VIRY.CZ

Přikládám log RSIT

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jiří Školotík at 2017-07-28 16:16:35
Microsoft Windows 10 Home
System drive C: has 419 GB (88%) free of 476 GB
Total RAM: 4009 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:16:46, on 28.07.2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.15063.0000)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\UnHackMe\hackmon.exe
C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Users\Jiří Školotík\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\CPP\CppKalkulacky\CppCalcServer.exe
C:\Program Files\trend micro\Jiří Školotík.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://accessfastweb.com/wpad.dat?d6294 ... 5534035807
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O2 - BHO: Microsoft OneDrive for Business Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Jiří Školotík\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Jiří Školotík\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Startup: CPP - CalcServer.lnk = C:\CPP\CppKalkulacky\CppCalcServer.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.allianz.cz
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Unknown owner - C:\WINDOWS\system32\AdminService.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Aktualizace Google (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Aktualizace Google (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9939 bytes

======Listing Processes======







winlogon.exe

C:\WINDOWS\system32\lsass.exe
"fontdrvhost.exe"
"fontdrvhost.exe"
c:\windows\system32\svchost.exe -k dcomlaunch -s PlugPlay
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
c:\windows\system32\svchost.exe -k rpcss
c:\windows\system32\svchost.exe -k dcomlaunch -s LSM
"dwm.exe"
c:\windows\system32\svchost.exe -k netsvcs -s gpsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s NcbService
c:\windows\system32\svchost.exe -k netsvcs -s Schedule
c:\windows\system32\svchost.exe -k netsvcs -s ProfSvc
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s TimeBrokerSvc
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s EventLog
c:\windows\system32\svchost.exe -k localservice -s nsi
c:\windows\system32\svchost.exe -k netsvcs -s Themes
c:\windows\system32\svchost.exe -k localservice -s EventSystem
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s Dhcp
c:\windows\system32\svchost.exe -k netsvcs -s UserManager
c:\windows\system32\svchost.exe -k appmodel -s StateRepository
c:\windows\system32\svchost.exe -k netsvcs -s SENS
c:\windows\system32\svchost.exe -k networkservice -s NlaSvc
C:\WINDOWS\system32\igfxCUIService.exe
c:\windows\system32\svchost.exe -k localservice -s netprofm
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -s FontCache
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
c:\windows\system32\svchost.exe -k networkservice -s Dnscache
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted
c:\windows\system32\svchost.exe -k netsvcs -s ShellHWDetection
c:\windows\system32\svchost.exe -k netsvcs -s Winmgmt
C:\WINDOWS\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k networkservice -s LanmanWorkstation
C:\WINDOWS\system32\AdminService.exe
c:\windows\system32\svchost.exe -k networkservice -s CryptSvc
c:\windows\syswow64\svchost.exe -k hpdevmgmt -s hpqddsvc
C:\WINDOWS\System32\svchost.exe -k utcsvc
c:\windows\system32\svchost.exe -k localservicenonetwork -s DPS
c:\windows\system32\svchost.exe -k localservice -s WinHttpAutoProxySvc
C:\Windows\System32\svchost.exe -k HPZ12
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s PcaSvc
C:\Windows\System32\svchost.exe -k HPZ12
C:\WINDOWS\system32\svchost.exe -k imgsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s SysMain
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s TrkWks
c:\windows\system32\svchost.exe -k netsvcs -s WpnService
c:\windows\system32\svchost.exe -k netsvcs -s LanmanServer

"C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"

"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
c:\windows\system32\svchost.exe -k localservice -s WdiServiceHost

c:\windows\system32\svchost.exe -k netsvcs -s iphlpsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s DeviceAssociationService
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s lmhosts
c:\windows\syswow64\svchost.exe -k hpdevmgmt -s hpqcxs08

c:\windows\system32\svchost.exe -k appmodel -s tiledatamodelsvc
C:\WINDOWS\system32\AUDIODG.EXE 0x3b8
c:\windows\system32\svchost.exe -k localservice -s CDPSvc
sihost.exe
C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
c:\windows\system32\svchost.exe -k netsvcs -s TokenBroker
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files (x86)\UnHackMe\hackmon.exe" $(Arg0)
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
C:\WINDOWS\Explorer.EXE
c:\windows\system32\svchost.exe -k netsvcs -s Appinfo
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe"
igfxEM.exe
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
igfxHK.exe
igfxTray.exe
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
c:\windows\system32\svchost.exe -k localservice -s LicenseManager
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeHost.exe" -ServerName:SkypeHost.ServerServer
C:\Windows\System32\smartscreen.exe -Embedding

"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_DOLBYDRAGON
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /LENOVO_MICPKEY
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s WdiSystemHost
"C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE" /logon
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe"
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
szndesktop.exe default start
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe"
"C:\CPP\CppKalkulacky\CppCalcServer.exe"
"C:\Users\Jiří Školotík\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe"
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -s SSDPSRV
c:\windows\system32\svchost.exe -k unistacksvcgroup
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s wscsvc
c:\windows\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\wbem\wmiprvse.exe
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s SmsRouter
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
C:\WINDOWS\system32\browser_broker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
c:\windows\system32\svchost.exe -k netsvcs -s lfsvc
C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-2294946949-1364430705-1025020277-10033_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-2294946949-1364430705-1025020277-10033 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s hidserv
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -s StorSvc
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 688 692 700 8192 696
"C:\Users\Jiří Školotík\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\TempState\Downloads\RSITx64.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-07-06 210112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-07-19 3131072]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-06-17 149704]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-07-19 2106048]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2017-03-18 629152]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2016-02-04 16418560]
"RtHDVBg_LENOVO_DOLBYDRAGON"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-02-04 1419008]
"RtHDVBg_LENOVO_MICPKEY"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-02-04 1419008]
"CanonSolutionMenu"=C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [2007-10-26 652624]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-07-07 2114376]
"Malwarebytes TrayApp"=C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2017-05-09 3146704]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"cz.seznam.software.autoupdate"=C:\Users\Jiří Školotík\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Jiří Školotík\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2015-05-26 103080]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2017-06-30 9818328]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2013-05-30 96056]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

