll
2017-07-11 20:34 - 2017-06-21 08:40 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\CryptoWinRT.dll
2017-07-11 20:34 - 2017-06-21 08:39 - 08076288 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2017-07-11 20:34 - 2017-06-21 08:39 - 02916864 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2017-07-11 20:34 - 2017-06-21 08:39 - 02538496 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-07-11 20:34 - 2017-06-21 08:39 - 02208768 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.3D.dll
2017-07-11 20:34 - 2017-06-21 08:39 - 01643008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2017-07-11 20:34 - 2017-06-21 08:39 - 01490432 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-07-11 20:34 - 2017-06-21 08:39 - 00971264 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2017-07-11 20:34 - 2017-06-21 08:39 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2017-07-11 20:34 - 2017-06-21 08:39 - 00673792 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2017-07-11 20:34 - 2017-06-21 08:38 - 05611008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2017-07-11 20:34 - 2017-06-21 08:38 - 03520512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xpsrchvw.exe
2017-07-11 20:34 - 2017-06-21 08:38 - 02695680 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2017-07-11 20:34 - 2017-06-21 08:38 - 02424320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Perception.dll
2017-07-11 20:34 - 2017-06-21 08:38 - 01984000 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2017-07-11 20:34 - 2017-06-21 08:38 - 01275392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2017-07-11 20:34 - 2017-06-21 08:38 - 00908800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2017-07-11 20:34 - 2017-06-21 08:38 - 00877056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoconv.exe
2017-07-11 20:34 - 2017-06-21 08:38 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2017-07-11 20:34 - 2017-06-21 08:38 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2017-07-11 20:34 - 2017-06-21 08:37 - 00875520 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2017-07-11 20:34 - 2017-06-21 08:37 - 00774656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.dll
2017-07-11 20:34 - 2017-06-21 08:37 - 00735744 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2017-07-11 20:34 - 2017-06-21 08:37 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
2017-07-11 20:34 - 2017-06-21 08:36 - 02318848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-07-11 20:34 - 2017-06-21 08:36 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Maps.dll
2017-07-11 20:34 - 2017-06-21 08:36 - 00903680 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-07-11 20:34 - 2017-06-21 08:36 - 00881152 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.dll
2017-07-11 20:34 - 2017-06-21 08:36 - 00701952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2017-07-11 20:34 - 2017-06-21 08:36 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\enrollmentapi.dll
2017-07-11 20:34 - 2017-06-21 08:35 - 04149248 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2017-07-11 20:34 - 2017-06-21 08:35 - 01726976 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2017-07-11 20:34 - 2017-06-21 08:35 - 01369088 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Phone.dll
2017-07-11 20:34 - 2017-06-21 08:35 - 01328640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2017-07-11 20:34 - 2017-06-21 08:35 - 00924672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2017-07-11 20:34 - 2017-06-21 08:35 - 00827904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2017-07-11 20:34 - 2017-06-21 08:35 - 00732160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsSpellCheckingFacility.dll
2017-07-11 20:34 - 2017-06-21 08:34 - 03299840 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2017-07-11 20:34 - 2017-06-21 08:34 - 01121280 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2017-07-11 20:34 - 2017-06-21 08:34 - 00711168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2017-07-11 20:34 - 2017-06-21 08:34 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\tssrvlic.dll
2017-07-11 20:34 - 2017-06-21 08:34 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\spaceman.exe
2017-07-11 20:34 - 2017-06-21 08:33 - 00691200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2017-07-11 20:34 - 2017-06-21 08:33 - 00439296 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2017-07-11 20:34 - 2017-06-21 08:33 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll
2017-07-11 20:34 - 2017-06-21 08:32 - 00353280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TextInputFramework.dll
2017-07-11 20:34 - 2017-06-21 08:30 - 00038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tlscsp.dll
2017-07-11 20:34 - 2017-05-23 06:58 - 00448576 _____ C:\Windows\system32\ApnDatabase.xml
2017-07-11 20:34 - 2017-03-04 09:10 - 00360040 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2017-07-11 20:34 - 2017-03-04 08:28 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2017-07-11 20:34 - 2017-03-04 08:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2017-07-11 20:34 - 2017-03-04 08:26 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs3D.dll
2017-07-11 20:34 - 2017-03-04 08:23 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\EmailApis.dll
2017-07-11 20:34 - 2017-03-04 08:23 - 00583680 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll
2017-07-11 20:34 - 2017-03-04 08:20 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2017-07-11 20:34 - 2017-03-04 08:20 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vaultcli.dll
2017-07-11 20:34 - 2017-03-04 08:19 - 01589760 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2017-07-11 20:34 - 2017-03-04 08:17 - 00864256 _____ (Microsoft Corporation) C:\Windows\system32\wpnapps.dll
2017-07-11 20:34 - 2017-03-04 08:15 - 01078784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2017-07-11 20:34 - 2017-03-04 08:14 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\PlayToReceiver.dll
2017-07-11 20:34 - 2017-03-04 08:12 - 04596224 _____ (Microsoft Corporation) C:\Windows\system32\xpsrchvw.exe
2017-07-11 20:34 - 2016-10-15 05:45 - 01790464 _____ (Microsoft Corporation) C:\Windows\system32\LocationFramework.dll
2017-07-11 20:34 - 2016-10-05 11:32 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll
2017-07-11 20:34 - 2016-08-27 07:12 - 00244816 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2017-07-11 20:33 - 2017-07-07 08:47 - 00201728 _____ (Microsoft Corporation) C:\Windows\system32\ScDeviceEnum.dll
2017-07-11 20:33 - 2017-07-07 08:44 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll
2017-07-11 20:33 - 2017-06-21 09:54 - 01669984 _____ (Microsoft Corporation) C:\Windows\system32\AppVIntegration.dll
2017-07-11 20:33 - 2017-06-21 09:54 - 00813408 _____ (Microsoft Corporation) C:\Windows\system32\AppVEntStreamingManager.dll
2017-07-11 20:33 - 2017-06-21 09:03 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\uudf.dll
2017-07-11 20:33 - 2017-06-21 09:01 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\Family.Authentication.dll
2017-07-11 20:33 - 2017-06-21 09:00 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_SignInOptions.dll
2017-07-11 20:33 - 2017-06-21 08:59 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll
2017-07-11 20:33 - 2017-06-21 08:59 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\KdsCli.dll
2017-07-11 20:33 - 2017-06-21 08:58 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\CloudDomainJoinDataModelServer.dll
2017-07-11 20:33 - 2017-06-21 08:58 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll
2017-07-11 20:33 - 2017-06-21 08:57 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\XamlTileRender.dll
2017-07-11 20:33 - 2017-06-21 08:57 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2017-07-11 20:33 - 2017-06-21 08:54 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ExecModelClient.dll
2017-07-11 20:33 - 2017-06-21 08:54 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll
2017-07-11 20:33 - 2017-06-21 08:52 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2017-07-11 20:33 - 2017-06-21 08:48 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\uexfat.dll
2017-07-11 20:33 - 2017-06-21 08:47 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\ufat.dll
2017-07-11 20:33 - 2017-06-21 08:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\fdProxy.dll
2017-07-11 20:33 - 2017-06-21 08:46 - 00516608 _____ (Microsoft Corporation) C:\Windows\system32\uReFSv1.dll
2017-07-11 20:33 - 2017-06-21 08:46 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\cnvfat.dll
2017-07-11 10:41 - 2017-07-13 19:59 - 00000000 ____D C:\Users\toombar PC\AppData\Roaming\KeePass
2017-07-11 10:35 - 2017-07-11 10:35 - 00000665 _____ C:\Users\toombar PC\Desktop\KeePass 2.lnk
2017-07-11 10:35 - 2017-07-11 10:35 - 00000665 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePass 2.lnk
2017-07-11 09:42 - 2017-07-11 09:42 - 00000589 _____ C:\DelFix.txt
2017-07-08 22:21 - 2017-07-08 22:21 - 00000000 ____D C:\Users\toombar PC\AppData\Local\PeerDistRepub
2017-07-08 15:58 - 2017-07-08 15:58 - 00001141 _____ C:\Users\toombar PC\Desktop\Your Unin-staller!.lnk
2017-07-08 15:58 - 2017-07-08 15:58 - 00000000 ____D C:\Program Files (x86)\Your Uninstaller! 7
2017-07-08 15:49 - 2017-07-08 15:38 - 00024064 _____ C:\Windows\zoek-delete.exe
2017-07-08 10:41 - 2017-07-08 10:41 - 00000711 _____ C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2017-07-05 16:50 - 2017-07-25 07:56 - 00345448 _____ C:\Windows\system32\FNTCACHE.DAT
2017-07-05 11:39 - 2017-07-05 11:39 - 00001058 _____ C:\Users\Public\Desktop\BioShock Infinite.lnk
2017-07-05 11:39 - 2017-07-05 11:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BioShock Infinite
2017-07-04 08:16 - 2017-07-07 08:59 - 00003386 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4143605839-527040269-2466945285-1001
2017-07-03 22:02 - 2017-07-03 22:02 - 00000000 ____D C:\ProgramData\BDLogging
2017-07-03 22:02 - 2016-12-05 15:32 - 00520032 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys
2017-07-03 21:58 - 2017-07-03 21:58 - 00000000 ____D C:\Users\toombar PC\Documents\Abelssoft
2017-07-03 21:57 - 2017-07-03 21:57 - 00001630 _____ C:\Users\Public\Desktop\WashAndGo.lnk
2017-07-03 21:57 - 2017-07-03 21:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WashAndGo
2017-07-03 21:53 - 2017-07-09 13:09 - 00000000 ____D C:\Users\toombar PC\AppData\Roaming\IObit
2017-07-03 21:53 - 2017-07-09 13:09 - 00000000 ____D C:\Users\toombar PC\AppData\LocalLow\IObit
2017-07-03 20:43 - 2017-07-03 20:43 - 00478392 ____N (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\8D1587E1.sys
2017-07-03 20:43 - 2017-07-03 20:43 - 00085600 ____N (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\35073608.sys
2017-07-03 20:41 - 2017-06-21 09:07 - 00179320 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2017-07-03 20:41 - 2017-06-21 09:07 - 00146552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2017-06-28 17:46 - 2017-04-21 23:53 - 00029376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2017-06-28 17:46 - 2017-04-21 23:53 - 00018600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100_clr0400.dll
2017-06-28 17:46 - 2017-04-21 23:50 - 00030912 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2017-06-28 17:46 - 2017-04-21 23:50 - 00018592 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100_clr0400.dll
2017-06-28 17:46 - 2017-04-11 20:27 - 00993632 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2017-06-28 17:46 - 2017-04-11 20:27 - 00690008 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll
2017-06-28 17:46 - 2017-03-15 20:15 - 00987840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2017-06-28 17:46 - 2017-03-15 20:15 - 00485576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp120_clr0400.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-07-25 09:56 - 2017-01-03 07:54 - 00000000 ____D C:\Users\toombar PC\AppData\Roaming\Skype
2017-07-25 09:29 - 2017-01-02 09:40 - 00000000 ____D C:\Users\toombar PC
2017-07-25 09:22 - 2017-06-12 17:57 - 00002902 _____ C:\Windows\Sandboxie.ini
2017-07-25 08:53 - 2017-01-03 19:27 - 00000000 ____D C:\ProgramData\TEMP
2017-07-25 08:50 - 2017-01-02 09:37 - 00000000 ____D C:\Windows\system32\SleepStudy
2017-07-25 08:02 - 2017-01-02 09:42 - 03596130 _____ C:\Windows\system32\PerfStringBackup.INI
2017-07-25 08:02 - 2016-07-17 00:25 - 01536422 _____ C:\Windows\system32\perfh005.dat
2017-07-25 08:02 - 2016-07-17 00:25 - 00420074 _____ C:\Windows\system32\perfc005.dat
2017-07-25 07:56 - 2017-05-29 18:13 - 00002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-07-25 07:56 - 2017-05-29 18:13 - 00002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-07-25 07:56 - 2017-02-26 17:35 - 33555456 _____ C:\Windows\SysWOW64\RAMDiskImage.data
2017-07-25 07:56 - 2017-01-09 21:14 - 00000000 ____D C:\Program Files (x86)\Steam
2017-07-25 07:56 - 2017-01-02 11:01 - 00000000 ____D C:\ProgramData\NVIDIA
2017-07-25 07:56 - 2017-01-02 10:29 - 00000000 ____D C:\Users\toombar PC\AppData\LocalLow\Mozilla
2017-07-25 07:56 - 2017-01-02 09:37 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-07-25 07:56 - 2016-07-16 08:04 - 00262144 _____ C:\Windows\system32\config\BBI
2017-07-25 02:54 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\rescache
2017-07-25 00:59 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-07-25 00:59 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\AppReadiness
2017-07-24 21:44 - 2017-01-03 19:23 - 00000000 ____D C:\Program Files\Microsoft Office
2017-07-23 22:29 - 2017-05-01 17:07 - 00000000 ____D C:\Users\toombar PC\AppData\Local\Spotify
2017-07-23 21:28 - 2017-01-10 20:26 - 00000703 _____ C:\Users\toombar PC\Desktop\Start Tor Browser.lnk
2017-07-23 20:50 - 2017-01-04 17:06 - 00000000 ____D C:\Users\toombar PC\AppData\Roaming\vlc
2017-07-23 20:26 - 2017-05-01 17:06 - 00000000 ____D C:\Users\toombar PC\AppData\Roaming\Spotify
2017-07-23 18:12 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-07-23 18:03 - 2017-02-13 17:55 - 00000000 ____D C:\Users\toombar PC\AppData\Roaming\Kodi
2017-07-14 14:10 - 2017-01-28 17:55 - 00000000 ____D C:\Users\toombar PC\Documents\3DMark
2017-07-14 13:08 - 2017-01-12 19:23 - 00000000 ____D C:\ProgramData\Abelssoft
2017-07-14 13:05 - 2017-01-13 15:16 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2017-07-14 13:01 - 2017-01-10 20:56 - 00000000 ____D C:\Users\toombar PC\Desktop\Sken
2017-07-14 12:59 - 2017-01-15 22:20 - 00000000 ____D C:\Users\toombar PC\Desktop\Firefox odkaty
2017-07-14 06:30 - 2017-02-21 21:43 - 00001116 _____ C:\Users\toombar PC\Desktop\Total Commander 64 bit.lnk
2017-07-14 06:20 - 2017-04-27 15:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-07-13 20:03 - 2017-01-02 09:40 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-07-13 20:02 - 2016-07-16 13:45 - 00000000 ____D C:\Windows\INF
2017-07-13 20:01 - 2016-07-16 13:47 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2017-07-13 20:01 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\oobe
2017-07-13 20:01 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\appraiser
2017-07-13 20:01 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\ShellExperiences
2017-07-13 20:01 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-07-13 20:01 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-07-11 23:10 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\LiveKernelReports
2017-07-11 20:40 - 2016-07-16 13:36 - 00000000 ____D C:\Windows\CbsTemp
2017-07-11 20:36 - 2017-01-02 21:02 - 00000000 ____D C:\Windows\system32\MRT
2017-07-11 20:35 - 2017-01-02 21:02 - 135225752 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-07-11 20:08 - 2016-07-16 13:43 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\enrollmentapi.dll
2017-07-11 11:59 - 2017-03-19 18:04 - 00000000 ___RD C:\Users\toombar PC\Disk Google
2017-07-09 16:11 - 2017-01-10 20:15 - 00000000 ____D C:\Users\toombar PC\AppData\LocalLow\Temp
2017-07-08 22:21 - 2017-01-02 09:56 - 00000000 ____D C:\MSI
2017-07-08 15:58 - 2017-02-28 22:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Your Uninstaller! 7
2017-07-08 15:48 - 2016-07-16 13:47 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2017-07-08 11:05 - 2017-01-28 17:58 - 00000022 _____ C:\Windows\GPU-Z.INI
2017-07-08 10:41 - 2017-01-25 22:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2017-07-07 08:59 - 2017-01-02 09:41 - 00002402 _____ C:\Users\toombar PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-07-07 08:59 - 2017-01-02 09:41 - 00000000 ___RD C:\Users\toombar PC\OneDrive
2017-07-06 07:27 - 2017-01-15 13:12 - 00000008 __RSH C:\ProgramData\ntuser.pol
2017-07-06 07:26 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2017-07-05 12:05 - 2017-02-22 19:39 - 00000000 ____D C:\Users\toombar PC\Documents\My Games
2017-07-05 12:05 - 2017-01-14 10:34 - 00000000 ____D C:\ProgramData\Steam
2017-07-05 11:07 - 2017-01-04 18:47 - 00000000 ____D C:\Users\toombar PC\AppData\Roaming\DAEMON Tools Lite
2017-07-04 08:57 - 2017-01-02 09:40 - 00000000 ____D C:\Users\toombar PC\AppData\Local\VirtualStore
2017-07-03 22:08 - 2017-03-20 07:14 - 00000000 ___HD C:\$WINDOWS.~BT
2017-07-03 22:08 - 2017-01-02 09:56 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-07-03 22:07 - 2017-06-07 21:30 - 00000000 ____D C:\Users\toombar PC\AppData\Roaming\Internet Download Accelerator
2017-07-03 22:07 - 2017-03-22 20:36 - 00000000 ____D C:\Windows\Minidump
2017-07-03 22:07 - 2017-01-25 12:10 - 00000000 ____D C:\Users\toombar PC\AppData\Roaming\TeamViewer
2017-07-03 22:07 - 2017-01-15 18:15 - 00000000 ____D C:\Users\toombar PC\AppData\Roaming\Sony
2017-07-03 22:07 - 2017-01-02 11:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2017-07-03 22:07 - 2017-01-02 09:36 - 00000000 ____D C:\Windows\Panther
2017-07-03 21:58 - 2017-01-12 19:24 - 00000000 ____D C:\Users\toombar PC\AppData\Local\Abelssoft
2017-07-03 21:49 - 2017-06-12 18:03 - 00000000 ____D C:\Users\toombar PC\AppData\Roaming\Viv
2017-07-03 20:42 - 2017-05-23 18:29 - 00004000 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-03 20:42 - 2017-01-03 17:49 - 00004308 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-03 20:42 - 2017-01-03 17:49 - 00003994 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-03 20:42 - 2017-01-03 17:49 - 00003894 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-03 20:42 - 2017-01-03 17:49 - 00003866 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-03 20:42 - 2017-01-03 17:49 - 00003858 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-03 20:42 - 2017-01-03 17:49 - 00003696 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-03 20:42 - 2017-01-03 17:49 - 00003654 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-07-03 20:42 - 2017-01-02 09:56 - 00001485 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2017-07-03 20:42 - 2017-01-02 09:56 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-07-03 20:42 - 2017-01-02 09:56 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-07-03 19:23 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\NDF
2017-07-03 18:18 - 2017-04-24 15:03 - 00000000 ____D C:\Users\toombar PC\AppData\Local\ElevatedDiagnostics
2017-06-30 16:46 - 2016-07-16 13:49 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-06-30 16:46 - 2016-07-16 13:49 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-06-28 17:50 - 2017-05-12 14:15 - 00000000 ____D C:\Windows\system32\UNP
2017-06-28 17:50 - 2017-05-12 14:15 - 00000000 ____D C:\Program Files\UNP
2017-06-27 21:52 - 2017-01-02 10:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