C:\Users\Jiří Školotík\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
CPP - CalcServer.lnk - C:\CPP\CppKalkulacky\CppCalcServer.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2017-07-28 16:16:36 ----D---- C:\Program Files\trend micro
2017-07-28 16:16:35 ----D---- C:\rsit
2017-07-28 16:07:30 ----A---- C:\WINDOWS\system32\drivers\570A0177.sys
2017-07-28 16:03:27 ----D---- C:\AdwCleaner
2017-07-23 12:07:08 ----D---- C:\ProgramData\RegRun
2017-07-23 12:05:32 ----A---- C:\WINDOWS\SYSWOW64\drivers\Partizan.sys
2017-07-23 12:04:22 ----RASHOT---- C:\WINDOWS\winstart.bat
2017-07-23 12:04:05 ----A---- C:\WINDOWS\SYSWOW64\drivers\UnHackMeDrv.sys
2017-07-23 12:04:05 ----A---- C:\WINDOWS\system32\partizan.exe
2017-07-23 12:03:42 ----AD---- C:\Program Files (x86)\UnHackMe
2017-07-23 00:55:04 ----A---- C:\WINDOWS\system32\drivers\MBAMChameleon.sys
2017-07-23 00:54:31 ----A---- C:\WINDOWS\system32\drivers\mwac.sys
2017-07-23 00:54:31 ----A---- C:\WINDOWS\system32\drivers\farflt.sys
2017-07-23 00:54:21 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2017-07-23 00:54:15 ----A---- C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
2017-07-23 00:54:04 ----A---- C:\WINDOWS\system32\drivers\mbae64.sys
2017-07-23 00:53:47 ----D---- C:\ProgramData\Malwarebytes
2017-07-23 00:53:47 ----D---- C:\Program Files\Malwarebytes
2017-07-23 00:32:23 ----AD---- C:\Program Files\CCleaner
2017-07-15 21:51:51 ----SHD---- C:\Recovery
2017-07-15 21:44:42 ----D---- C:\Windows.old
2017-07-15 21:41:20 ----A---- C:\WINDOWS\SYSWOW64\wmpmde.dll
2017-07-15 21:41:20 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecsExt.dll
2017-07-15 21:41:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.System.Profile.RetailInfo.dll
2017-07-15 21:41:20 ----A---- C:\WINDOWS\SYSWOW64\Windows.Payments.dll
2017-07-15 21:41:20 ----A---- C:\WINDOWS\SYSWOW64\thumbcache.dll
2017-07-15 21:41:20 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2017-07-15 21:41:20 ----A---- C:\WINDOWS\SYSWOW64\policymanager.dll
2017-07-15 21:41:20 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2017-07-15 21:41:20 ----A---- C:\WINDOWS\SYSWOW64\credprovhost.dll
2017-07-15 21:41:20 ----A---- C:\WINDOWS\system32\wmpmde.dll
2017-07-15 21:41:20 ----A---- C:\WINDOWS\system32\SecurityHealthService.exe
2017-07-15 21:41:19 ----A---- C:\WINDOWS\SYSWOW64\WWAHost.exe
2017-07-15 21:41:19 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2017-07-15 21:41:19 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2017-07-15 21:41:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Resources.dll
2017-07-15 21:41:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2017-07-15 21:41:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Management.dll
2017-07-15 21:41:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2017-07-15 21:41:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2017-07-15 21:41:19 ----A---- C:\WINDOWS\SYSWOW64\Unistore.dll
2017-07-15 21:41:19 ----A---- C:\WINDOWS\SYSWOW64\MbaeApi.dll
2017-07-15 21:41:19 ----A---- C:\WINDOWS\SYSWOW64\LicenseManager.dll
2017-07-15 21:41:19 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2017-07-15 21:41:19 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2017-07-15 21:41:19 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2017-07-15 21:41:19 ----A---- C:\WINDOWS\SYSWOW64\CloudExperienceHostUser.dll
2017-07-15 21:41:19 ----A---- C:\WINDOWS\SYSWOW64\CloudExperienceHostCommon.dll
2017-07-15 21:41:19 ----A---- C:\WINDOWS\SYSWOW64\ClipboardServer.dll
2017-07-15 21:41:19 ----A---- C:\WINDOWS\SYSWOW64\AzureSettingSyncProvider.dll
2017-07-15 21:41:19 ----A---- C:\WINDOWS\SYSWOW64\ActiveSyncProvider.dll
2017-07-15 21:41:19 ----A---- C:\WINDOWS\SYSWOW64\aadtb.dll
2017-07-15 21:41:10 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2017-07-15 21:41:10 ----A---- C:\WINDOWS\SYSWOW64\rastls.dll
2017-07-15 21:41:10 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2017-07-15 21:41:10 ----A---- C:\WINDOWS\SYSWOW64\mos.dll
2017-07-15 21:41:10 ----A---- C:\WINDOWS\SYSWOW64\MapRouter.dll
2017-07-15 21:41:10 ----A---- C:\WINDOWS\SYSWOW64\InstallAgentUserBroker.exe
2017-07-15 21:41:10 ----A---- C:\WINDOWS\SYSWOW64\InstallAgent.exe
2017-07-15 21:41:10 ----A---- C:\WINDOWS\SYSWOW64\dmcmnutils.dll
2017-07-15 21:41:10 ----A---- C:\WINDOWS\SYSWOW64\dcomp.dll
2017-07-15 21:41:10 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll
2017-07-15 21:41:09 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2017-07-15 21:41:09 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll
2017-07-15 21:41:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Maps.dll
2017-07-15 21:41:09 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2017-07-15 21:41:09 ----A---- C:\WINDOWS\SYSWOW64\Windows.Internal.Bluetooth.dll
2017-07-15 21:41:09 ----A---- C:\WINDOWS\SYSWOW64\ucrtbase.dll
2017-07-15 21:41:09 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2017-07-15 21:41:09 ----A---- C:\WINDOWS\SYSWOW64\SndVolSSO.dll
2017-07-15 21:41:09 ----A---- C:\WINDOWS\SYSWOW64\SearchProtocolHost.exe
2017-07-15 21:41:09 ----A---- C:\WINDOWS\SYSWOW64\raschap.dll
2017-07-15 21:41:09 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2017-07-15 21:41:09 ----A---- C:\WINDOWS\SYSWOW64\mssrch.dll
2017-07-15 21:41:09 ----A---- C:\WINDOWS\SYSWOW64\MSAudDecMFT.dll
2017-07-15 21:41:09 ----A---- C:\WINDOWS\SYSWOW64\edputil.dll
2017-07-15 21:41:09 ----A---- C:\WINDOWS\SYSWOW64\eapprovp.dll
2017-07-15 21:41:09 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2017-07-15 21:41:09 ----A---- C:\WINDOWS\SYSWOW64\BingMaps.dll
2017-07-15 21:41:09 ----A---- C:\WINDOWS\SYSWOW64\bcastdvr.exe
2017-07-15 21:41:09 ----A---- C:\WINDOWS\SYSWOW64\ActivationManager.dll
2017-07-15 21:41:09 ----A---- C:\WINDOWS\system32\MSAudDecMFT.dll
2017-07-15 21:41:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2017-07-15 21:41:08 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2017-07-15 21:41:08 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2017-07-15 21:41:08 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2017-07-15 21:41:08 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2017-07-15 21:41:08 ----A---- C:\WINDOWS\system32\mfsvr.dll
2017-07-15 21:41:08 ----A---- C:\WINDOWS\system32\mfps.dll
2017-07-15 21:41:08 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2017-07-15 21:41:07 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2017-07-15 21:41:07 ----A---- C:\WINDOWS\system32\fveapi.dll
2017-07-15 21:41:07 ----A---- C:\WINDOWS\system32\drivers\mrxsmb10.sys
2017-07-15 21:41:04 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecsRaw.dll
2017-07-15 21:41:04 ----A---- C:\WINDOWS\SYSWOW64\PhotoScreensaver.scr
2017-07-15 21:41:04 ----A---- C:\WINDOWS\system32\WindowsCodecsRaw.dll
2017-07-15 21:41:04 ----A---- C:\WINDOWS\system32\PhotoScreensaver.scr
2017-07-15 21:41:01 ----A---- C:\WINDOWS\SYSWOW64\SensorsApi.dll
2017-07-15 21:41:01 ----A---- C:\WINDOWS\system32\sensrsvc.dll
2017-07-15 21:41:01 ----A---- C:\WINDOWS\system32\SensorsApi.dll
2017-07-15 21:41:00 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2017-07-15 21:41:00 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2017-07-15 21:41:00 ----A---- C:\WINDOWS\system32\iepeers.dll
2017-07-15 21:40:59 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2017-07-15 21:40:59 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2017-07-15 21:40:59 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2017-07-15 21:40:59 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2017-07-15 21:40:59 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2017-07-15 21:40:59 ----A---- C:\WINDOWS\system32\mshtml.dll
2017-07-15 21:40:59 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2017-07-15 21:40:59 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2017-07-15 21:40:59 ----A---- C:\WINDOWS\system32\Chakra.dll
2017-07-15 21:40:58 ----A---- C:\WINDOWS\SYSWOW64\webplatstorageserver.dll
2017-07-15 21:40:58 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2017-07-15 21:40:58 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2017-07-15 21:40:58 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2017-07-15 21:40:58 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2017-07-15 21:40:58 ----A---- C:\WINDOWS\system32\mshtmled.dll
2017-07-15 21:40:58 ----A---- C:\WINDOWS\system32\msfeeds.dll
2017-07-15 21:40:58 ----A---- C:\WINDOWS\system32\jscript9.dll
2017-07-15 21:40:58 ----A---- C:\WINDOWS\system32\edgehtml.dll
2017-07-15 21:40:58 ----A---- C:\WINDOWS\system32\dxtrans.dll
2017-07-15 21:40:57 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2017-07-15 21:40:57 ----A---- C:\WINDOWS\system32\ieframe.dll
2017-07-15 21:40:56 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2017-07-15 21:40:56 ----A---- C:\WINDOWS\system32\ieui.dll
2017-07-15 21:40:56 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2017-07-15 21:40:55 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2017-07-15 21:40:55 ----A---- C:\WINDOWS\SYSWOW64\themeui.dll
2017-07-15 21:40:55 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2017-07-15 21:40:55 ----A---- C:\WINDOWS\SYSWOW64\sendmail.dll
2017-07-15 21:40:55 ----A---- C:\WINDOWS\SYSWOW64\ExplorerFrame.dll
2017-07-15 21:40:55 ----A---- C:\WINDOWS\SYSWOW64\DevicePairing.dll
2017-07-15 21:40:55 ----A---- C:\WINDOWS\SYSWOW64\dataclen.dll
2017-07-15 21:40:55 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2017-07-15 21:40:55 ----A---- C:\WINDOWS\SYSWOW64\AboveLockAppHost.dll
2017-07-15 21:40:55 ----A---- C:\WINDOWS\system32\HoloSI.PCShell.dll
2017-07-15 21:40:49 ----A---- C:\WINDOWS\SYSWOW64\wininitext.dll
2017-07-15 21:40:49 ----A---- C:\WINDOWS\SYSWOW64\wdc.dll
2017-07-15 21:40:49 ----A---- C:\WINDOWS\SYSWOW64\VAN.dll
2017-07-15 21:40:49 ----A---- C:\WINDOWS\SYSWOW64\SmartcardCredentialProvider.dll
2017-07-15 21:40:49 ----A---- C:\WINDOWS\SYSWOW64\scksp.dll
2017-07-15 21:40:49 ----A---- C:\WINDOWS\SYSWOW64\rpchttp.dll
2017-07-15 21:40:49 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2017-07-15 21:40:49 ----A---- C:\WINDOWS\SYSWOW64\olepro32.dll
2017-07-15 21:40:49 ----A---- C:\WINDOWS\SYSWOW64\ole32.dll
2017-07-15 21:40:49 ----A---- C:\WINDOWS\SYSWOW64\msinfo32.exe
2017-07-15 21:40:49 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2017-07-15 21:40:49 ----A---- C:\WINDOWS\SYSWOW64\certutil.exe
2017-07-15 21:40:49 ----A---- C:\WINDOWS\SYSWOW64\basecsp.dll
2017-07-15 21:40:49 ----A---- C:\WINDOWS\SYSWOW64\apphelp.dll
2017-07-15 21:40:49 ----A---- C:\WINDOWS\system32\Windows.UI.dll
2017-07-15 21:40:49 ----A---- C:\WINDOWS\system32\uDWM.dll
2017-07-15 21:40:49 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2017-07-15 21:40:49 ----A---- C:\WINDOWS\system32\oleacc.dll
2017-07-15 21:40:49 ----A---- C:\WINDOWS\system32\mstscax.dll
2017-07-15 21:40:49 ----A---- C:\WINDOWS\system32\msctfuimanager.dll
2017-07-15 21:40:49 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2017-07-15 21:40:49 ----A---- C:\WINDOWS\system32\fontdrvhost.exe
2017-07-15 21:40:49 ----A---- C:\WINDOWS\system32\duser.dll
2017-07-15 21:40:49 ----A---- C:\WINDOWS\system32\ConhostV2.dll
2017-07-15 21:40:48 ----A---- C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll
2017-07-15 21:40:48 ----A---- C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2017-07-15 21:40:48 ----A---- C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-07-15 21:40:48 ----A---- C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2017-07-15 21:40:48 ----A---- C:\WINDOWS\system32\CloudDomainJoinAUG.dll
2017-07-15 21:40:45 ----A---- C:\WINDOWS\system32\AboveLockAppHost.dll
2017-07-15 21:40:44 ----A---- C:\WINDOWS\system32\InputSwitch.dll
2017-07-15 21:40:44 ----A---- C:\WINDOWS\system32\CloudExperienceHost.dll
2017-07-15 21:40:43 ----A---- C:\WINDOWS\system32\shell32.dll
2017-07-15 21:40:43 ----A---- C:\WINDOWS\system32\ExplorerFrame.dll
2017-07-15 21:40:43 ----A---- C:\WINDOWS\system32\DevicePairing.dll
2017-07-15 21:40:42 ----A---- C:\WINDOWS\system32\themeui.dll
2017-07-15 21:40:42 ----A---- C:\WINDOWS\system32\sendmail.dll
2017-07-15 21:40:42 ----A---- C:\WINDOWS\system32\dataclen.dll
2017-07-15 21:40:41 ----A---- C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2017-07-15 21:40:40 ----A---- C:\WINDOWS\system32\twinui.dll
2017-07-15 21:40:40 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-07-15 21:40:39 ----A---- C:\WINDOWS\system32\wpncore.dll
2017-07-15 21:40:39 ----A---- C:\WINDOWS\system32\wincredui.dll
2017-07-15 21:40:39 ----A---- C:\WINDOWS\system32\vbscript.dll
2017-07-15 21:40:39 ----A---- C:\WINDOWS\system32\urlmon.dll
2017-07-15 21:40:39 ----A---- C:\WINDOWS\system32\twinui.pcshell.dll
2017-07-15 21:40:39 ----A---- C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-07-15 21:40:39 ----A---- C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2017-07-15 21:40:39 ----A---- C:\WINDOWS\system32\RDXTaskFactory.dll
2017-07-15 21:40:39 ----A---- C:\WINDOWS\system32\rasmans.dll
2017-07-15 21:40:39 ----A---- C:\WINDOWS\system32\raschap.dll
2017-07-15 21:40:39 ----A---- C:\WINDOWS\system32\prntvpt.dll
2017-07-15 21:40:39 ----A---- C:\WINDOWS\system32\LogonController.dll
2017-07-15 21:40:39 ----A---- C:\WINDOWS\system32\LockHostingFramework.dll
2017-07-15 21:40:39 ----A---- C:\WINDOWS\system32\localspl.dll
2017-07-15 21:40:39 ----A---- C:\WINDOWS\system32\eapprovp.dll
2017-07-15 21:40:39 ----A---- C:\WINDOWS\system32\CredentialUIBroker.exe
2017-07-15 21:40:39 ----A---- C:\WINDOWS\explorer.exe
2017-07-15 21:40:38 ----A---- C:\WINDOWS\system32\wwansvc.dll
2017-07-15 21:40:38 ----A---- C:\WINDOWS\system32\wwanprotdim.dll
2017-07-15 21:40:38 ----A---- C:\WINDOWS\system32\wininet.dll
2017-07-15 21:40:38 ----A---- C:\WINDOWS\system32\Windows.System.Profile.RetailInfo.dll
2017-07-15 21:40:38 ----A---- C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-07-15 21:40:38 ----A---- C:\WINDOWS\system32\WFDSConMgrSvc.dll
2017-07-15 21:40:38 ----A---- C:\WINDOWS\system32\WFDSConMgr.dll
2017-07-15 21:40:38 ----A---- C:\WINDOWS\system32\provengine.dll
2017-07-15 21:40:38 ----A---- C:\WINDOWS\system32\policymanager.dll
2017-07-15 21:40:38 ----A---- C:\WINDOWS\system32\omadmclient.exe
2017-07-15 21:40:38 ----A---- C:\WINDOWS\system32\officecsp.dll
2017-07-15 21:40:38 ----A---- C:\WINDOWS\system32\iertutil.dll
2017-07-15 21:40:38 ----A---- C:\WINDOWS\system32\edputil.dll
2017-07-15 21:40:38 ----A---- C:\WINDOWS\system32\dwmcore.dll
2017-07-15 21:40:38 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2017-07-15 21:40:38 ----A---- C:\WINDOWS\system32\drivers\mskssrv.sys
2017-07-15 21:40:38 ----A---- C:\WINDOWS\system32\dmcmnutils.dll
2017-07-15 21:40:38 ----A---- C:\WINDOWS\system32\dcomp.dll
2017-07-15 21:40:38 ----A---- C:\WINDOWS\system32\ActiveSyncProvider.dll
2017-07-15 21:40:37 ----A---- C:\WINDOWS\system32\wuuhext.dll
2017-07-15 21:40:37 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2017-07-15 21:40:37 ----A---- C:\WINDOWS\system32\winsrv.dll
2017-07-15 21:40:37 ----A---- C:\WINDOWS\system32\wcmsvc.dll
2017-07-15 21:40:37 ----A---- C:\WINDOWS\system32\usocore.dll
2017-07-15 21:40:37 ----A---- C:\WINDOWS\system32\updatehandlers.dll
2017-07-15 21:40:37 ----A---- C:\WINDOWS\system32\TokenBrokerUI.dll
2017-07-15 21:40:37 ----A---- C:\WINDOWS\system32\SRH.dll
2017-07-15 21:40:37 ----A---- C:\WINDOWS\system32\SIHClient.exe
2017-07-15 21:40:37 ----A---- C:\WINDOWS\system32\rastls.dll
2017-07-15 21:40:37 ----A---- C:\WINDOWS\system32\rascustom.dll
2017-07-15 21:40:37 ----A---- C:\WINDOWS\system32\rasapi32.dll
2017-07-15 21:40:37 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2017-07-15 21:40:37 ----A---- C:\WINDOWS\system32\PerceptionSimulationExtensions.dll
2017-07-15 21:40:37 ----A---- C:\WINDOWS\system32\OpcServices.dll
2017-07-15 21:40:37 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2017-07-15 21:40:37 ----A---- C:\WINDOWS\system32\DMPushRouterCore.dll
2017-07-15 21:40:37 ----A---- C:\WINDOWS\system32\cldapi.dll
2017-07-15 21:40:37 ----A---- C:\WINDOWS\system32\AppxAllUserStore.dll
2017-07-15 21:40:37 ----A---- C:\WINDOWS\system32\ActiveSyncCsp.dll
2017-07-15 21:40:36 ----A---- C:\WINDOWS\system32\winresume.exe
2017-07-15 21:40:36 ----A---- C:\WINDOWS\system32\winload.exe
2017-07-15 21:40:36 ----A---- C:\WINDOWS\system32\SndVolSSO.dll
2017-07-15 21:40:36 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2017-07-15 21:40:36 ----A---- C:\WINDOWS\system32\ntdll.dll
2017-07-15 21:40:36 ----A---- C:\WINDOWS\system32\GamePanel.exe
2017-07-15 21:40:36 ----A---- C:\WINDOWS\system32\drivers\pdc.sys
2017-07-15 21:40:36 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2017-07-15 21:40:36 ----A---- C:\WINDOWS\system32\drivers\clfs.sys
2017-07-15 21:40:36 ----A---- C:\WINDOWS\system32\drivers\bridge.sys
2017-07-15 21:40:36 ----A---- C:\WINDOWS\system32\dosvc.dll
2017-07-15 21:40:36 ----A---- C:\WINDOWS\system32\domgmt.dll
2017-07-15 21:40:36 ----A---- C:\WINDOWS\system32\csrsrv.dll
2017-07-15 21:40:36 ----A---- C:\WINDOWS\system32\bcastdvr.exe
2017-07-15 21:40:36 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-07-15 21:40:36 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-07-15 21:40:36 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\wudriver.dll
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\winlogon.exe
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\wininitext.dll
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\wdc.dll
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\scksp.dll
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\ScDeviceEnum.dll
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\SCardSvr.dll
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\ole32.dll
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\Narrator.exe
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\msxml3.dll
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\msinfo32.exe
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\lsass.exe
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\KernelBase.dll
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\invagent.dll
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\generaltel.dll
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\EditionUpgradeHelper.dll
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\drivers\http.sys
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\devinv.dll
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\CompatTelRunner.exe
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\certutil.exe
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\certprop.dll
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\basecsp.dll
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\appraiser.dll
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\aeinv.dll
2017-07-15 21:40:29 ----A---- C:\WINDOWS\system32\acmigration.dll
2017-07-15 21:40:28 ----A---- C:\WINDOWS\system32\WWAHost.exe
2017-07-15 21:40:28 ----A---- C:\WINDOWS\system32\WMPhoto.dll
2017-07-15 21:40:28 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-07-15 21:40:28 ----A---- C:\WINDOWS\system32\WinBioDataModelOOBE.exe
2017-07-15 21:40:28 ----A---- C:\WINDOWS\system32\WinBioDataModel.dll
2017-07-15 21:40:28 ----A---- C:\WINDOWS\system32\psmsrv.dll
2017-07-15 21:40:28 ----A---- C:\WINDOWS\system32\PlayToDevice.dll
2017-07-15 21:40:28 ----A---- C:\WINDOWS\system32\MMDevAPI.dll
2017-07-15 21:40:28 ----A---- C:\WINDOWS\system32\FrameServer.dll
2017-07-15 21:40:28 ----A---- C:\WINDOWS\system32\DolbyMATEnc.dll
2017-07-15 21:40:28 ----A---- C:\WINDOWS\system32\DolbyHrtfEnc.dll
2017-07-15 21:40:28 ----A---- C:\WINDOWS\system32\DmApiSetExtImplDesktop.dll
2017-07-15 21:40:28 ----A---- C:\WINDOWS\system32\daxexec.dll
2017-07-15 21:40:28 ----A---- C:\WINDOWS\system32\bisrv.dll
2017-07-15 21:40:28 ----A---- C:\WINDOWS\system32\audiosrv.dll
2017-07-15 21:40:28 ----A---- C:\WINDOWS\system32\AudioSes.dll
2017-07-15 21:40:28 ----A---- C:\WINDOWS\system32\AudioEng.dll
2017-07-15 21:40:28 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-07-15 21:40:28 ----A---- C:\WINDOWS\system32\audiodg.exe
2017-07-15 21:40:28 ----A---- C:\WINDOWS\system32\aitstatic.exe
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\wuuhosdeployment.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\wuaueng.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\wuapi.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\Wldap32.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\winmde.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\wininit.exe
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\WindowsCodecsExt.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\windows.storage.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\Windows.Payments.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\win32kfull.sys
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\win32kbase.sys