==================== Files in the root of some directories =======

2017-07-25 09:58 - 2017-07-25 09:58 - 0029696 _____ () C:\Users\toombar PC\AppData\Local\MSGBOX.EXE
2017-04-13 15:53 - 2017-04-21 18:43 - 0000700 ___SH () C:\Users\toombar PC\AppData\Local\systemFL7.dat
2017-03-27 21:27 - 2017-04-17 20:58 - 0000182 _____ () C:\Users\toombar PC\AppData\Local\uts.ini
2017-01-11 16:53 - 2017-01-11 16:53 - 0000037 _____ () C:\Users\toombar PC\AppData\Local\X-Plane Installer.prf
2017-01-11 16:57 - 2017-05-14 19:46 - 0000015 _____ () C:\Users\toombar PC\AppData\Local\X-Plane_drm_11.prf
2017-01-11 16:27 - 2017-01-11 16:27 - 0000024 _____ () C:\Users\toombar PC\AppData\Local\x-plane_install_11.txt

Some files in TEMP:
====================
2017-07-23 21:46 - 2017-07-23 21:46 - 0040448 ____N () C:\Users\toombar PC\AppData\Local\Temp\proxy_vole3217931725074316585.dll
2017-07-23 21:46 - 2017-07-23 21:46 - 0040448 ____N () C:\Users\toombar PC\AppData\Local\Temp\proxy_vole7996426865073491918.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-07-23 20:23

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 23-07-2017
Ran by toombar PC (25-07-2017 09:59:07)
Running from C:\Users\toombar PC\Desktop
Windows 10 Pro Version 1607 (X64) (2017-01-02 07:39:48)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-4143605839-527040269-2466945285-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4143605839-527040269-2466945285-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-4143605839-527040269-2466945285-1000 - Limited - Disabled) => C:\Users\defaultuser0
Guest (S-1-5-21-4143605839-527040269-2466945285-501 - Limited - Disabled)
toombar PC (S-1-5-21-4143605839-527040269-2466945285-1001 - Administrator - Enabled) => C:\Users\toombar PC

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Smart Security 10.0.390.0 (Enabled - Up to date) {EC1D6F37-E411-475A-DF50-12FF7FE4AC70}
AS: ESET Smart Security 10.0.390.0 (Enabled - Up to date) {577C8ED3-C22B-48D4-E5E0-298D0463E6CD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Personální firewall (Enabled) {D426EE12-AE7E-4602-F40F-BBCA8137EB0B}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

3DMark (HKLM\...\{F611E93B-8EC1-4662-BDFF-6909DB820862}) (Version: 2.2.3509.0 - Futuremark) Hidden
3DMark (HKLM-x32\...\{4bf26510-8c4e-447c-b819-2967aeca2839}) (Version: 2.2.3509.0 - Futuremark)
Aktualizace NVIDIA 25.6.0.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 25.6.0.0 - NVIDIA Corporation) Hidden
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 382.33 - NVIDIA Corporation) Hidden
Ashampoo Burning Studio 2017 (HKLM-x32\...\{91B33C97-C878-6579-69BA-23E5405C7AAB}_is1) (Version: 18.0.0 - Ashampoo GmbH & Co. KG)
Auslogics Disk Defrag Professional (HKLM-x32\...\{ADE1535C-C836-4F2E-BDA1-1C7C304743E3}_is1) (Version: 4.8.0.0 - Auslogics Labs Pty Ltd)
BioShock Infinite version 1.1.25.5165 (HKLM-x32\...\BioShock Infinite_is1) (Version: 1.1.25.5165 - 2K Games)
CPUID CPU-Z 1.78 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
CPUID HWMonitor 1.31 (HKLM\...\CPUID HWMonitor_is1) (Version: - )
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.5.0.0222 - Disc Soft Ltd)
devolo dLAN Configuration Wizard (HKLM-x32\...\dlanconf) (Version: 17.0.0.0 - devolo AG)
devolo Informer (HKLM-x32\...\dslmon) (Version: 26.0.0.0 - devolo AG)
ESET Smart Security (HKLM\...\{E483B847-824D-4659-A760-0AC8FE24055E}) (Version: 10.0.386.1 - ESET, spol. s r.o.)
Far Cry 4 (HKLM-x32\...\Uplay Install 420) (Version: - Ubisoft)
Far Cry Primal (HKLM-x32\...\{80BD47AF-CF13-49B2-99BF-7E78FBA26124}_is1) (Version: - Ubisoft)
Fraps (HKLM-x32\...\Fraps) (Version: - )
Futuremark SystemInfo (HKLM-x32\...\{6583B359-134F-480D-9B31-9B94EFFAFE40}) (Version: 5.0.609.0 - Futuremark)
Genie Timeline (HKLM-x32\...\Genie Timeline) (Version: 7.0 - Genie9)
Google Drive (HKLM-x32\...\{A1238426-ECDF-4639-BE2F-8D12A97AE23C}) (Version: 2.34.5075.1619 - Google, Inc.)
Google Earth (HKLM-x32\...\{F6430171-B86B-4639-839E-374913E7911D}) (Version: 7.1.8.3036 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 59.0.3071.115 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Hard Disk Sentinel PRO (HKLM-x32\...\Hard Disk Sentinel_is1) (Version: - HDS)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.6.0.1036 - Intel Corporation)
Intel(R) Network Connections 20.7.67.0 (HKLM\...\PROSetDX) (Version: 20.7.67.0 - Intel)
Intel(R) Online Connect Software Asset Manager (HKLM-x32\...\{AE956AB9-CD98-4F1E-8B9E-C3C66E290D64}) (Version: 3.4.2072 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.63.1519.7 - Intel Corporation)
Intel® Chipset Device Software (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel(R) Corporation) Hidden
Intel® Security Assist (HKLM-x32\...\{B294CE94-FE0F-4427-910C-180AF9FCFED1}) (Version: 1.0.1.620 - Intel Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
KeePass Password Safe 2.36 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.36 - Dominik Reichl)
Mafia III Update v1.01 Hotfix (HKLM\...\bWFmaWFpaWk_is1) (Version: 1 - )
Microsoft Office Professional Plus 2016 - cs-cz (HKLM\...\ProplusRetail - cs-cz) (Version: 16.0.8326.2052 - Microsoft Corporation)
Microsoft Office Professional Plus 2016 - en-us (HKLM\...\ProplusRetail - en-us) (Version: 16.0.8326.2052 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\OneDriveSetup.exe) (Version: 17.3.6944.0627 - Microsoft Corporation)
Microsoft Project Professional 2016 - cs-cz (HKLM\...\ProjectProRetail - cs-cz) (Version: 16.0.8326.2052 - Microsoft Corporation)
Microsoft Project Professional 2016 - en-us (HKLM\...\ProjectProRetail - en-us) (Version: 16.0.8326.2052 - Microsoft Corporation)
Microsoft Visio Professional 2016 - cs-cz (HKLM\...\VisioProRetail - cs-cz) (Version: 16.0.8326.2052 - Microsoft Corporation)
Microsoft Visio Professional 2016 - en-us (HKLM\...\VisioProRetail - en-us) (Version: 16.0.8326.2052 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.2.1.6382 - Mozilla)
Mozilla Thunderbird 52.2.1 (x86 cs) (HKLM-x32\...\Mozilla Thunderbird 52.2.1 (x86 cs)) (Version: 52.2.1 - Mozilla)
MSI Fast Boot (HKLM-x32\...\{0F212E7A-65EB-4668-A8D7-749026A64F8E}_is1) (Version: 1.0.1.8 - MSI)
MSI Gaming APP (HKLM-x32\...\{E0229316-E73B-484B-B9E0-45098AB38D8C}}_is1) (Version: 6.2.0.10 - MSI)
MSI Live Update 6 (HKLM-x32\...\{4F46CF54-47D2-41F4-B230-B0954C544420}}_is1) (Version: 6.2.0.10 - MSI)
MSI RAMDisk (HKLM-x32\...\{F29CF050-7278-4CDB-9EF8-2DC6DAA87453}}_is1) (Version: 1.0.0.22 - MSI)
NVIDIA GeForce Experience 3.7.0.81 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.7.0.81 - NVIDIA Corporation)
NVIDIA Ovladač 3D Vision 382.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 382.33 - NVIDIA Corporation)
NVIDIA Ovladač HD audia 1.3.34.26 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.26 - NVIDIA Corporation)
NVIDIA Ovladač řídící jednotky 3D Vision 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 382.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 382.33 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.17.0329 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0329 - NVIDIA Corporation)
NvNodejs (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvNodejs) (Version: 3.7.0.81 - NVIDIA Corporation) Hidden
NvTelemetry (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetry) (Version: 2.6.1.0 - NVIDIA Corporation) Hidden
NvvHci (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvvHci) (Version: 2.02.0.5 - NVIDIA Corporation) Hidden
O&O SafeErase Professional (HKLM\...\{648C9190-86AF-4D84-8302-A53390205132}) (Version: 11.0.151 - O&O Software GmbH)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.8326.2052 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.8326.2052 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.8229.2041 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.8229.2041 - Microsoft Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 10.4.10.46586 - Electronic Arts, Inc.)
Outlast 2 (HKLM-x32\...\1453301453_is1) (Version: gog-1 - GOG.com)
Ovládací panel NVIDIA 382.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 382.33 - NVIDIA Corporation) Hidden
Pomocník při upgradu na Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.17384 - Microsoft Corporation)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7855 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)
Registry Cleaner (HKLM-x32\...\Registry Cleaner_is1) (Version: 2.0 - Abelssoft)
Sandboxie 5.20 (64-bit) (HKLM\...\Sandboxie) (Version: 5.20 - Sandboxie Holdings, LLC)
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0380 - NVIDIA Corporation) Hidden
Skype™ 7.36 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.36.101 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Spotify) (Version: 1.0.58.573.g57c9cd87 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.78313 - TeamViewer)
The Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.0.615 - Electronic Arts)
The Witcher 2 - Assassins of Kings Enhanced Edition (HKLM-x32\...\The Witcher 2 - Assassins of Kings Enhanced Edition_is1) (Version: - GOG.com)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.0a - Ghisler Software GmbH)
TP-LINK TL-WN721N_TL-WN722N Driver (HKLM-x32\...\{38A1E3ED-D913-41D2-9953-A93D5ACE3ADF}) (Version: 1.3.1 - TP-LINK)
Uplay (HKLM-x32\...\Uplay) (Version: 30.0 - Ubisoft)
VEGAS Pro 14.0 (64-bit) (HKLM\...\{4C79D80F-79F9-11E6-8402-BB95F5A309BD}) (Version: 14.0.161 - VEGAS)
VivPDF Editor (HKLM-x32\...\VivPDFEditor_is1) (Version: 3.0.1.1013 - )
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN)
Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)
WashAndGo (HKLM-x32\...\AbAppId-53_is1) (Version: 23.0 - Abelssoft)
Windows 10 Update and Privacy Settings (HKLM\...\{4DFCD818-036A-4229-A67D-CF17DC461D92}) (Version: 1.0.14.0 - Microsoft Corporation)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