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\wbiosrvc.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\Unistore.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\twinui.appcore.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\tquery.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\tileobjserver.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\TDLMigration.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\storewuauth.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\SensorService.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\SearchProtocolHost.exe
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\PlayToReceiver.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\MusNotification.exe
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\msv1_0.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\mssrch.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\msftedit.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\mos.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.Interface.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\MbaeApi.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\MapRouter.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\LicenseManager.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\kerberos.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\InstallAgent.exe
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\InputService.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\hvloader.exe
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\hvix64.exe
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\hvax64.exe
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\FntCache.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\DWrite.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\drivers\wcifs.sys
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\DeviceCensus.exe
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\dcntel.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\dbgeng.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\d2d1.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\CloudExperienceHostUser.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\BluetoothApis.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\BingMaps.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\aepic.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\aadtb.dll
2017-07-15 21:40:27 ----A---- C:\WINDOWS\system32\aadcloudap.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\WMPhoto.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\Wldap32.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\wincredui.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\webservices.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\TokenBrokerUI.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\PlayToDevice.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\OpcServices.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\oleacc.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\msv1_0.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\msctfuimanager.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\msasn1.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\MMDevAPI.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\Microsoft.Bluetooth.Profiles.Gatt.Interface.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\InputService.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\fontdrvhost.exe
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\dwmapi.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\dbghelp.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\Clipc.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\cldapi.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\CertEnroll.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\certca.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\BluetoothApis.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\AppxAllUserStore.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\SYSWOW64\aepic.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\system32\WpAXHolder.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\system32\rdpudd.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2017-07-15 21:40:26 ----A---- C:\WINDOWS\system32\drivers\msiscsi.sys
2017-07-15 21:40:26 ----A---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2017-07-15 21:40:26 ----A---- C:\WINDOWS\system32\drivers\bthport.sys
2017-07-15 21:40:26 ----A---- C:\WINDOWS\system32\ClipSVC.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\system32\Clipc.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\system32\ClipboardServer.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\system32\CertEnroll.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\system32\certcli.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\system32\certca.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2017-07-15 21:40:26 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2017-07-15 21:31:49 ----D---- C:\ProgramData\Microsoft OneDrive
2017-07-15 21:28:15 ----A---- C:\WINDOWS\system32\wmpps.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\XpsPrint.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\XpsDocumentTargetPrint.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\xboxgipsynthetic.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.Diagnostics.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.System.Launcher.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\WiFiDisplay.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\VEEventDispatcher.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\twinui.appcore.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\StoreAgent.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\smartscreenps.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\ShareHost.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncHost.exe
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\SearchIndexer.exe
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\quartz.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\PackageStateRoaming.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\OneDriveSettingSyncProvider.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\mfmjpegdec.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\MessagingDataModel2.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\MapGeocoder.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\DictationManager.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\DeviceFlows.DataModel.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\SYSWOW64\CloudBackupSettings.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\system32\MSVPXENC.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\system32\mfplat.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\system32\mfmjpegdec.dll
2017-07-15 21:28:08 ----A---- C:\WINDOWS\system32\mfcore.dll
2017-07-15 21:28:07 ----A---- C:\WINDOWS\system32\MSVideoDSP.dll
2017-07-15 21:28:07 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2017-07-15 21:27:57 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2017-07-15 21:27:57 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2017-07-15 21:27:56 ----A---- C:\WINDOWS\SYSWOW64\ieproxy.dll
2017-07-15 21:27:56 ----A---- C:\WINDOWS\system32\webplatstorageserver.dll
2017-07-15 21:27:56 ----A---- C:\WINDOWS\system32\ieproxy.dll
2017-07-15 21:27:55 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2017-07-15 21:27:55 ----A---- C:\WINDOWS\SYSWOW64\NPSMDesktopProvider.dll
2017-07-15 21:27:55 ----A---- C:\WINDOWS\SYSWOW64\mspaint.exe
2017-07-15 21:27:55 ----A---- C:\WINDOWS\SYSWOW64\InputSwitch.dll
2017-07-15 21:27:55 ----A---- C:\WINDOWS\SYSWOW64\comctl32.dll
2017-07-15 21:27:55 ----A---- C:\WINDOWS\system32\webcheck.dll
2017-07-15 21:27:55 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2017-07-15 21:27:54 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Immersive.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\SYSWOW64\UIRibbonRes.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\SYSWOW64\RstrtMgr.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\SYSWOW64\offreg.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\SYSWOW64\kernel32.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\SYSWOW64\asycfilt.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\XpsPrint.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\winsrvext.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\win32spl.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\SystemSettings.Handlers.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\StartTileData.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\SharedStartModel.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\SettingsHandlers_Display.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\RDXService.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\NPSMDesktopProvider.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\NotificationController.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\mspaint.exe
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\msctf.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\LockAppBroker.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\gdi32full.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\dwmredir.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\DeviceFlows.DataModel.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\comdlg32.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\comctl32.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\atmlib.dll
2017-07-15 21:27:54 ----A---- C:\WINDOWS\system32\atmfd.dll
2017-07-15 21:27:53 ----A---- C:\WINDOWS\system32\wpnprv.dll
2017-07-15 21:27:53 ----A---- C:\WINDOWS\system32\wpnapps.dll
2017-07-15 21:27:53 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-07-15 21:27:53 ----A---- C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2017-07-15 21:27:53 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2017-07-15 21:27:53 ----A---- C:\WINDOWS\system32\drivers\ksthunk.sys
2017-07-15 21:27:53 ----A---- C:\WINDOWS\system32\AppResolver.dll
2017-07-15 21:27:47 ----A---- C:\WINDOWS\system32\XpsDocumentTargetPrint.dll
2017-07-15 21:27:47 ----A---- C:\WINDOWS\system32\XboxNetApiSvc.dll
2017-07-15 21:27:47 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2017-07-15 21:27:47 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2017-07-15 21:27:47 ----A---- C:\WINDOWS\system32\msIso.dll
2017-07-15 21:27:47 ----A---- C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2017-07-15 21:27:47 ----A---- C:\WINDOWS\system32\enterprisecsps.dll
2017-07-15 21:27:47 ----A---- C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2017-07-15 21:27:47 ----A---- C:\WINDOWS\system32\efscore.dll
2017-07-15 21:27:47 ----A---- C:\WINDOWS\system32\DictationManager.dll
2017-07-15 21:27:47 ----A---- C:\WINDOWS\system32\CloudBackupSettings.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\SYSWOW64\imagehlp.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\xboxgipsynthetic.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\XblGameSaveExt.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\wpx.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\Windows.System.Launcher.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\Windows.Gaming.Preview.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\Windows.Devices.Midi.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\WindowManagement.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\wc_storage.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\vss_ps.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\VEStoreEventHandlers.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\utcutil.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\UpdateAgent.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\umpo.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\ucrtbase.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\tzres.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\TileDataRepository.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\sysmain.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\StorSvc.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\StoreAgent.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\snmptrap.exe
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\smartscreenps.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\smartscreen.exe
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\ShareHost.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\SettingSyncHost.exe
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\SecurityHealthSSO.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\securekernel.exe
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\SearchIndexer.exe
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\RstrtMgr.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\rpcss.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\ResetEngine.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\rdbui.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\quartz.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\PackageStateRoaming.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\oleaut32.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\odbcconf.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\NPSM.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\NotificationObjFactory.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\ngcsvc.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\MusNotifyIcon.exe
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\MusNotificationUx.exe
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\musdialoghandlers.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\mssprxy.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\mmgaserver.exe
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\MBR2GPT.EXE
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\MapsStore.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\MapGeocoder.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\kernel32.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\ISM.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\imagehlp.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\embeddedmodesvc.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\drivers\tm.sys
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\drivers\tdx.sys
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\drivers\rootmdm.sys
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\drivers\dam.sys
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\diagtrack.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\devicengccredprov.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\DeviceCredentialDeployment.exe
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\dbghelp.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\crypt32.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\comsvcs.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\combase.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\ci.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\cdpsvc.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\catsrvps.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\capauthz.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\browserbroker.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\browser_broker.exe
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\bcdedit.exe
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\bcdboot.exe
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\autochk.exe
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\asycfilt.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-07-15 21:27:46 ----A---- C:\WINDOWS\HelpPane.exe
2017-07-15 21:27:46 ----A---- C:\WINDOWS\bfsvc.exe
2017-07-15 21:27:43 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Midi.dll
2017-07-15 21:27:43 ----A---- C:\WINDOWS\SYSWOW64\PlayToManager.dll
2017-07-15 21:27:43 ----A---- C:\WINDOWS\SYSWOW64\NPSM.dll
2017-07-15 21:27:43 ----A---- C:\WINDOWS\system32\SpeechPal.dll
2017-07-15 21:27:43 ----A---- C:\WINDOWS\system32\offreg.dll
2017-07-15 21:27:43 ----A---- C:\WINDOWS\system32\MessagingDataModel2.dll
2017-07-15 21:27:43 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2017-07-15 21:27:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-07-15 21:27:42 ----A---- C:\WINDOWS\SYSWOW64\tzres.dll
2017-07-15 21:27:42 ----A---- C:\WINDOWS\SYSWOW64\TpmCoreProvisioning.dll
2017-07-15 21:27:42 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2017-07-15 21:27:42 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll
2017-07-15 21:27:42 ----A---- C:\WINDOWS\SYSWOW64\odbcconf.dll
2017-07-15 21:27:42 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll
2017-07-15 21:27:42 ----A---- C:\WINDOWS\SYSWOW64\mmgaserver.exe
2017-07-15 21:27:42 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2017-07-15 21:27:42 ----A---- C:\WINDOWS\SYSWOW64\devicengccredprov.dll
2017-07-15 21:27:42 ----A---- C:\WINDOWS\SYSWOW64\crypt32.dll
2017-07-15 21:27:42 ----A---- C:\WINDOWS\SYSWOW64\capauthz.dll
2017-07-15 21:27:42 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2017-07-15 21:27:42 ----A---- C:\WINDOWS\SYSWOW64\autochk.exe
2017-07-15 21:27:42 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll
2017-07-15 21:27:42 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll
2017-07-15 21:27:42 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2017-07-15 21:27:42 ----A---- C:\WINDOWS\SYSWOW64\AppResolver.dll
2017-07-15 21:27:42 ----A---- C:\WINDOWS\system32\drivers\xboxgip.sys
2017-07-15 21:27:42 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2017-07-15 21:27:42 ----A---- C:\WINDOWS\system32\drivers\USBXHCI.SYS
2017-07-15 21:27:42 ----A---- C:\WINDOWS\system32\drivers\tpm.sys
2017-07-15 21:27:42 ----A---- C:\WINDOWS\system32\drivers\storahci.sys
2017-07-15 21:27:42 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2017-07-15 21:27:42 ----A---- C:\WINDOWS\system32\drivers\netvsc.sys
2017-07-15 21:27:42 ----A---- C:\WINDOWS\system32\drivers\dumpsd.sys
2017-07-15 21:27:42 ----A---- C:\WINDOWS\system32\drivers\BasicRender.sys
2017-07-15 21:19:17 ----D---- C:\WINDOWS\system32\Microsoft
2017-07-15 21:19:17 ----D---- C:\WINDOWS\ServiceProfiles
2017-07-15 21:17:59 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2017-07-15 21:16:19 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2017-07-15 21:16:18 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2017-07-15 21:16:15 ----D---- C:\Program Files\Reference Assemblies
2017-07-15 21:16:15 ----D---- C:\Program Files\MSBuild
2017-07-15 21:16:15 ----D---- C:\Program Files (x86)\Reference Assemblies
2017-07-15 21:16:15 ----D---- C:\Program Files (x86)\MSBuild
2017-07-15 21:15:24 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2017-07-15 21:15:24 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2017-07-15 21:15:24 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-07-15 21:15:20 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2017-07-15 21:15:20 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-07-15 21:15:20 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-07-15 21:15:02 ----A---- C:\WINDOWS\system32\reseteng.dll
2017-07-15 21:10:45 ----ASH---- C:\hiberfil.sys
2017-07-15 21:03:52 ----D---- C:\ProgramData\USOShared
2017-07-15 20:58:22 ----SD---- C:\Users\Jiří Školotík\AppData\Roaming\Microsoft
2017-07-15 20:57:13 ----D---- C:\Program Files\Common Files\Atheros
2017-07-15 20:57:11 ----D---- C:\WINDOWS\SYSWOW64\sda
2017-07-15 20:57:02 ----A---- C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2017-07-15 20:57:02 ----A---- C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-07-15 20:56:59 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.DLL
2017-07-15 20:56:59 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2017-07-15 20:56:51 ----D---- C:\Program Files\Intel
2017-07-15 20:56:12 ----D---- C:\WINDOWS\system32\DAX2
2017-07-15 20:55:53 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2017-07-15 20:55:52 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2017-07-15 20:55:50 ----D---- C:\Program Files\Realtek
2017-07-15 20:55:39 ----HD---- C:\Program Files\Uninstall Information
2017-07-15 20:55:32 ----D---- C:\Program Files\Synaptics
2017-07-15 20:54:24 ----AS---- C:\WINDOWS\bootstat.dat
2017-07-15 20:53:47 ----D---- C:\WINDOWS\Prefetch
2017-07-15 20:52:47 ----D---- C:\WINDOWS\system32\SleepStudy
2017-07-15 20:52:41 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2017-07-15 19:33:05 ----A---- C:\WINDOWS\system32\Vestris.ResourceLib.dll
2017-07-15 19:33:04 ----AD---- C:\Program Files\KMSpico
2017-07-15 18:42:06 ----D---- C:\WINDOWS\AutoKMS
2017-07-14 09:06:32 ----DC---- C:\WINDOWS\Panther

======List of files/folders modified in the last 1 month======

2017-07-28 16:16:36 ----RD---- C:\Program Files
2017-07-28 16:15:03 ----D---- C:\Users\Jiří Školotík\AppData\Roaming\Seznam.cz
2017-07-28 16:14:44 ----D---- C:\WINDOWS\System32
2017-07-28 16:14:31 ----D---- C:\WINDOWS\Temp
2017-07-28 16:13:47 ----D---- C:\WINDOWS\system32\sru
2017-07-28 16:09:10 ----D---- C:\WINDOWS\system32\drivers
2017-07-28 16:08:20 ----D---- C:\Windows
2017-07-28 16:02:13 ----D---- C:\WINDOWS\system32\drivers\UMDF
2017-07-28 10:42:20 ----D---- C:\WINDOWS\AppReadiness
2017-07-28 10:42:19 ----HD---- C:\Program Files\WindowsApps
2017-07-28 10:19:49 ----AD---- C:\GALAXY
2017-07-28 08:29:16 ----SHD---- C:\WINDOWS\Installer
2017-07-28 08:29:16 ----HD---- C:\Config.Msi
2017-07-28 08:26:58 ----AD---- C:\Program Files (x86)\Microsoft Office
2017-07-27 22:58:00 ----RD---- C:\WINDOWS\Microsoft.NET
2017-07-27 22:47:54 ----AD---- C:\ProgramData\regid.1991-06.com.microsoft
2017-07-27 22:47:11 ----D---- C:\Program Files (x86)\Common Files
2017-07-27 13:45:57 ----SHD---- C:\System Volume Information
2017-07-27 13:44:49 ----D---- C:\WINDOWS\Logs
2017-07-27 11:34:31 ----D---- C:\WINDOWS\system32\config
2017-07-26 12:33:22 ----D---- C:\ProgramData\firebird
2017-07-23 18:59:59 ----D---- C:\WINDOWS\INF
2017-07-23 17:43:23 ----D---- C:\WINDOWS\SoftwareDistribution
2017-07-23 12:07:08 ----HD---- C:\ProgramData
2017-07-23 12:05:32 ----D---- C:\WINDOWS\SYSWOW64\drivers
2017-07-23 12:04:22 ----D---- C:\WINDOWS\SysWOW64
2017-07-23 12:04:10 ----D---- C:\WINDOWS\system32\Tasks
2017-07-23 12:03:42 ----RD---- C:\Program Files (x86)
2017-07-23 07:51:01 ----D---- C:\Programy
2017-07-23 01:26:46 ----D---- C:\Office
2017-07-23 00:41:33 ----D---- C:\WINDOWS\LiveKernelReports
2017-07-23 00:41:33 ----D---- C:\WINDOWS\debug
2017-07-23 00:26:05 ----D---- C:\WINDOWS\system32\catroot2
2017-07-20 07:28:07 ----D---- C:\WINDOWS\system32\DriverStore
2017-07-20 07:27:37 ----D---- C:\WINDOWS\WinSxS
2017-07-20 07:17:53 ----D---- C:\WINDOWS\system32\LogFiles
2017-07-20 07:14:28 ----RD---- C:\WINDOWS\assembly
2017-07-20 07:14:26 ----D---- C:\WINDOWS\rescache
2017-07-19 16:37:00 ----D---- C:\WINDOWS\system32\WDI
2017-07-18 09:04:17 ----D---- C:\WINDOWS\appcompat
2017-07-16 19:14:05 ----D---- C:\WINDOWS\CbsTemp
2017-07-16 19:12:34 ----D---- C:\WINDOWS\system32\restore
2017-07-15 21:45:01 ----D---- C:\WINDOWS\Setup
2017-07-15 21:43:37 ----SD---- C:\WINDOWS\SYSWOW64\F12
2017-07-15 21:43:37 ----D---- C:\WINDOWS\SYSWOW64\migration
2017-07-15 21:43:37 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2017-07-15 21:43:36 ----SD---- C:\WINDOWS\system32\F12
2017-07-15 21:43:36 ----D---- C:\WINDOWS\system32\oobe
2017-07-15 21:43:36 ----D---- C:\WINDOWS\system32\migwiz
2017-07-15 21:43:36 ----D---- C:\WINDOWS\system32\migration
2017-07-15 21:43:36 ----D---- C:\WINDOWS\system32\cs-CZ
2017-07-15 21:43:36 ----D---- C:\WINDOWS\system32\Boot
2017-07-15 21:43:36 ----D---- C:\WINDOWS\system32\appraiser
2017-07-15 21:43:35 ----RD---- C:\Program Files\Windows Defender
2017-07-15 21:43:35 ----D---- C:\WINDOWS\ShellExperiences
2017-07-15 21:43:35 ----D---- C:\WINDOWS\AppPatch
2017-07-15 21:43:35 ----D---- C:\Program Files\Windows Photo Viewer
2017-07-15 21:43:35 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2017-07-15 21:43:35 ----D---- C:\Program Files (x86)\Windows Defender
2017-07-15 21:30:05 ----D---- C:\WINDOWS\SYSWOW64\Dism
2017-07-15 21:30:05 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2017-07-15 21:30:04 ----D---- C:\WINDOWS\system32\Dism
2017-07-15 21:30:04 ----D---- C:\WINDOWS\Provisioning
2017-07-15 21:30:04 ----D---- C:\Program Files\Internet Explorer
2017-07-15 21:30:04 ----D---- C:\Program Files (x86)\Internet Explorer
2017-07-15 21:29:04 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2017-07-15 21:27:19 ----D---- C:\Program Files\Windows NT
2017-07-15 21:26:25 ----D---- C:\WINDOWS\system32\WinBioDatabase
2017-07-15 21:23:31 ----D---- C:\WINDOWS\Registration
2017-07-15 21:23:18 ----D---- C:\WINDOWS\system32\Tasks_Migrated
2017-07-15 21:18:28 ----D---- C:\WINDOWS\HoloShell
2017-07-15 21:17:45 ----D---- C:\WINDOWS\Tasks
2017-07-15 21:17:31 ----SD---- C:\ProgramData\Microsoft
2017-07-15 21:16:59 ----RSD---- C:\WINDOWS\Fonts
2017-07-15 21:16:43 ----D---- C:\WINDOWS\system32\wbem
2017-07-15 21:16:42 ----D---- C:\WINDOWS\system32\drivers\etc
2017-07-15 21:16:18 ----D---- C:\WINDOWS\SYSWOW64\MUI
2017-07-15 21:16:18 ----D---- C:\WINDOWS\system32\MUI
2017-07-15 21:10:03 ----D---- C:\WINDOWS\system32\UNP
2017-07-15 21:03:58 ----D---- C:\WINDOWS\twain_32
2017-07-15 21:03:54 ----D---- C:\WINDOWS\SYSWOW64\drivers\UMDF
2017-07-15 21:03:52 ----D---- C:\ProgramData\USOPrivate
2017-07-15 21:03:50 ----D---- C:\WINDOWS\system32\zh-HK
2017-07-15 21:03:46 ----D---- C:\WINDOWS\system32\spool
2017-07-15 21:03:43 ----D---- C:\WINDOWS\system32\NDF
2017-07-15 21:03:07 ----D---- C:\WINDOWS\system32\CodeIntegrity
2017-07-15 21:02:29 ----HD---- C:\WINDOWS\system32\CanonIJ Uninstaller Information
2017-07-15 21:02:02 ----D---- C:\Program Files (x86)\Microsoft.NET
2017-07-15 21:01:58 ----D---- C:\Program Files\Common Files\microsoft shared
2017-07-15 21:01:06 ----D---- C:\WINDOWS\system32\Recovery
2017-07-15 20:58:23 ----RD---- C:\Users
2017-07-15 20:57:16 ----D---- C:\WINDOWS\system32\Sysprep
2017-07-15 20:57:13 ----D---- C:\Program Files\Common Files
2017-07-15 20:06:14 ----D---- C:\WINDOWS\system32\sr-Latn-CS
2017-07-12 19:53:45 ----D---- C:\WINDOWS\system32\MRT
2017-07-12 19:50:09 ----AC---- C:\WINDOWS\system32\MRT.exe
2017-07-07 10:17:24 ----AD---- C:\Program Files\UNP
2017-07-04 12:37:16 ----D---- C:\Temp
2017-07-01 11:38:14 ----D---- C:\Laura
2017-06-30 16:47:29 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2017-03-18 49568]
R1 ESProtectionDriver;Malwarebytes Anti-Exploit; \??\C:\WINDOWS\system32\drivers\mbae64.sys [2017-06-27 77376]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2017-03-18 54272]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2017-03-18 8192]
R2 clreg;@%SystemRoot%\system32\drivers\registry.sys,-100; C:\WINDOWS\System32\drivers\registry.sys [2017-03-18 14336]
R2 MBAMChameleon;MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [2017-07-23 188352]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2017-03-18 50688]
R2 storqosflt;@%SystemRoot%\System32\drivers\storqosflt.sys,-101; C:\WINDOWS\system32\drivers\storqosflt.sys [2017-03-18 79872]
R3 ACPIVPC;@oem15.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2016-10-18 45048]
R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2016-08-12 605592]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\system32\DRIVERS\BTHUSB.sys [2017-03-18 85504]
R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2017-03-18 53664]
R3 igfxLP;igfxLP; C:\WINDOWS\system32\DRIVERS\igdkmd64lp.sys [2016-07-21 7392256]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2016-02-04 4799232]
R3 IntcDAud;@oem8.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2016-05-12 481768]
R3 MBAMFarflt;MBAMFarflt; \??\C:\WINDOWS\system32\drivers\farflt.sys [2017-07-28 101784]
R3 MBAMProtection;MBAMProtection; \??\C:\WINDOWS\system32\drivers\mbam.sys [2017-07-28 45472]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [2017-07-28 253856]
R3 MBAMWebProtection;MBAMWebProtection; \??\C:\WINDOWS\system32\drivers\mwac.sys [2017-07-28 93600]
R3 Qcamain10x64;@oem10.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN 11AC device driver; C:\WINDOWS\system32\DRIVERS\Qcamain10x64.sys [2017-04-24 2412976]
R3 rt640x64;@rt640x64.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys [2017-03-18 604160]
R3 RTSUER;@oem21.inf,%RtsUER%;Realtek USB Card Reader - UER; C:\WINDOWS\system32\Drivers\RtsUer.sys [2016-08-17 426504]
R3 rtsuvc;@oem7.inf,%rtsuvc.DeviceDesc%;EasyCamera; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [2016-08-17 3127576]
R3 SynTP;@oem13.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2017-03-23 912984]
R3 TXEIx64;@oem0.inf,%TEE_SvcDesc%;Intel(R) Trusted Execution Engine Interface ; C:\WINDOWS\System32\drivers\TXEIx64.sys [2015-10-14 146200]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2017-03-18 123808]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2017-03-18 103328]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2017-03-18 64416]
S0 Partizan;Partizan; C:\WINDOWS\system32\drivers\Partizan.sys []
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2017-03-18 58784]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2017-03-18 61848]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2017-03-18 91040]
S0 storufs;@storufs.inf,%UfsServiceDesc%;Microsoft Universal Flash Storage (UFS) Driver; C:\WINDOWS\System32\drivers\storufs.sys [2017-03-18 36760]
S2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2017-03-18 12288]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2017-03-18 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2017-03-18 17920]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\system32\DRIVERS\BTHport.sys [2017-07-15 982016]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2017-03-18 39424]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2017-03-18 122880]
S3 dg_ssudbus;@oem17.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2017-05-18 131984]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2017-03-18 21504]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2017-03-18 51104]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2017-03-18 74648]
S3 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2017-03-18 347032]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2017-03-18 2104224]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2017-03-18 33280]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2017-03-18 81408]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2017-03-18 70656]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2017-03-18 85504]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2017-03-18 165376]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2017-03-18 168448]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2017-03-18 526240]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2017-03-18 36864]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2017-03-18 120320]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2017-03-18 405408]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2017-03-18 51104]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2017-03-18 842656]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2017-03-18 108960]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2017-03-18 122368]
S3 nvdimmn;@nvdimmn.inf,%nvdimmn.SvcDesc%;Microsoft NVDIMM-N device driver; C:\WINDOWS\System32\drivers\nvdimmn.sys [2017-03-18 80896]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2017-03-18 101376]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2017-03-18 936864]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2017-03-18 31128]
S3 SpatialGraphFilter;Holographic Spatial Graph Filter; C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys [2017-03-20 40352]
S3 ssudmdm;@oem16.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2017-05-18 166288]
S3 UcmCx0101;USB Connector Manager KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmCx.sys [2017-03-18 104448]
S3 UcmTcpciCx0101;UCM-TCPCI KMDF Class Extension; C:\WINDOWS\System32\Drivers\UcmTcpciCx.sys [2017-03-18 179200]
S3 UcmUcsi;@UcmUcsi.inf,%UcmUcsi.ServiceName%;USB Connector Manager UCSI Client; C:\WINDOWS\System32\drivers\UcmUcsi.sys [2017-03-18 51712]
S3 UdeCx;USB Device Emulation Support Library; C:\WINDOWS\system32\drivers\udecx.sys [2017-03-18 45568]
S3 Ufx01000;USB Function Class Extension; C:\WINDOWS\system32\drivers\ufx01000.sys [2017-03-18 263584]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-04-25 83056]
R2 AtherosSvc;AtherosSvc; C:\WINDOWS\system32\AdminService.exe [2016-08-12 347064]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\WINDOWS\syswow64\svchost.exe [2017-03-18 40904]
R2 igfxCUIService2.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2016-07-21 373752]
R2 MBAMService;Malwarebytes Service; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [2017-05-09 4470736]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2017-03-18 47664]
R2 OneSyncSvc_3934b;OneSyncSvc_3934b; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2017-03-18 47664]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2017-07-15 336320]
R2 SynTPEnhService;SynTPEnh Caller Service; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [2017-03-23 267352]
R2 tiledatamodelsvc;@%SystemRoot%\system32\tileobjserver.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2017-02-10 43696]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\syswow64\svchost.exe [2017-03-18 40904]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
R3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R3 StateRepository;@%SystemRoot%\system32\windows.staterepository.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R3 TimeBrokerSvc;@%windir%\system32\TimeBrokerServer.dll,-1001; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
R3 TokenBroker;@%systemroot%\system32\tokenbroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S2 CDPUserSvc_3934b;CDPUserSvc_3934b; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S2 ClickToRunSvc;Služba Microsoft Office Klikni a spusť; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2017-07-18 4412104]
S2 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S2 gupdate;Služba Aktualizace Google (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-26 153752]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2016-07-21 301568]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 DevicesFlowUserSvc_3934b;DevicesFlowUserSvc_3934b; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2017-03-18 86528]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 gupdatem;Služba Aktualizace Google (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-26 153752]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 MessagingService_3934b;MessagingService_3934b; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2017-07-18 213704]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 PimIndexMaintenanceSvc_3934b;PimIndexMaintenanceSvc_3934b; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2017-03-18 1284608]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]
S3 spectrum;@%systemroot%\system32\spectrum.exe,-101; C:\WINDOWS\system32\spectrum.exe [2017-03-18 891904]
S3 TieringEngineService;@%SystemRoot%\system32\TieringEngineService.exe,-702; C:\WINDOWS\system32\TieringEngineService.exe [2017-03-18 302592]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\WINDOWS\System32\svchost.exe [2017-03-18 47664]
S4 tzautoupdate;@%SystemRoot%\system32\tzautoupdate.dll,-200; C:\WINDOWS\system32\svchost.exe [2017-03-18 47664]

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.

Dobrý večer, přikládám log.

# AdwCleaner 7.0.0.0 - Logfile created on Fri Jul 28 18:15:07 2017
# Updated on 2017/17/07 by Malwarebytes
# Running on Windows 10 Home (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

No malicious folders deleted.

***** [ Files ] *****

No malicious files deleted.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

Cleaned: C:/Users/Jiří Školotík/Desktop/AllinNG OnLine.lnk[https://launchpage.org/?uid=oTlMGKjcgx0 ... BmUNDy8%3D]
Cleaned: C:/Users/Jiří Školotík/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch/Google Chrome.lnk[https://launchpage.org/?uid=oTlMGKjcgx0 ... BmUNDy8%3D]


***** [ Tasks ] *****

No malicious tasks deleted.

***** [ Registry ] *****

No malicious registry entries deleted.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries deleted.