Your Uninstaller! 7 (HKLM-x32\...\YU2010_is1) (Version: 7.5.2014.3 - URSoft, Inc.)
Základní software zařízení HP Deskjet 3510 series (HKLM\...\{1719C693-20CF-4BC3-831F-B65E79268114}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google)
ContextMenuHandlers01: [ESET Smart Security - Context Menu Shell Extension] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Smart Security\shellExt.dll [2016-12-14] (ESET)
ContextMenuHandlers01: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-03-21] (Google)
ContextMenuHandlers01: [SafeErase] -> {E8D43C7E-EFA1-41A2-9AD9-0CFECD1678B7} => C:\Program Files\OO Software\SafeErase\oosesh.dll [2017-06-01] (O&O Software GmbH)
ContextMenuHandlers01: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers02: [ESET Smart Security - Context Menu Shell Extension] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Smart Security\shellExt.dll [2016-12-14] (ESET)
ContextMenuHandlers02: [SafeErase] -> {E8D43C7E-EFA1-41A2-9AD9-0CFECD1678B7} => C:\Program Files\OO Software\SafeErase\oosesh.dll [2017-06-01] (O&O Software GmbH)
ContextMenuHandlers04: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-03-21] (Google)
ContextMenuHandlers04: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\RecuvaShell64.dll [2016-06-06] (Piriform Ltd)
ContextMenuHandlers05: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2017-05-18] (NVIDIA Corporation)
ContextMenuHandlers06: [ESET Smart Security - Context Menu Shell Extension] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Smart Security\shellExt.dll [2016-12-14] (ESET)
ContextMenuHandlers06: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\RecuvaShell64.dll [2016-06-06] (Piriform Ltd)
ContextMenuHandlers06: [SafeErase] -> {E8D43C7E-EFA1-41A2-9AD9-0CFECD1678B7} => C:\Program Files\OO Software\SafeErase\oosesh.dll [2017-06-01] (O&O Software GmbH)
ContextMenuHandlers06: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {005E4777-0B2D-4161-9221-A4410BCAA41B} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-06-21] (NVIDIA Corporation)
Task: {0CB1B4FD-01A8-41F9-AA52-336F72208C19} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-07-18] (Microsoft Corporation)
Task: {1689C970-B79D-4AFB-B115-F9C7DE6F5A85} - System32\Tasks\Core Temp Autostart toombar PC => D:\Core Temp\Core Temp\Core Temp.exe
Task: {1EA36B98-BF37-4E35-A47E-55F1ACB2879B} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-06-22] ()
Task: {27E02E48-8A2A-4AE9-B9D6-05031C5D6A1B} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-06-21] (NVIDIA Corporation)
Task: {29F72EF3-124D-41E8-A281-5560DBF19469} - System32\Tasks\MSIGH_Host => C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey.exe [2017-01-19] (Micro-Star INT'L CO., LTD.)
Task: {2C91CC2A-E08A-4EB2-814A-391F8791F104} - System32\Tasks\MSIOSDx86_Host => C:\Program Files (x86)\MSI\Gaming APP\OSD\x86\MsiGamingOSD_x86.exe [2016-07-28] (Micro-Star INT'L CO., LTD.)
Task: {2DF9629A-CBE3-4963-BBC2-EF1B8C950AE3} - System32\Tasks\HardDiskSentinel\Hard Disk Sentinel_toombar_20PC => C:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe [2017-01-10] (H.D.S. Hungary)
Task: {2E950F53-782C-49D4-83AD-10508751AA52} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-06-22] ()
Task: {4BE5A328-E335-4AAC-85AE-15BD822ED63B} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-06-21] (NVIDIA Corporation)
Task: {593A4FB7-0297-4168-BE3B-06AF3187A53A} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
Task: {7AA67E60-37AC-432A-8A40-CD04ACD04D72} - System32\Tasks\MSISW_Host => C:\Windows\SysWoW64\muachost.exe [2015-08-18] (MSI)
Task: {8AE86DE8-6CB4-4B3A-89BE-17E1FFC718B2} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-06-21] (NVIDIA Corporation)
Task: {963167D3-B253-4207-86F4-655D27DF90CF} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-06-21] (NVIDIA Corporation)
Task: {9ED3B29F-C3DF-4D5C-8D55-BFC3C076AE36} - System32\Tasks\IntelIOC-Upgrade-f1c8187b-2653-47cd-a9be-b554b98f68a7 => C:\Program Files (x86)\Intel\Intel(R) Online Connect Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [2016-09-29] (Intel Corporation)
Task: {A3908112-A23A-4D7B-82A9-9E82535A44E5} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-06-21] (NVIDIA Corporation)
Task: {A54EE21B-A0B3-4E0C-9F32-90DF66728C18} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-06-21] (NVIDIA Corporation)
Task: {B6C73325-5F81-4E5F-877F-04BAA493C4B8} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-06-21] (NVIDIA Corporation)
Task: {B7A641CD-4665-41CF-89CE-53D5F3087993} - System32\Tasks\IntelIOC-Upgrade-f1c8187b-2653-47cd-a9be-b554b98f68a7-Logon => C:\Program Files (x86)\Intel\Intel(R) Online Connect Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [2016-09-29] (Intel Corporation)
Task: {B8C07CBD-159F-4910-841C-134ECC6C4E6D} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2016-07-26] (Intel(R) Corporation)
Task: {C6EBBEE0-D922-4666-8E14-32EE27E6ACAA} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-07-18] (Microsoft Corporation)
Task: {DA72F29E-EEBD-443A-AC0D-FFA80D3FE39F} - System32\Tasks\MSIOSDx64_Host => C:\Program Files (x86)\MSI\Gaming APP\OSD\x64\MsiGamingOSD_x64.exe [2016-07-28] (Micro-Star INT'L CO., LTD.)
Task: {DE27D045-F257-478A-B591-89F12C4CC1B2} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2017-07-23] (Microsoft Corporation)
Task: {E6C3D4DC-B3A2-4C77-BD1A-DB7250601E4C} - System32\Tasks\ABRC_RegularCheck => C:\Program Files (x86)\RegistryCleaner\RegistryCleaner.exe [2016-09-26] (Ascora GmbH)
Task: {F62D002A-6926-4A3B-B8E4-B2546E7817F0} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2017-07-23] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\Windows\SYSTEM32\ism32k.dll
2017-07-11 20:34 - 2017-06-21 09:48 - 02681200 _____ () C:\Windows\system32\CoreUIComponents.dll
2016-10-05 13:15 - 2016-10-05 13:15 - 00107752 _____ () C:\Program Files\Intel\Intel(R) Online Connect Access\libglog.dll
2016-10-05 13:15 - 2016-10-05 13:15 - 00412904 _____ () C:\Program Files\Intel\Intel(R) Online Connect Access\JsonCpp.dll
2017-01-03 17:49 - 2017-06-21 09:07 - 01267320 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-01-02 21:01 - 2016-09-07 06:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-15 21:40 - 2017-03-04 08:31 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-04-13 15:31 - 2016-06-14 16:35 - 00187392 _____ () C:\Program Files (x86)\MSI\Gaming APP\OSD\x64\D3D11FontDraw.dll
2017-07-24 19:01 - 2017-07-24 19:06 - 00074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-07-24 19:01 - 2017-07-24 19:06 - 00203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-07-24 19:01 - 2017-07-24 19:06 - 43573248 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-07-24 19:01 - 2017-07-24 19:06 - 02435584 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\skypert.dll
2017-06-27 14:52 - 2017-06-23 05:21 - 03807064 _____ () C:\Program Files (x86)\Google\Chrome\Application\59.0.3071.115\libglesv2.dll
2017-06-27 14:52 - 2017-06-23 05:21 - 00100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\59.0.3071.115\libegl.dll
2016-10-04 18:09 - 2016-10-04 18:09 - 00253664 _____ () C:\Program Files\Intel\Intel(R) Online Connect\CSLibWrapper.dll
2017-07-25 09:10 - 2017-07-25 09:10 - 00566439 _____ () D:\JDownloader v2.0\tmp\7zip\SevenZipJBinding-FKPz9\libgcc_s_sjlj-1.dll
2017-07-25 09:10 - 2017-07-25 09:10 - 04078962 _____ () D:\JDownloader v2.0\tmp\7zip\SevenZipJBinding-FKPz9\lib7-Zip-JBinding.dll