*************************

::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0



*************************

C:/AdwCleaner/AdwCleaner[C0].txt - [1817 B] - [2017/7/28 14:7:24]
C:/AdwCleaner/AdwCleaner[S0].txt - [1685 B] - [2017/7/28 14:6:54]
C:/AdwCleaner/AdwCleaner[S1].txt - [1456 B] - [2017/7/28 18:13:55]


########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt ##########

Teď dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 .

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-07-2017
Ran by Jiří Školotík (28-07-2017 21:15:36)
Running from C:\Users\Jiří Školotík\Desktop
Windows 10 Home Version 1703 (X64) (2017-07-15 19:27:59)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2294946949-1364430705-1025020277-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2294946949-1364430705-1025020277-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-2294946949-1364430705-1025020277-1002 - Limited - Disabled) => C:\Users\defaultuser0
Guest (S-1-5-21-2294946949-1364430705-1025020277-501 - Limited - Disabled)
Jiří Školotík (S-1-5-21-2294946949-1364430705-1025020277-1003 - Administrator - Enabled) => C:\Users\Jiří Školotík

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Acrobat Reader DC - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AC0F074E4100}) (Version: 17.009.20058 - Adobe Systems Incorporated)
AEGON Expert 3.0 (HKU\S-1-5-21-2294946949-1364430705-1025020277-1003\...\6d331183306bd716) (Version: 3.0.6326.29232 - AEGON Expert)
AXA Studio (HKU\S-1-5-21-2294946949-1364430705-1025020277-1003\...\1ec9ff54381d781f) (Version: 1.4.95.19133 - AXA Studio)
BufferChm (HKLM-x32\...\{FA0FF682-CC70-4C57-93CD-E276F3E7537E}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
Canon iP100 series (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP100_series) (Version: - )
Canon Setup Utility 2.4 (HKLM-x32\...\Canon Setup Utility 2.4) (Version: - )
Canon Utilities Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: - )
Canon Utilities My Printer (HKLM-x32\...\CanonMyPrinter) (Version: - )
Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 5.32 - Piriform)
Copy (HKLM-x32\...\{9BE466FF-70B7-4DA8-807C-DB4C3610FDAA}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
Destinations (HKLM-x32\...\{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (HKLM-x32\...\{1458BB78-1DC5-4BC0-B9A3-2B644F5A8105}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
DJ_AIO_06_F2400_SW_Min (HKLM-x32\...\{D1E8CEBA-EC2B-4B37-97B8-C87AF6302601}) (Version: 140.0.851.000 - Hewlett-Packard) Hidden
F2400 (HKLM-x32\...\{60F0F139-0C04-4D9C-9C6C-DEF35766BAB3}) (Version: 140.0.851.000 - Hewlett-Packard) Hidden
GALAXY (HKLM-x32\...\{AD9FDC6F-9B3E-4174-A292-35E5FA6DC9A2}) (Version: 2.17.0407 - SMS)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 59.0.3071.115 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
GPBaseService2 (HKLM-x32\...\{BB3447F6-9553-4AA9-960E-0DB5310C5779}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Deskjet F2400 All-in-One Driver Software 14.0 Rel. 6 (HKLM\...\{BCDD692B-172D-440A-9A1B-501C71D72CC8}) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPPhotoGadget (HKLM-x32\...\{CAE4213F-F797-439D-BD9E-79B71D115BE3}) (Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (HKLM-x32\...\{150B6201-E9E6-4DFB-960E-CCBD53FBDDED}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
HPSSupply (HKLM-x32\...\{AC35A885-0F8F-4857-B7DA-6E8DFB43E6B3}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden
Malwarebytes verze 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
MarketResearch (HKLM-x32\...\{D360FA88-17C8-4F14-B67F-13AAF9607B12}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Microsoft Office Professional Plus 2016 - cs-cz (HKLM\...\ProplusRetail - cs-cz) (Version: 16.0.8229.2103 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2294946949-1364430705-1025020277-1003\...\OneDriveSetup.exe) (Version: 17.3.6816.0313 - Microsoft Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8229.2103 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8229.2103 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8229.2103 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0405-0000-0000000FF1CE}) (Version: 16.0.8201.2075 - Microsoft Corporation) Hidden
PČS SmartClient (HKU\S-1-5-21-2294946949-1364430705-1025020277-1003\...\64e8659f987332b3) (Version: 2.2.9.8 - Pojišťovna České spořitelny)
QuickTransfer (HKLM-x32\...\{E517094C-06B6-419F-8FFD-EF4F57972130}) (Version: 140.0.98.000 - Hewlett-Packard) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7738 - Realtek Semiconductor Corp.)
Registrace uživatele zařízení Canon iP100 series (HKLM-x32\...\Registrace uživatele zařízení Canon iP100 series) (Version: - )
Scan (HKLM-x32\...\{06A1D88C-E102-4527-AF70-29FFD7AF215A}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden
Seznam Software (HKU\S-1-5-21-2294946949-1364430705-1025020277-1003\...\SeznamInstall) (Version: 2.1.15 - Seznam.cz)
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
SolutionCenter (HKLM-x32\...\{BC5DD87B-0143-4D14-AAE6-97109614DC6B}) (Version: 140.0.299.000 - Hewlett-Packard) Hidden
Status (HKLM-x32\...\{5B025634-7D5B-4B8D-BE2A-7943C1CF2D5D}) (Version: 140.0.342.000 - Hewlett-Packard) Hidden
Toolbox (HKLM-x32\...\{292F0F52-B62D-4E71-921B-89A682402201}) (Version: 140.0.596.000 - Hewlett-Packard) Hidden
TrayApp (HKLM-x32\...\{CD31E63D-47FD-491C-8117-CF201D0AFAB5}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden
UnHackMe 9.0 (HKLM-x32\...\UnHackMe_is1) (Version: - Greatis Software, LLC.)
WebReg (HKLM-x32\...\{8EE94FD8-5F52-4463-A340-185D16328158}) (Version: 140.0.297.017 - Hewlett-Packard) Hidden
Windows 10 Update and Privacy Settings (HKLM\...\{4DFCD818-036A-4229-A67D-CF17DC461D92}) (Version: 1.0.14.0 - Microsoft Corporation)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Programy\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Programy\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2016-07-21] (Intel Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Programy\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Programy\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0DFCC7C0-8A25-46AD-A87E-91E2AD52083A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-07-27] (Microsoft Corporation)
Task: {12FEC545-F0AB-4C60-9CCD-ECA24CF29CB7} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-07-18] (Microsoft Corporation)
Task: {1C7C9897-DDB4-4704-8CB6-8A836A01BFF1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-25] (Adobe Systems Incorporated)
Task: {4E50E4EB-1663-4939-B4F9-2D3242B75826} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-26] (Google Inc.)
Task: {5D826393-247C-4236-A28A-68FEC9BC8C13} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-07-06] ()
Task: {6460A896-A296-496E-AA5F-A51F4DCBBD99} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-07-18] (Microsoft Corporation)
Task: {652E0759-2556-4366-83AA-3C42DF23087E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-06-30] (Piriform Ltd)
Task: {84708918-31DA-427C-9BFA-6A7AA23E539A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-26] (Google Inc.)
Task: {AAC470A2-1F5D-449F-A969-A8F41B92D0E0} - System32\Tasks\UnHackMe Task Scheduler => C:\Program Files (x86)\UnHackMe\hackmon.exe [2017-06-22] (Greatis Software)
Task: {CB8BB5F8-F3DB-4646-BFDF-A6E40059BF10} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-07-27] (Microsoft Corporation)
Task: {CDA93C0F-DCB7-438E-95C3-52922ECC534B} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-07-06] ()

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


ShortcutWithArgument: C:\Users\Jiří Školotík\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxps://launchpage.org/?uid=oTlMGKjcgx0cXesOWVYZ4Ywc%2FtqpvESCkIsHEWIwSai2ZPsbAmEsjL9Ulp1uBmUNDy8%3D

==================== Loaded Modules (Whitelisted) ==============

2017-06-09 15:17 - 2017-02-08 13:38 - 00079872 _____ () C:\Users\Jiří Školotík\AppData\Roaming\Seznam.cz\bin\26342libfoxloader-x64.dll
2017-03-18 22:58 - 2017-03-18 22:58 - 00138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-03-18 22:59 - 2017-03-20 06:45 - 01731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-07-21 10:36 - 2016-07-21 10:36 - 00401920 _____ () C:\WINDOWS\system32\igfxTray.exe
2017-07-16 19:33 - 2017-07-16 19:33 - 00074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-07-16 19:33 - 2017-07-16 19:33 - 00203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-07-16 19:33 - 2017-07-16 19:33 - 43573248 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-07-16 19:33 - 2017-07-16 19:33 - 02435584 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\skypert.dll
2017-06-09 15:17 - 2017-06-14 16:17 - 00466640 _____ () C:\Users\Jiří Školotík\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
2017-06-09 15:17 - 2017-02-08 13:39 - 00080576 _____ () C:\Users\Jiří Školotík\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
2017-06-06 08:30 - 2017-06-06 08:30 - 03139496 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11706.1001.26.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-07-25 21:14 - 2017-07-25 21:14 - 10631168 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11706.1001.26.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2017-07-25 21:14 - 2017-07-25 21:14 - 02640896 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11706.1001.26.0_x64__8wekyb3d8bbwe\MS.Entertainment.Common.Mobile.dll
2017-07-12 12:32 - 2017-07-12 19:52 - 00020480 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2017-07-12 12:32 - 2017-07-12 19:52 - 27590144 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2017-07-12 12:32 - 2017-07-12 19:52 - 00428032 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.AGM.Native.Windows.dll
2017-07-12 12:32 - 2017-07-12 19:52 - 20649984 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll
2017-07-12 12:32 - 2017-07-12 19:52 - 02305536 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe\MediaEngine.dll
2017-07-12 12:32 - 2017-07-12 19:52 - 02856448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll
2017-06-06 08:30 - 2017-06-06 08:30 - 03139496 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-06-06 08:30 - 2017-06-06 08:30 - 00046080 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.Edit.Services.dll
2017-01-09 18:33 - 2017-01-09 18:34 - 00680448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe\Microsoft.DesignCore.dll
2017-07-12 12:32 - 2017-07-12 19:52 - 01127936 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll
2017-05-05 15:50 - 2017-05-05 15:50 - 01062400 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe\Microsoft.Sharing.dll
2017-06-09 15:17 - 2015-05-26 13:37 - 00078504 _____ () C:\Users\Jiří Školotík\AppData\Roaming\Seznam.cz\bin\26339libfoxloader.dll
2017-06-09 15:17 - 2015-05-26 13:38 - 00862888 _____ () C:\Users\Jiří Školotík\AppData\Roaming\Seznam.cz\bin\lightspeed.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-2294946949-1364430705-1025020277-1003\...\allianz.cz -> allianz.cz

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2016-07-16 13:47 - 2016-07-16 13:45 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2294946949-1364430705-1025020277-1003\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\theme1\img1.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{901CD1A1-B39F-4EA5-8E14-EE066F87EDCD}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [UDP Query User{A7C1ACF9-E562-49AC-991B-0314A08A9AFC}C:\ingapps\nn_ekalkulacka_sms\jre1.8.0_111\bin\javaw.exe] => (Allow) C:\ingapps\nn_ekalkulacka_sms\jre1.8.0_111\bin\javaw.exe
FirewallRules: [TCP Query User{C67BAFA3-1B87-42C5-91AB-57B58655E78A}C:\ingapps\nn_ekalkulacka_sms\jre1.8.0_111\bin\javaw.exe] => (Allow) C:\ingapps\nn_ekalkulacka_sms\jre1.8.0_111\bin\javaw.exe
FirewallRules: [{16AF0376-A66D-44D3-B4A7-DC8678713930}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{3ED159F7-FBCB-43B9-8284-B142353F1B65}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [{1E187570-EEBC-429E-A424-4418C8B95A8E}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{484E19D7-1190-479F-89FC-39F1EE91007F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{A2FCC32B-FB14-4F47-98F3-F24F4F6D3C94}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{118AA512-D3AB-4C76-B0A6-D4F8B2DCE57F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{1CD0FFF3-D385-4253-BFD3-873C72DA2012}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{81EB7BE5-57A4-462F-AB7A-3A1061D2B113}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{8891B7DC-888F-4455-9D43-5B829AA415BD}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{C05B5B03-11AD-4C8A-AC82-F012CE7679AB}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe
FirewallRules: [{87E36BDD-E759-4BAA-B5CB-673788488FEB}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{F01A1016-2A29-4F5A-B897-D95E08BEDD00}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{ECE480C7-38C2-4404-8A54-B1C73E9FDC64}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{021CECB4-00BD-4D74-ADE8-F9BF1E995829}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{911B85F9-5379-46EA-ACA7-4E4EB700C2B2}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{FAA777F5-FFE7-4A9B-AC03-35FB2338DCD9}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{C38BD20F-B628-42D2-8237-52933DBF220E}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{C37037AF-B9FA-4CAD-9211-D09467CC7BE0}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe

==================== Restore Points =========================

16-07-2017 19:12:34 Windows Update
27-07-2017 13:44:50 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (07/28/2017 03:55:07 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: DESKTOP-35FPP6O)
Description: Balíček Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe+MicrosoftEdge se ukončil, protože jeho pozastavování trvalo moc dlouho.

Error: (07/28/2017 03:55:02 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-35FPP6O)
Description: Aplikaci Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge se nepovedlo aktivovat, protože došlo k chybě: -2144927142. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (07/28/2017 08:22:08 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Generování kontextu aktivace pro C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest se nezdařilo. Chyba v souboru manifestu nebo zásady C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL na řádku 1.
Identita komponenty nalezená v manifestu nesouhlasí s identitou požadované komponenty.
Odkaz je UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
Definice je UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.

Error: (07/27/2017 04:20:18 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-35FPP6O)
Description: Aplikaci Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (07/27/2017 11:00:16 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-35FPP6O)
Description: Aplikaci Microsoft.ZuneVideo_8wekyb3d8bbwe!Microsoft.ZuneVideo se nepovedlo aktivovat, protože došlo k chybě: -2144927142. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (07/26/2017 10:06:03 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-35FPP6O)
Description: Aplikaci Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (07/25/2017 09:23:11 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-35FPP6O)
Description: Aplikaci microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (07/25/2017 09:23:10 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-35FPP6O)
Description: Aplikaci Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (07/24/2017 10:15:01 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-35FPP6O)
Description: Aplikaci Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App se nepovedlo aktivovat, protože došlo k chybě: -2144927141. Další informace najdete v protokolu Microsoft-Windows-TWinUI/Operational.

Error: (07/23/2017 12:05:28 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Generování kontextu aktivace pro C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest se nezdařilo. Chyba v souboru manifestu nebo zásady C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL na řádku 1.
Identita komponenty nalezená v manifestu nesouhlasí s identitou požadované komponenty.
Odkaz je UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
Definice je UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Podrobnější diagnostické údaje získáte pomocí programu sxstrace.exe.


System errors:
=============
Error: (07/28/2017 08:16:26 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba CDPUserSvc_368c6 byla ukončena s následující chybou:
Nespecifikovaná chyba

Error: (07/28/2017 08:16:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba CldFlt neuspěla při spuštění v důsledku následující chyby:
Požadavek není podporován.

Error: (07/28/2017 08:15:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Search byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (07/28/2017 08:15:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba Microsoft Office Klikni a spusť byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.

Error: (07/28/2017 08:15:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Malwarebytes Service byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.

Error: (07/28/2017 08:15:06 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Adobe Acrobat Update Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (07/28/2017 08:15:06 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba SynTPEnh Caller Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (07/28/2017 08:15:04 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Presentation Foundation Font Cache 3.0.0.0 byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 0 milisekund: Restartovat službu.

Error: (07/28/2017 08:15:04 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Intel(R) HD Graphics Control Panel Service byla neočekávaně ukončena. Tento stav nastal již 1krát.

Error: (07/28/2017 08:15:04 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba AtherosSvc byla neočekávaně ukončena. Tento stav nastal již 1krát.


CodeIntegrity:
===================================
Date: 2017-07-28 20:18:13.062
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

Date: 2017-07-28 20:18:07.476
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

Date: 2017-07-28 20:18:06.906
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

Date: 2017-07-28 20:09:40.397
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

Date: 2017-07-28 16:13:04.197
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

Date: 2017-07-28 16:13:00.834
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

Date: 2017-07-28 16:13:00.335
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

Date: 2017-07-28 14:08:15.855
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

Date: 2017-07-28 14:08:14.905
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

Date: 2017-07-28 14:07:48.446
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.


==================== Memory info ===========================

Processor: Intel(R) Celeron(R) CPU N3060 @ 1.60GHz
Percentage of memory in use: 47%
Total physical RAM: 4009.14 MB
Available physical RAM: 2124.27 MB
Total Virtual: 4713.14 MB
Available Virtual: 2677.21 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:464.71 GB) (Free:424.98 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt ============================

Otevřely se mi dva textové soubory, tak posílám i ten druhý.Ale nadvakrát , má to hodně znaků.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28-07-2017
Ran by Jiří Školotík (administrator) on DESKTOP-35FPP6O (28-07-2017 21:13:39)
Running from C:\Users\Jiří Školotík\Desktop
Loaded Profiles: Jiří Školotík (Available Profiles: defaultuser0 & Jiří Školotík)
Platform: Windows 10 Home Version 1703 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Windows (R) Win 7 DDK provider) C:\Windows\System32\AdminService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Pražská softwarová s.r.o.) C:\CPP\CppKalkulacky\CppCalcServer.exe
() C:\Users\Jiří Školotík\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
() C:\Users\Jiří Školotík\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11706.1001.26.0_x64__8wekyb3d8bbwe\WinStore.App.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16418560 2016-02-04] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1419008 2016-02-04] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1419008 2016-02-04] (Realtek Semiconductor)
HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [652624 2007-10-26] (CANON INC.)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2114376 2009-07-07] (CANON INC.)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-2294946949-1364430705-1025020277-1003\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Jiří Školotík\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-2294946949-1364430705-1025020277-1003\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Jiří Školotík\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [103080 2015-05-26] ()
HKU\S-1-5-21-2294946949-1364430705-1025020277-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9818328 2017-06-30] (Piriform Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2017-04-09]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Jiří Školotík\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CPP - CalcServer.lnk [2017-06-13]
ShortcutTarget: CPP - CalcServer.lnk -> C:\CPP\CppKalkulacky\CppCalcServer.exe (Pražská softwarová s.r.o.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

AutoConfigURL: [S-1-5-21-2294946949-1364430705-1025020277-1003] => hxxp://accessfastweb.com/wpad.dat?d6294083baafe1e307f56e97401f1e5534035807
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{2d1791af-9306-4857-a854-bf942b776c2d}: [DhcpNameServer] 192.168.1.1
ManualProxies: 0hxxp://accessfastweb.com/wpad.dat?d6294083baafe1e307f56e97401f1e5534035807

Internet Explorer:
==================
HKU\S-1-5-21-2294946949-1364430705-1025020277-1003\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
SearchScopes: HKU\S-1-5-21-2294946949-1364430705-1025020277-1003 -> {26C2D99C-08EE-48CE-889C-03AFD03F6A3F} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_12454
SearchScopes: HKU\S-1-5-21-2294946949-1364430705-1025020277-1003 -> {30ED034C-C89C-4CD5-B5AB-42814D81B246} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-2294946949-1364430705-1025020277-1003 -> {355136E8-15B5-4AD3-A617-ACF8AF782311} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-2294946949-1364430705-1025020277-1003 -> {3A2E84C1-4629-447D-9ED1-1020E0D9154D} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-2294946949-1364430705-1025020277-1003 -> {6D5275DE-60B1-440A-AAFD-F418B47942A2} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-2294946949-1364430705-1025020277-1003 -> {7ED13C29-AE3E-4468-A832-185C3E0112C7} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_12454
SearchScopes: HKU\S-1-5-21-2294946949-1364430705-1025020277-1003 -> {8CFF5988-FE15-4336-9336-EF3BED07CA40} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_12454
SearchScopes: HKU\S-1-5-21-2294946949-1364430705-1025020277-1003 -> {9B34707D-475D-461B-B077-D36224AD4F13} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-2294946949-1364430705-1025020277-1003 -> {AF599CBB-7C72-4262-A57E-D6560417C479} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_12454
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-07-06] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-07-19] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-06-17] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-07-19] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-06] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-06] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-06] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-06] (Microsoft Corporation)

FireFox:
========
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2009-09-07] (CANON INC.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-05-27] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-05-27] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)

Chrome:
=======
CHR HomePage: Default -> hxxps://www.seznam.cz/
CHR NewTab: Default -> Active:"chrome-extension://olfeabkoenfaoljndfecamgilllcpiak/core/chrome/content/speedDial/speedDial.html"
CHR Profile: C:\Users\Jiří Školotík\AppData\Local\Google\Chrome\User Data\Default [2017-07-28]
CHR Extension: (Prezentace Google) - C:\Users\Jiří Školotík\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-02-26]
CHR Extension: (Dokumenty Google) - C:\Users\Jiří Školotík\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-02-26]
CHR Extension: (Disk Google) - C:\Users\Jiří Školotík\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-02-26]
CHR Extension: (Seznam Lištička - Email) - C:\Users\Jiří Školotík\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2017-06-15]
CHR Extension: (Seznam Lištička - Slovník) - C:\Users\Jiří Školotík\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd [2017-06-15]
CHR Extension: (YouTube) - C:\Users\Jiří Školotík\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-02-26]
CHR Extension: (Tabulky Google) - C:\Users\Jiří Školotík\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-02-26]
CHR Extension: (Dokumenty Google offline) - C:\Users\Jiří Školotík\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-02-26]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Jiří Školotík\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-16]
CHR Extension: (Seznam Lištička - Rychlá volba) - C:\Users\Jiří Školotík\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2017-06-15]
CHR Extension: (Gmail) - C:\Users\Jiří Školotík\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-02-26]
CHR Extension: (Chrome Media Router) - C:\Users\Jiří Školotík\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-14]
CHR HKU\S-1-5-21-2294946949-1364430705-1025020277-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bgjpfhpjcgdppjbgnpnjllokbmcdllig] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2294946949-1364430705-1025020277-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [blmojkbhnkkphngknkmgccmlenfaelkd] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2294946949-1364430705-1025020277-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [olfeabkoenfaoljndfecamgilllcpiak] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\WINDOWS\system32\AdminService.exe [347064 2016-08-12] (Windows (R) Win 7 DDK provider)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [4412104 2017-07-18] (Microsoft Corporation)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [373752 2016-07-21] (Intel Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [267352 2017-03-23] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-07-15] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R3 igfxLP; C:\WINDOWS\system32\DRIVERS\igdkmd64lp.sys [7392256 2016-07-21] (Intel Corporation)
R1 MpKsle73d7154; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D972C707-793B-442F-8FD4-FD8084411FF1}\MpKsle73d7154.sys [44928 2017-07-28] (Microsoft Corporation)
U0 Partizan; C:\Windows\SysWOW64\drivers\Partizan.sys [40304 2017-07-23] (Greatis Software)
R3 Qcamain10x64; C:\WINDOWS\system32\DRIVERS\Qcamain10x64.sys [2412976 2017-04-24] (Qualcomm Atheros, Inc.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2017-03-18] (Realtek )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [426504 2016-08-17] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [3127576 2016-08-17] (Realtek Semiconductor Corp.)
S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
R3 TXEIx64; C:\WINDOWS\System32\drivers\TXEIx64.sys [146200 2015-10-14] (Intel Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-07-28 21:13 - 2017-07-28 21:14 - 00016945 _____ C:\Users\Jiří Školotík\Desktop\FRST.txt
2017-07-28 21:13 - 2017-07-28 21:13 - 00000000 ____D C:\FRST
2017-07-28 21:12 - 2017-07-28 21:12 - 02381824 _____ (Farbar) C:\Users\Jiří Školotík\Desktop\FRST64.exe
2017-07-28 21:04 - 2017-07-28 21:04 - 00000000 _____ C:\Users\Jiří Školotík\Desktop\FRSTLauncher.exe
2017-07-28 20:15 - 2017-07-28 20:15 - 00253856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\7C663F10.sys
2017-07-28 16:16 - 2017-07-28 16:16 - 00000000 ____D C:\rsit
2017-07-28 16:16 - 2017-07-28 16:16 - 00000000 ____D C:\Program Files\trend micro
2017-07-28 16:07 - 2017-07-28 16:07 - 00253856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\570A0177.sys
2017-07-28 16:03 - 2017-07-28 20:13 - 00000000 ____D C:\AdwCleaner
2017-07-28 16:02 - 2017-07-28 15:58 - 08162248 _____ (Malwarebytes) C:\Users\Jiří Školotík\Desktop\adwcleaner_7.0.0.0.exe
2017-07-28 15:11 - 2017-07-28 15:11 - 00799816 _____ C:\Users\Jiří Školotík\Desktop\Cieciotka ŽP Flexi dle DG.pdf
2017-07-27 16:13 - 2017-07-27 16:13 - 00522748 _____ C:\Users\Jiří Školotík\Desktop\Držík Allianz dům.PDF
2017-07-27 14:53 - 2017-07-27 14:53 - 00522731 _____ C:\Users\Jiří Školotík\Desktop\Gargulák Allianz dům.PDF
2017-07-26 12:04 - 2017-07-26 12:04 - 00229476 _____ C:\Users\Jiří Školotík\Downloads\Skolotik_KNZ_1BT__smlouva_170726_120437.pdf
2017-07-25 12:32 - 2017-07-25 12:32 - 03105414 _____ C:\Users\Jiří Školotík\Desktop\Cieciotka DG.pdf
2017-07-23 12:07 - 2017-07-23 12:07 - 00000000 ____D C:\ProgramData\RegRun
2017-07-23 12:05 - 2017-07-23 12:05 - 00040304 _____ (Greatis Software) C:\WINDOWS\SysWOW64\Drivers\Partizan.sys
2017-07-23 12:04 - 2017-07-28 20:47 - 00000000 ____D C:\Users\Jiří Školotík\Documents\RegRun2
2017-07-23 12:04 - 2017-07-28 16:43 - 00000000 ____D C:\Users\Public\Documents\regruninfo
2017-07-23 12:04 - 2017-07-23 12:04 - 00003436 _____ C:\WINDOWS\System32\Tasks\UnHackMe Task Scheduler
2017-07-23 12:04 - 2017-07-23 12:04 - 00000002 RSHOT C:\WINDOWS\winstart.bat
2017-07-23 12:04 - 2017-07-23 12:04 - 00000002 RSHOT C:\WINDOWS\SysWOW64\CONFIG.NT
2017-07-23 12:04 - 2017-07-23 12:04 - 00000002 RSHOT C:\WINDOWS\SysWOW64\AUTOEXEC.NT
2017-07-23 12:04 - 2017-07-23 12:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UnHackMe
2017-07-23 12:04 - 2017-06-22 15:03 - 00014984 _____ (Greatis Software, LLC.) C:\WINDOWS\SysWOW64\Drivers\UnHackMeDrv.sys
2017-07-23 12:04 - 2015-12-28 11:32 - 00049968 _____ (Greatis Software) C:\WINDOWS\system32\partizan.exe
2017-07-23 12:03 - 2017-07-24 08:52 - 00000000 ____D C:\Program Files (x86)\UnHackMe
2017-07-23 00:55 - 2017-07-23 00:55 - 00188352 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-07-23 00:54 - 2017-07-28 20:16 - 00253856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-07-23 00:54 - 2017-07-28 20:16 - 00101784 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-07-23 00:54 - 2017-07-28 20:16 - 00093600 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-07-23 00:54 - 2017-07-28 20:16 - 00045472 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-07-23 00:54 - 2017-07-23 00:54 - 00001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-07-23 00:54 - 2017-07-23 00:54 - 00000000 ____D C:\Users\Jiří Školotík\AppData\Local\DBG
2017-07-23 00:54 - 2017-07-23 00:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-07-23 00:54 - 2017-06-27 12:06 - 00077376 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-07-23 00:53 - 2017-07-23 00:53 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-07-23 00:53 - 2017-07-23 00:53 - 00000000 ____D C:\Program Files\Malwarebytes
2017-07-23 00:32 - 2017-07-23 00:32 - 00002886 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-07-23 00:32 - 2017-07-23 00:32 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-07-23 00:32 - 2017-07-23 00:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-07-23 00:32 - 2017-07-23 00:32 - 00000000 ____D C:\Program Files\CCleaner
2017-07-22 20:42 - 2017-07-22 20:42 - 00000000 ____D C:\Users\Jiří Školotík\AppData\Local\ESET
2017-07-22 20:41 - 2017-07-22 20:42 - 06753408 _____ (ESET spol. s r.o.) C:\Users\Jiří Školotík\Desktop\esetonlinescanner_csy.exe
2017-07-17 13:24 - 2017-07-28 14:30 - 00000000 ____D C:\Users\Jiří Školotík\AppData\Local\Deployment
2017-07-17 10:51 - 2017-07-28 13:12 - 00000000 ____D C:\Users\Jiří Školotík\Desktop\Moje formuláře
2017-07-15 21:41 - 2017-07-15 21:41 - 32688336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecsRaw.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 31652264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecsRaw.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 13839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 06554928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 06123520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 05961216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 05820984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 05806048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 05719040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 05225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 04536320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 04056576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 02859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 02782720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 02671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 02588160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 02475136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 02298368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 02199552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 02165752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 02132480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 02021680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 01620368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 01529384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 01518088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 01494016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 01492480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 01339352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpmde.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 01248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 01237504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 01220072 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 01150784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 01121928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 01019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00949920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00754592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00750496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-07-15 21:41 - 2017-07-15 21:41 - 00734208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2017-07-15 21:41 - 2017-07-15 21:41 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00646144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2017-07-15 21:41 - 2017-07-15 21:41 - 00636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00601088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2017-07-15 21:41 - 2017-07-15 21:41 - 00508416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2017-07-15 21:41 - 2017-07-15 21:41 - 00506368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00467504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00455104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00446464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00443728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00433152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00411992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00406032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00394240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Payments.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-07-15 21:41 - 2017-07-15 21:41 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00346016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00336320 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2017-07-15 21:41 - 2017-07-15 21:41 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-07-15 21:41 - 2017-07-15 21:41 - 00329216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00312320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2017-07-15 21:41 - 2017-07-15 21:41 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2017-07-15 21:41 - 2017-07-15 21:41 - 00278944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00254168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00241152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecsExt.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edputil.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\sensrsvc.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00173568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ClipboardServer.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00138656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostUser.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00129184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\raschap.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Profile.RetailInfo.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00096128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
2017-07-15 21:41 - 2017-07-15 21:41 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapprovp.dll
2017-07-15 21:40 - 2017-07-15 21:41 - 19335168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 23681536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 21353208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 20504576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 20373408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 17364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 12786176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 11870720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 08331264 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 08318880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 08238080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 08211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 07931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 07904784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 07596544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 07336448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 07325584 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 07149056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 06759512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 06728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 06287360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 05892096 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 05557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 05477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 04847424 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 04730880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 04707840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 04559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 04469840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 04447744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 04417024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 04396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 03803136 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 03784704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 03670016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-07-15 21:40 - 2017-07-15 21:40 - 03656704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 03377664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 03332096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 03307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 03204096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 03139584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 03059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 03057664 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 02969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 02956800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-07-15 21:40 - 2017-07-15 21:40 - 02938880 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 02873344 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 02829824 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 02814464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themeui.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 02804736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 02750464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 02681760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-07-15 21:40 - 2017-07-15 21:40 - 02679296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 02649600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 02645688 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 02597888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 02499584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 02444696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-07-15 21:40 - 2017-07-15 21:40 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 02399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 02330520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 02327456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-07-15 21:40 - 2017-07-15 21:40 - 02259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 02211328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 02199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 02177024 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 02171392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 02077184 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2017-07-15 21:40 - 2017-07-15 21:40 - 02055168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-07-15 21:40 - 2017-07-15 21:40 - 02008576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2017-07-15 21:40 - 2017-07-15 21:40 - 01930320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01818624 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01812480 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01802240 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01760264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01703424 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01670496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01640448 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01565184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01564576 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01451008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01448960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01425920 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 01420800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01403392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01396224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01395152 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2017-07-15 21:40 - 2017-07-15 21:40 - 01357824 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01355264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01337848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01325968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01305088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01301504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01285120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 01242528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2017-07-15 21:40 - 2017-07-15 21:40 - 01214880 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01195240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01186464 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 01178528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01177600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01171968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 01171032 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01147288 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 01142272 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01106848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2017-07-15 21:40 - 2017-07-15 21:40 - 01077496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01076736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01065104 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2017-07-15 21:40 - 2017-07-15 21:40 - 01057832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01055648 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01054280 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01050624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 01024928 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 01017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2017-07-15 21:40 - 2017-07-15 21:40 - 00988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2017-07-15 21:40 - 2017-07-15 21:40 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfuimanager.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00965024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2017-07-15 21:40 - 2017-07-15 21:40 - 00952832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloSI.PCShell.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00942592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00922112 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00916992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 00899824 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 00899072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfuimanager.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00873472 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00864240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00847872 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00833160 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00823296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00821664 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 00820128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 00809984 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00791040 _____ (Microsoft Corporation) C:\WINDOWS\system32\certca.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00790016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00787712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00778240 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2017-07-15 21:40 - 2017-07-15 21:40 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 00722432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00706560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 00696320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2017-07-15 21:40 - 2017-07-15 21:40 - 00692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00648192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockHostingFramework.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certca.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00632832 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00629152 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00626528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 00626176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00600064 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00583304 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 00583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\duser.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00563712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00558920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFDSConMgrSvc.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00554392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2017-07-15 21:40 - 2017-07-15 21:40 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Payments.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2017-07-15 21:40 - 2017-07-15 21:40 - 00544160 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00536064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00520704 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00519584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2017-07-15 21:40 - 2017-07-15 21:40 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00502784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00472728 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00471040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VAN.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00455680 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00443392 _____ (Microsoft Corporation) C:\WINDOWS\system32\PerceptionSimulationExtensions.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00438096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00426912 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacc.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00411040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00406072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00397312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00382368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-07-15 21:40 - 2017-07-15 21:40 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 00372128 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinfo32.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 00365056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00365056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 00360960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV2.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Narrator.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 00354400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MMDevAPI.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00349600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msinfo32.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00335776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00334240 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00318232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00312320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 00279968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2017-07-15 21:40 - 2017-07-15 21:40 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecsExt.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToReceiver.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00255904 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardSvr.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdmaud.drv
2017-07-15 21:40 - 2017-07-15 21:40 - 00233376 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 00228256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-07-15 21:40 - 2017-07-15 21:40 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.Interface.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdmaud.drv
2017-07-15 21:40 - 2017-07-15 21:40 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipboardServer.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00204192 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00203168 _____ (Microsoft Corporation) C:\WINDOWS\system32