2017-03-15 21:41 - 2017-03-04 08:12 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-15 21:41 - 2017-03-04 08:05 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-15 21:41 - 2017-03-04 08:05 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-07-11 20:34 - 2017-06-21 08:35 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-07-11 20:34 - 2017-06-21 08:37 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-06-08 14:40 - 2017-06-08 14:40 - 03139496 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11706.1001.25.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-07-24 19:36 - 2017-07-24 19:37 - 10631168 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11706.1001.25.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2017-07-24 19:36 - 2017-07-24 19:37 - 02640896 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11706.1001.25.0_x64__8wekyb3d8bbwe\MS.Entertainment.Common.Mobile.dll
2017-07-24 19:36 - 2017-07-24 19:37 - 00760832 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11706.1001.25.0_x64__8wekyb3d8bbwe\WinStore.Vui.dll
2017-03-18 10:43 - 2005-07-18 14:43 - 00160256 _____ () C:\Program Files (x86)\MSI\Live Update\unrar.dll
2017-05-17 16:02 - 2017-05-17 16:02 - 02493440 _____ () D:\Origin\libGLESv2.dll
2017-01-03 17:49 - 2017-06-21 09:07 - 01040504 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-04-13 15:31 - 2016-06-14 16:35 - 00163328 _____ () C:\Program Files (x86)\MSI\Gaming APP\OSD\x86\D3D11FontDraw.dll
2017-01-09 21:15 - 2017-05-17 03:54 - 00678176 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2017-01-09 21:15 - 2016-09-01 03:02 - 04969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2017-01-09 21:15 - 2017-07-18 02:33 - 02497824 _____ () C:\Program Files (x86)\Steam\video.dll
2017-01-09 21:15 - 2016-09-01 03:02 - 01563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2017-01-09 21:15 - 2016-01-27 09:49 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2017-01-09 21:15 - 2016-09-01 03:02 - 01195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2017-01-09 21:15 - 2016-01-27 09:49 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2017-01-09 21:15 - 2016-01-27 09:49 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2017-01-09 21:15 - 2016-01-27 09:49 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2017-01-09 21:15 - 2016-01-27 09:49 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2017-01-09 21:15 - 2017-07-18 02:33 - 00884512 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2017-01-09 21:15 - 2016-07-05 00:17 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2017-04-26 15:19 - 2017-04-26 15:19 - 02005976 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll
2017-01-03 17:49 - 2017-06-21 09:06 - 66837112 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
2017-06-09 13:42 - 2017-05-17 03:54 - 00678176 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\SDL2.dll
2017-01-09 21:16 - 2017-07-06 19:58 - 73088800 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2017-01-09 21:15 - 2017-07-18 02:33 - 00384288 _____ () C:\Program Files (x86)\Steam\steam.dll
2016-10-20 02:28 - 2016-10-20 02:28 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:1CE11B51 [152]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-05-01 21:13 - 2017-07-09 16:11 - 00000027 _____ C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4143605839-527040269-2466945285-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img2.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: off)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "Malwarebytes TrayApp"
HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"
HKLM\...\StartupApproved\Run32: => "Live Update"
HKLM\...\StartupApproved\Run32: => "MSIRegister"
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\StartupApproved\StartupFolder: => "GoogleUpdate.lnk"
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\StartupApproved\StartupFolder: => "TeamViewer 12.lnk"
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\StartupApproved\Run: => "GoogleDriveSync"
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\StartupApproved\Run: => "WTFast Tray"
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\StartupApproved\Run: => "Internet Download Accelerator"
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\StartupApproved\Run: => "SandboxieControl"
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\StartupApproved\Run: => "IDMan"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{1BB87FC1-7ADE-489F-9D4F-B8040F43995A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{8AE420C2-70CD-468E-9F8B-7AA15C03AB77}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{0C56CAC2-8D27-48FD-96F6-5F2B6F2A0E25}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{BB6D2ECE-87A2-4869-BBAE-215A940DC7DF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{054994F0-3D6C-44D8-9F0A-3088ECF85AB8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{A06208B1-51B1-4216-B5E5-6B32C4B87F15}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{542FB5E4-7E04-4B8E-9FB4-D77E35E4C281}] => (Allow) C:\Program Files\HP\HP Deskjet 3510 series\Bin\DeviceSetup.exe
FirewallRules: [{6E020CC2-F01E-4CF6-BA70-1E8207543871}] => (Allow) C:\Program Files\HP\HP Deskjet 3510 series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{2006F230-F773-476E-8808-981D327D18FF}] => (Allow) C:\Program Files\HP\HP Deskjet 3510 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{3BB9D368-A439-424F-92B1-5547CB5BDA91}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6F832742-179A-442B-86B9-2D18CDCF4D3F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{3F7D1996-7891-4DD0-B028-1D23520EC21E}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{03E3F36C-22B4-44EE-B088-2B3BADA62CAF}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{FF94A641-F0D8-4488-BF30-E035A7DE78DB}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{970C9A08-A9EC-4C2D-925B-2BA0EF5AAAF1}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Rogue\ACC.exe
FirewallRules: [{0DEBFC3B-0F33-4155-B211-BDFF49F2892A}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Rogue\ACC.exe
FirewallRules: [{5415E77C-7A3D-4CAD-A77F-E997A9AB6821}] => (Allow) D:\Hry\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{C84A1A03-F355-41A7-839A-DB5A4152FBCE}] => (Allow) D:\Hry\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{C710728D-5345-44B8-BC74-2720F2DD7F33}] => (Allow) D:\Hry\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{6E5BC75F-825C-45D5-B9F1-535C85DF9E55}] => (Allow) D:\Hry\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{6EBB338B-2487-47E2-9E23-CA9746D1DFDA}] => (Allow) C:\Program Files (x86)\devolo\informer\devinf.exe
FirewallRules: [{8A401C9F-A52D-4E5F-AC23-B4035AA7D18F}] => (Allow) C:\Program Files (x86)\devolo\informer\devinf.exe
FirewallRules: [{8446E624-A84A-4A01-BE84-34E7E66C5947}] => (Allow) C:\Program Files (x86)\devolo\easyshare\easyshare.exe
FirewallRules: [{613463AE-D325-4A84-B964-EFCEF048F66F}] => (Allow) C:\Program Files (x86)\devolo\easyshare\easyshare.exe
FirewallRules: [{8F0C27FD-FC3F-440E-990E-06D271BBF254}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{4E686FA2-97B6-4E87-8AE2-9843F1920BA9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{B1BB7B94-B859-4BE2-9C39-48DC7864D4E1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{B360DB71-416D-4F9B-B89A-9A3340747C1D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{02DD9530-32F3-4020-80CA-448B151EA13C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{FF7B0050-9408-4185-9B3C-DB4820FAA9B8}] => (Allow) LPort=26789
FirewallRules: [{70FFEC8A-D99F-4AFE-BD3F-D21A79D26E9B}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe

==================== Restore Points =========================

25-07-2017 02:54:10 Naplánovaný kontrolní bod
25-07-2017 08:51:54 Before uninstalling Malwarebytes verze 3.1.2.1733

==================== Faulty Device Manager Devices =============

Name: Standardní klávesnice PS/2
Description: Standardní klávesnice PS/2
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardní klávesnice)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Myš Microsoft PS/2
Description: Myš Microsoft PS/2
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/25/2017 08:51:55 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Protokol Microsoft LLDP (Link-Layer Discovery Protocol).

System Error:
Přístup byl odepřen.
.

Error: (07/25/2017 07:56:43 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0xC004F074
Argument příkazového řádku:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (07/25/2017 07:56:41 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0xC004F074
Argument příkazového řádku:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (07/25/2017 07:56:28 AM) (Source: Service1) (EventID: 0) (User: )
Description: Zpracování události PowerEvent se nezdařilo. Chyba, ke které došlo: System.ArgumentNullException: Hodnota nemůže být NULL.
Název parametru: path
v System.IO.Directory.GetParent(String path)
v GamingApp_Service.Service1.WriteErrLog(String Content)
v GamingApp_Service.Service1.OnPowerEvent(PowerBroadcastStatus powerStatus)
v System.ServiceProcess.ServiceBase.DeferredPowerEvent(Int32 eventType, IntPtr eventData).

Error: (07/25/2017 07:39:28 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0xC004F074
Argument příkazového řádku:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (07/25/2017 07:39:26 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0xC004F074
Argument příkazového řádku:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (07/25/2017 07:39:14 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: Procedura Open pro službu BITS v knihovně DLL C:\Windows\System32\bitsperf.dll se nezdařila. Výkonnostní data pro tuto službu nebudou k dispozici. Vrácený kód stavu představují první čtyři bajty (DWORD) datové části.

Error: (07/25/2017 07:38:35 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Aktivace licence (slui.exe) se nezdařila s následujícím kódem chyby:
hr=0xC004F074
Argument příkazového řádku:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (07/25/2017 02:54:11 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Protokol Microsoft LLDP (Link-Layer Discovery Protocol).

System Error:
Přístup byl odepřen.
.

Error: (07/24/2017 11:49:26 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-ANQTDIM)
Description: Aplikaci windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel se nepovedlo aktivovat, protože došlo k chybě: -2144927142. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.


System errors:
=============
Error: (07/25/2017 08:03:10 AM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: NT AUTHORITY)
Description: 0x8000002a118\??\C:\PROGRAMDATA\MALWAREBYTES\MBAMSERVICE\S-1-5-21-4143605839-527040269-2466945285-1001-07252017080310259-ntuser.dat

Error: (07/25/2017 07:57:28 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Při čekání na odezvu transakce služby Intel(R) Online Connect Helper bylo dosaženo časového limitu (60000 ms).

Error: (07/25/2017 07:55:56 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (07/25/2017 07:55:54 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Origin Web Helper Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (07/25/2017 07:55:54 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Search byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (07/25/2017 07:55:54 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Virtuální disk byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 60000 milisekund: Restartovat službu.

Error: (07/25/2017 07:55:54 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba NVIDIA LocalSystem Container byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 6000 milisekund: Restartovat službu.

Error: (07/25/2017 07:55:54 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba NVIDIA Telemetry Container byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 1000 milisekund: Restartovat službu.

Error: (07/25/2017 07:55:54 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) Dynamic Application Loader Host Interface Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (07/25/2017 07:55:54 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba TeamViewer 12 byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 2000 milisekund: Restartovat službu.


CodeIntegrity:
===================================
Date: 2017-07-13 10:34:39.293
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

Date: 2017-07-12 12:57:47.254
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

Date: 2017-07-09 13:07:35.316
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

Date: 2017-07-07 20:00:27.025
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

Date: 2017-07-07 19:58:11.460
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

Date: 2017-07-05 17:01:37.660
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.

Date: 2017-07-03 22:41:12.129
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\ESET\ESET Smart Security\Modules\em023_64\10445\em023_64.dll.raw because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-07-03 22:41:11.994
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\ESET\ESET Smart Security\Modules\em023_64\10445\em023_64.dll.raw because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-07-03 22:32:38.694
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ProgramData\ESET\ESET Smart Security\Updfiles\base_nonnups\nod7D44.dll.nup.raw because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2017-07-03 22:32:38.580
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\ProgramData\ESET\ESET Smart Security\Updfiles\base_nonnups\nod7D44.dll.nup.raw because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-6600K CPU @ 3.50GHz
Percentage of memory in use: 54%
Total physical RAM: 16344 MB
Available physical RAM: 7445.52 MB
Total Virtual: 18776 MB
Available Virtual: 8393.56 MB

==================== Drives ================================

Drive b: (RAMDisk) (Fixed) (Total:3 GB) (Free:2.98 GB) NTFS
Drive c: () (Fixed) (Total:223.57 GB) (Free:75.64 GB) NTFS
Drive d: () (Fixed) (Total:930.97 GB) (Free:608.52 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 72232B3D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 223.6 GB) (Disk ID: 9CC853E6)
Partition 1: (Not Active) - (Size=223.6 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

Otevrete si poznamkovy blok a zkopirujte do nej tento skript Vlevo nahore kliknete na napis Soubor
Kliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev fixlist a ulozte na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Spustte FRST jako spravce, kliknete na napis Fix a program vykona prikazy.
Po restartu pc by se mel objevit novy log - s nazvem fixlog, ten mi sem zase zkopirujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 23-07-2017
Ran by toombar PC (25-07-2017 12:34:42) Run:1
Running from C:\Users\toombar PC\Desktop
Loaded Profiles: toombar PC (Available Profiles: defaultuser0 & toombar PC)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Run: [DAEMON Tools Lite Automount] => D:\Deamon Tools Lite\DAEMON Tools Lite\DTAgent.exe [4701888 2016-12-22] (Disc Soft Ltd)
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3062560 2017-07-18] (Valve Corporation)
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27716568 2017-05-04] (Skype Technologies S.A.)
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Run: [Spotify] => C:\Users\toombar PC\AppData\Roaming\Spotify\Spotify.exe [7111792 2017-07-09] (Spotify Ltd)
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\...\Run: [Spotify Web Helper] => C:\Users\toombar PC\AppData\Roaming\Spotify\Spotify.exe [7111792 2017-07-09] (Spotify Ltd)
Startup: C:\Users\toombar PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleUpdate.lnk [2017-02-21]
ShortcutTarget: GoogleUpdate.lnk -> C:\Users\toombar PC\AppData\Local\Temp\Chrome Updates\SeachEngine.exe (No File)

FF Extension: (Internet Download Accelerator Toolbar) - C:\Users\toombar PC\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\idabarff@westbyte.com.xpi [2017-02-10]

AlternateDataStreams: C:\ProgramData\TEMP:1CE11B51 [152]

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => value removed successfully
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite Automount => value removed successfully
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Steam => value removed successfully
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => value removed successfully
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Spotify => value removed successfully
HKU\S-1-5-21-4143605839-527040269-2466945285-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Spotify Web Helper => value removed successfully
C:\Users\toombar PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleUpdate.lnk => moved successfully
C:\Users\toombar PC\AppData\Local\Temp\Chrome Updates\SeachEngine.exe => not found.
C:\Users\toombar PC\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\idabarff@westbyte.com.xpi => moved successfully
C:\ProgramData\TEMP => ":1CE11B51" ADS removed successfully.
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 871376 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 107687652 B
Java, Flash, Steam htmlcache => 28232535 B
Windows/system/drivers => 1802695 B
Edge => 0 B
Chrome => 681715024 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 0 B
LocalService => 6530 B
NetworkService => 0 B
defaultuser0 => 0 B
toombar PC => 22609957 B

RecycleBin => 0 B
EmptyTemp: => 803.9 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 12:34:52 ====

Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)

vyosek píše: DelFix https://toolslib.net/downloads/finish/2/

• Stahnete a spustte
• Ponechte zatrzitkou pouze u volby Remove disinfection tools
• Kliknete na Run

Stahnete Ccleaner http://www.filehippo.com/download_ccleaner a spustte.
Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!
(Pokud je v pc vice uzivatelskych uctu, pouzijte program i v nich)

Defragmentujte disk(y) (SSD Disky ne!)
Stahnete program Defraggler https://www.piriform.com/defraggler/download/standard
Pri instalaci opet pozor na toolbar a dalsi nesmysly.
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.




Pak napiste, jak to s pc vypada.