\CloudExperienceHostBroker.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00192416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincredui.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00181656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00179608 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00176032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\prntvpt.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincredui.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00147800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Clipc.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.RetailInfo.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00142752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2017-07-15 21:40 - 2017-07-15 21:40 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMPushRouterCore.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\raschap.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00136096 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft.Bluetooth.Profiles.Gatt.Interface.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00125344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00123520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Clipc.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00119384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00117664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2017-07-15 21:40 - 2017-07-15 21:40 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2017-07-15 21:40 - 2017-07-15 21:40 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\officecsp.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00102312 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialUIBroker.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 00096672 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncCsp.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00094624 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2017-07-15 21:40 - 2017-07-15 21:40 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinAUG.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFDSConMgr.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dataclen.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\DmApiSetExtImplDesktop.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00058488 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModelOOBE.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dataclen.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00049656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msasn1.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerUI.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00041376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininitext.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerUI.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00035232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininitext.dll
2017-07-15 21:40 - 2017-07-15 21:40 - 00034720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2017-07-15 21:40 - 2017-07-15 21:40 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
2017-07-15 21:40 - 2017-07-15 21:40 - 00031932 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin
2017-07-15 21:40 - 2017-07-15 21:40 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapprovp.dll
2017-07-15 21:31 - 2017-07-15 21:31 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2017-07-15 21:28 - 2017-07-15 21:28 - 04709528 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 04672848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 02604256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 02424016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 02341376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 02088960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 01984000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 01700408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 01506816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 01474800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 01455592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 01266544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 01035264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 00987648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 00899584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 00807424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 00797184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2017-07-15 21:28 - 2017-07-15 21:28 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 00716440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 00559000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-07-15 21:28 - 2017-07-15 21:28 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2017-07-15 21:28 - 2017-07-15 21:28 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2017-07-15 21:28 - 2017-07-15 21:28 - 00394240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DictationManager.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 00387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Diagnostics.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 00059904 _____ C:\WINDOWS\SysWOW64\xboxgipsynthetic.dll
2017-07-15 21:28 - 2017-07-15 21:28 - 00000020 ___SH C:\Users\Jiří Školotík\ntuser.ini
2017-07-15 21:28 - 2017-07-15 21:28 - 00000000 ____D C:\Users\Jiří Školotík\AppData\Local\ConnectedDevicesPlatform
2017-07-15 21:27 - 2017-07-15 21:27 - 06726656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-07-15 21:27 - 2017-07-15 21:27 - 06535168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2017-07-15 21:27 - 2017-07-15 21:27 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 03135488 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 03116184 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 02730496 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2017-07-15 21:27 - 2017-07-15 21:27 - 02625024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 02516480 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 02438656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 02347520 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 02085280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01911752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01852776 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01657344 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01628160 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01611776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01600512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01596600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01557288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01536512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01506712 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01459728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01433600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01409048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01333136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01320352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01275904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01242624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01141760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01102848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01078272 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01067008 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxNetApiSvc.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01046016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01046016 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01028608 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 01003624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00975360 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2017-07-15 21:27 - 2017-07-15 21:27 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmgaserver.exe
2017-07-15 21:27 - 2017-07-15 21:27 - 00972800 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00970240 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00970240 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2017-07-15 21:27 - 2017-07-15 21:27 - 00961952 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00933376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2017-07-15 21:27 - 2017-07-15 21:27 - 00909824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00892416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2017-07-15 21:27 - 2017-07-15 21:27 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSMDesktopProvider.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00826368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSMDesktopProvider.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00809472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSSO.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00778240 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2017-07-15 21:27 - 2017-07-15 21:27 - 00777400 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00741784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmgaserver.exe
2017-07-15 21:27 - 2017-07-15 21:27 - 00730016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-07-15 21:27 - 2017-07-15 21:27 - 00722944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-07-15 21:27 - 2017-07-15 21:27 - 00712608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-07-15 21:27 - 2017-07-15 21:27 - 00708712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00673112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00667040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00660384 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00654976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00651680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-07-15 21:27 - 2017-07-15 21:27 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdbui.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00616960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowManagement.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00606960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00599576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00573856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00551936 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00549888 _____ (Microsoft Corporation) C:\WINDOWS\system32\DictationManager.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00546208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2017-07-15 21:27 - 2017-07-15 21:27 - 00543648 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-07-15 21:27 - 2017-07-15 21:27 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00523296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Display.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00476160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2017-07-15 21:27 - 2017-07-15 21:27 - 00439808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00409504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-07-15 21:27 - 2017-07-15 21:27 - 00392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00388000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2017-07-15 21:27 - 2017-07-15 21:27 - 00382368 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00370928 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2017-07-15 21:27 - 2017-07-15 21:27 - 00363424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2017-07-15 21:27 - 2017-07-15 21:27 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00354360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00321376 _____ (Microsoft Corporation) C:\WINDOWS\system32\capauthz.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00311200 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00287648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2017-07-15 21:27 - 2017-07-15 21:27 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2017-07-15 21:27 - 2017-07-15 21:27 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00266640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\capauthz.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00259400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2017-07-15 21:27 - 2017-07-15 21:27 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-07-15 21:27 - 2017-07-15 21:27 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\devicengccredprov.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00219040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2017-07-15 21:27 - 2017-07-15 21:27 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00211872 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\RstrtMgr.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2017-07-15 21:27 - 2017-07-15 21:27 - 00192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00188824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2017-07-15 21:27 - 2017-07-15 21:27 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RstrtMgr.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devicengccredprov.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSM.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\embeddedmodesvc.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00144288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2017-07-15 21:27 - 2017-07-15 21:27 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSaveExt.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00130464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2017-07-15 21:27 - 2017-07-15 21:27 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSM.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00119712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-07-15 21:27 - 2017-07-15 21:27 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2017-07-15 21:27 - 2017-07-15 21:27 - 00112544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2017-07-15 21:27 - 2017-07-15 21:27 - 00105456 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-07-15 21:27 - 2017-07-15 21:27 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00095584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrvext.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00086016 _____ C:\WINDOWS\system32\xboxgipsynthetic.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2017-07-15 21:27 - 2017-07-15 21:27 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCredentialDeployment.exe
2017-07-15 21:27 - 2017-07-15 21:27 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2017-07-15 21:27 - 2017-07-15 21:27 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\bfsvc.exe
2017-07-15 21:27 - 2017-07-15 21:27 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00047104 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00038912 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-07-15 21:27 - 2017-07-15 21:27 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksthunk.sys
2017-07-15 21:27 - 2017-07-15 21:27 - 00027040 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2017-07-15 21:27 - 2017-07-15 21:27 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\snmptrap.exe
2017-07-15 21:27 - 2017-07-15 21:27 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rootmdm.sys
2017-07-15 21:27 - 2017-07-15 21:27 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2017-07-15 21:27 - 2017-07-15 21:27 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2017-07-15 21:24 - 2017-07-15 21:25 - 00011433 _____ C:\WINDOWS\diagwrn.xml
2017-07-15 21:24 - 2017-07-15 21:25 - 00011433 _____ C:\WINDOWS\diagerr.xml
2017-07-15 21:19 - 2017-07-15 21:19 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2017-07-15 21:19 - 2017-07-15 20:52 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2017-07-15 21:17 - 2017-07-28 20:38 - 00004228 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{2F41481C-062D-4848-BF9C-2607B6901106}
2017-07-15 21:17 - 2017-07-28 20:16 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-07-15 21:17 - 2017-07-15 21:17 - 00022924 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-07-15 21:17 - 2017-07-15 21:17 - 00003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2017-07-15 21:17 - 2017-07-15 21:17 - 00003398 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-07-15 21:17 - 2017-07-15 21:17 - 00003174 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-07-15 21:17 - 2017-07-15 21:17 - 00002770 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-07-15 21:16 - 2017-07-28 20:21 - 01903526 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-07-15 21:16 - 2017-07-15 21:16 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2017-07-15 21:16 - 2017-07-15 21:16 - 00000000 ____D C:\Program Files\Reference Assemblies
2017-07-15 21:16 - 2017-07-15 21:16 - 00000000 ____D C:\Program Files\MSBuild
2017-07-15 21:16 - 2017-07-15 21:16 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-07-15 21:16 - 2017-07-15 21:16 - 00000000 ____D C:\Program Files (x86)\MSBuild
2017-07-15 21:15 - 2017-07-15 21:15 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-07-15 21:15 - 2017-02-10 12:26 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-07-15 21:15 - 2017-02-10 12:26 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-07-15 21:15 - 2017-02-10 12:26 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2017-07-15 21:15 - 2017-02-10 12:21 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2017-07-15 21:15 - 2017-02-10 12:21 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-07-15 21:15 - 2017-02-10 12:21 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2017-07-15 21:09 - 2017-07-15 21:09 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-07-15 21:03 - 2017-07-15 21:03 - 00000000 ____D C:\ProgramData\USOShared
2017-07-15 21:01 - 2017-07-15 21:09 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-07-15 20:58 - 2017-07-28 16:07 - 00000000 ____D C:\Users\Jiří Školotík
2017-07-15 20:58 - 2017-07-15 21:16 - 00000000 ____D C:\Users\defaultuser0
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\Jiří Školotík\Šablony
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\Jiří Školotík\Soubory cookie
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\Jiří Školotík\Poslední
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\Jiří Školotík\Okolní tiskárny
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\Jiří Školotík\Okolní síť
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\Jiří Školotík\Nabídka Start
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\Jiří Školotík\Dokumenty
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\Jiří Školotík\Documents\Obrázky
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\Jiří Školotík\Documents\Hudba
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\Jiří Školotík\Documents\Filmy
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\Jiří Školotík\Data aplikací
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\Jiří Školotík\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\Jiří Školotík\AppData\Local\Data aplikací
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\defaultuser0\Šablony
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\defaultuser0\Soubory cookie
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\defaultuser0\Poslední
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\defaultuser0\Okolní tiskárny
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\defaultuser0\Okolní síť
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\defaultuser0\Nabídka Start
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\defaultuser0\Dokumenty
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Obrázky
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Hudba
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Filmy
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\defaultuser0\Data aplikací
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2017-07-15 20:58 - 2017-07-15 20:58 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Data aplikací
2017-07-15 20:57 - 2017-07-28 20:16 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-07-15 20:57 - 2017-07-15 20:57 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2017-07-15 20:57 - 2017-07-15 20:57 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2017-07-15 20:57 - 2017-07-15 20:57 - 00000000 ____D C:\Program Files\Common Files\Atheros
2017-07-15 20:56 - 2017-07-15 20:56 - 00091816 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip
2017-07-15 20:56 - 2017-07-15 20:56 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2017-07-15 20:56 - 2017-07-15 20:56 - 00000000 ____D C:\WINDOWS\system32\DAX2
2017-07-15 20:56 - 2017-07-15 20:56 - 00000000 ____D C:\Program Files\Intel
2017-07-15 20:56 - 2017-07-15 20:56 - 00000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin
2017-07-15 20:56 - 2016-07-21 10:36 - 00103960 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2017-07-15 20:56 - 2016-07-21 10:36 - 00099864 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2017-07-15 20:55 - 2017-07-15 20:55 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2017-07-15 20:55 - 2017-07-15 20:55 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-07-15 20:55 - 2017-07-15 20:55 - 00000000 ____D C:\Program Files\Synaptics
2017-07-15 20:55 - 2017-07-15 20:55 - 00000000 ____D C:\Program Files\Realtek
2017-07-15 20:55 - 2017-03-18 22:56 - 02233344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2017-07-15 20:52 - 2017-07-28 20:06 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-07-15 20:52 - 2017-07-28 16:08 - 00381144 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-07-15 19:33 - 2017-07-22 20:38 - 00000000 ____D C:\Program Files\KMSpico
2017-07-15 19:33 - 2017-07-15 21:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
2017-07-15 19:33 - 2010-12-06 04:16 - 00090112 _____ (Vestris Inc.) C:\WINDOWS\system32\Vestris.ResourceLib.dll
2017-07-15 18:42 - 2017-07-15 19:42 - 00000000 ____D C:\WINDOWS\AutoKMS
2017-07-14 09:06 - 2017-07-23 00:41 - 00000000 ___DC C:\WINDOWS\Panther
2017-07-12 08:45 - 2017-07-28 13:14 - 00000000 ____D C:\Users\Jiří Školotík\Desktop\Krzyžánková Marie
2017-07-11 13:59 - 2017-07-11 13:59 - 03108838 _____ C:\Users\Jiří Školotík\Desktop\Szokala DG.pdf
2017-07-07 13:28 - 2017-07-07 13:28 - 00299125 _____ C:\Users\Jiří Školotík\Downloads\8713432_43791.pdf
2017-07-07 12:42 - 2017-07-07 12:42 - 00394335 _____ C:\Users\Jiří Školotík\Desktop\Gargulak_KNZ_1RD__smlouva_170707_124148.pdf
2017-07-06 13:19 - 2017-07-06 13:20 - 00000000 ____D C:\Users\Jiří Školotík\Desktop\Valder
2017-07-06 13:18 - 2017-07-06 13:19 - 00000000 ____D C:\Users\Jiří Školotík\Desktop\Lapiš Radim
2017-07-06 13:17 - 2017-07-19 15:05 - 00000000 ____D C:\Users\Jiří Školotík\Desktop\Kontírová Božena
2017-07-04 12:13 - 2017-07-26 11:02 - 00000000 ____D C:\Users\Jiří Školotík\Desktop\Šupala
2017-07-03 12:19 - 2017-07-03 12:19 - 00096163 _____ C:\Users\Jiří Školotík\Desktop\1802-kp-zdravotni-dotaznik-editovatelny-062017.pdf
2017-07-03 12:18 - 2017-07-03 12:18 - 01507539 _____ C:\Users\Jiří Školotík\Desktop\1087-kp-elan-eform-062017-rodina.pdf
2017-07-03 12:17 - 2017-07-03 12:17 - 00694637 _____ C:\Users\Jiří Školotík\Desktop\1107-kp-hypo-eform-062017.pdf
2017-07-03 12:13 - 2017-07-26 10:32 - 08087552 _____ C:\Users\Jiří Školotík\Desktop\43-conseq-kalkulace-vse-2015-1.xls
2017-06-29 15:17 - 2017-06-29 15:17 - 05377306 _____ C:\Users\Jiří Školotík\Desktop\Kaletovi dg.pdf
2017-06-29 12:59 - 2017-06-29 12:59 - 00069103 _____ C:\Users\Jiří Školotík\Downloads\model NN Kontírová 1.7.2017.pdf

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-07-28 20:22 - 2017-06-09 15:17 - 00000000 ____D C:\Users\Jiří Školotík\AppData\Roaming\Seznam.cz
2017-07-28 20:21 - 2017-03-20 06:43 - 00817360 _____ C:\WINDOWS\system32\perfh005.dat
2017-07-28 20:21 - 2017-03-20 06:43 - 00170028 _____ C:\WINDOWS\system32\perfc005.dat
2017-07-28 20:16 - 2017-01-09 17:41 - 00000000 __SHD C:\Users\Jiří Školotík\IntelGraphicsProfiles
2017-07-28 20:15 - 2017-03-18 13:40 - 01048576 _____ C:\WINDOWS\system32\config\BBI
2017-07-28 16:07 - 2017-02-26 15:04 - 00002248 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-07-28 16:07 - 2017-02-26 15:04 - 00002248 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-07-28 14:02 - 2017-01-09 17:41 - 00000000 ____D C:\Users\Jiří Školotík\AppData\Local\Packages
2017-07-28 10:42 - 2017-03-18 23:03 - 00000000 ___HD C:\Program Files\WindowsApps
2017-07-28 10:42 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-07-28 10:19 - 2017-06-09 14:32 - 00000000 ____D C:\GALAXY
2017-07-28 08:26 - 2017-01-10 21:08 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-07-27 22:47 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-07-26 12:33 - 2017-06-13 11:02 - 00000000 ____D C:\ProgramData\firebird
2017-07-25 13:54 - 2017-06-13 10:43 - 00000000 ____D C:\Users\Jiří Školotík\AppData\Local\HockeyApp
2017-07-25 13:50 - 2017-06-15 12:34 - 00000000 ____D C:\Users\Jiří Školotík\Desktop\Plonkovi
2017-07-23 19:21 - 2017-04-24 10:53 - 00000000 ____D C:\Users\Jiří Školotík\Desktop\různé
2017-07-23 18:59 - 2017-03-18 23:01 - 00000000 ____D C:\WINDOWS\INF
2017-07-23 07:51 - 2017-01-10 17:58 - 00000000 ____D C:\Programy
2017-07-23 01:26 - 2017-01-10 17:43 - 00000000 ____D C:\Office
2017-07-23 00:41 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-07-20 13:06 - 2017-01-09 17:41 - 00000000 ____D C:\Users\Jiří Školotík\AppData\Local\VirtualStore
2017-07-20 07:14 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\rescache
2017-07-18 11:52 - 2017-06-13 10:42 - 00000000 ____D C:\Users\Jiří Školotík\AppData\Local\AEGON Expert 3
2017-07-18 09:04 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\appcompat
2017-07-17 13:25 - 2017-06-13 09:09 - 00000354 _____ C:\Users\Jiří Školotík\Desktop\PČS SmartClient.appref-ms
2017-07-17 13:25 - 2017-06-13 09:09 - 00000000 ____D C:\Users\Jiří Školotík\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pojišťovna České spořitelny
2017-07-16 19:14 - 2017-03-18 22:51 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-07-15 21:51 - 2017-03-18 23:03 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-07-15 21:45 - 2017-03-18 23:06 - 00000000 ____D C:\WINDOWS\Setup
2017-07-15 21:43 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-07-15 21:43 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\system32\F12
2017-07-15 21:43 - 2017-03-18 23:03 - 00000000 ___RD C:\Program Files\Windows Defender
2017-07-15 21:43 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-07-15 21:43 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\migwiz
2017-07-15 21:43 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\appraiser
2017-07-15 21:43 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-07-15 21:43 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-07-15 21:43 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-07-15 21:43 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2017-07-15 21:36 - 2017-01-09 17:44 - 00002415 _____ C:\Users\Jiří Školotík\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-07-15 21:36 - 2017-01-09 17:44 - 00000000 ___RD C:\Users\Jiří Školotík\OneDrive
2017-07-15 21:30 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-07-15 21:30 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-07-15 21:30 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Provisioning
2017-07-15 21:30 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Dism
2017-07-15 21:29 - 2017-03-18 23:03 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-07-15 21:28 - 2016-12-28 17:12 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-07-15 21:27 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows NT
2017-07-15 21:26 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-07-15 21:26 - 2017-03-18 13:40 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2017-07-15 21:23 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Registration
2017-07-15 21:23 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-07-15 21:18 - 2017-03-20 06:46 - 00000000 ____D C:\WINDOWS\HoloShell
2017-07-15 21:16 - 2017-03-18 23:03 - 00000000 __RHD C:\Users\Public\Libraries
2017-07-15 21:16 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2017-07-15 21:16 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\MUI
2017-07-15 21:10 - 2017-06-21 14:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Registrace uživatele zařízení Canon iP100 series
2017-07-15 21:10 - 2017-06-21 13:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP100 series Manual
2017-07-15 21:10 - 2017-06-21 13:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP100 series
2017-07-15 21:10 - 2017-06-13 10:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NN eKalkulačka SMS
2017-07-15 21:10 - 2017-06-09 14:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Galaxy
2017-07-15 21:10 - 2017-04-13 12:08 - 00000000 ____D C:\WINDOWS\system32\UNP
2017-07-15 21:10 - 2017-04-09 12:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2017-07-15 21:10 - 2017-01-10 21:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nástroje Microsoft Office 2016
2017-07-15 21:10 - 2017-01-10 17:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-07-15 21:09 - 2017-06-13 11:02 - 00000000 ____D C:\Users\Jiří Školotík\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AXA Studio
2017-07-15 21:09 - 2017-06-13 10:42 - 00000000 ____D C:\Users\Jiří Školotík\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AEGON Expert
2017-07-15 21:09 - 2017-01-10 17:58 - 00000000 ____D C:\Users\Jiří Školotík\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-07-15 21:03 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\spool
2017-07-15 21:03 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-07-15 21:03 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\USOPrivate
2017-07-15 21:02 - 2017-06-21 13:58 - 00000000 ___HD C:\WINDOWS\system32\CanonIJ Uninstaller Information
2017-07-15 21:02 - 2017-06-21 13:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2017-07-15 21:01 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-07-15 21:00 - 2017-01-09 17:37 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\Packages
2017-07-15 20:57 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2017-07-15 19:25 - 2017-06-19 17:22 - 00001677 _____ C:\Users\Jiří Školotík\Desktop\AllinNG OnLine.lnk
2017-07-13 16:03 - 2017-06-09 15:16 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-07-13 15:59 - 2017-06-13 10:27 - 00000808 _____ C:\Users\Public\Desktop\NN eKalkulačka SMS.lnk
2017-07-12 19:53 - 2017-01-10 18:59 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-07-12 19:50 - 2017-01-10 18:59 - 135225752 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-07-07 10:17 - 2017-04-13 12:08 - 00000000 ____D C:\Program Files\UNP
2017-07-04 13:04 - 2017-06-13 11:05 - 00000000 ____D C:\Users\Jiří Školotík\Documents\AXAStudio
2017-07-04 12:37 - 2017-06-14 11:42 - 00000000 ____D C:\Temp
2017-07-01 11:38 - 2017-02-17 18:28 - 00000000 ____D C:\Laura
2017-06-30 16:47 - 2017-03-18 23:06 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-06-30 16:47 - 2017-03-18 23:06 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-06-28 10:53 - 2017-06-16 20:43 - 00000000 ____D C:\Users\Jiří Školotík\Desktop\15.6.2017

==================== Files in the root of some directories =======

2017-07-15 20:56 - 2017-07-15 20:56 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2017-04-09 11:40 - 2017-04-09 12:15 - 0003338 _____ () C:\ProgramData\hpzinstall.log

Some files in TEMP:
====================
2017-07-24 17:37 - 2017-07-24 17:38 - 0049152 _____ () C:\Users\Jiří Školotík\AppData\Local\Temp\xdhofi3s.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-07-26 09:12

==================== End of FRST.txt ============================

Otevřte poznámkový blok a zkopírujte do něj:

Start
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
C:\ProgramData\DP45977C.lfl
C:\WINDOWS\AutoKMS
C:\Users\Jiří Školotík\AppData\Local\Temp
AutoConfigURL: [S-1-5-21-2294946949-1364430705-1025020277-1003] => hxxp://accessfastweb.com/wpad.dat?d6294 ... 5534035807
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
Task: {4E50E4EB-1663-4939-B4F9-2D3242B75826} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-26] (Google Inc.)
Task: {84708918-31DA-427C-9BFA-6A7AA23E539A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-26] (Google Inc.)
ShortcutWithArgument: C:\Users\Jiří Školotík\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxps://launchpage.org/?uid=oTlMGKjcgx0 ... BmUNDy8%3D

ResetHosts:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 28-07-2017
Ran by Jiří Školotík (28-07-2017 22:17:43) Run:1
Running from C:\Users\Jiří Školotík\Desktop
Loaded Profiles: Jiří Školotík (Available Profiles: defaultuser0 & Jiří Školotík)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
C:\ProgramData\DP45977C.lfl
C:\WINDOWS\AutoKMS
C:\Users\Ji�� �kolot�k\AppData\Local\Temp
AutoConfigURL: [S-1-5-21-2294946949-1364430705-1025020277-1003] => hxxp://accessfastweb.com/wpad.dat?d6294 ... 5534035807
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
Task: {4E50E4EB-1663-4939-B4F9-2D3242B75826} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-26] (Google Inc.)
Task: {84708918-31DA-427C-9BFA-6A7AA23E539A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-26] (Google Inc.)
ShortcutWithArgument: C:\Users\Ji�� �kolot�k\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxps://launchpage.org/?uid=oTlMGKjcgx0 ... BmUNDy8%3D

ResetHosts:
End
*****************

C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat => moved successfully
C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat => moved successfully
C:\ProgramData\DP45977C.lfl => moved successfully
C:\WINDOWS\AutoKMS => moved successfully

"C:\Users\Jiří Školotík\AppData\Local\Temp" folder move:

Could not move "C:\Users\Jiří Školotík\AppData\Local\Temp" => Scheduled to move on reboot.

HKU\S-1-5-21-2294946949-1364430705-1025020277-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\AutoConfigURL => value removed successfully
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => key removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{4E50E4EB-1663-4939-B4F9-2D3242B75826} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4E50E4EB-1663-4939-B4F9-2D3242B75826} => key removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{84708918-31DA-427C-9BFA-6A7AA23E539A} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{84708918-31DA-427C-9BFA-6A7AA23E539A} => key removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA => key removed successfully
C:\Users\Jiří Školotík\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk => Shortcut argument removed successfully.
ResetHosts: => Error: No automatic fix found for this entry.

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 28-07-2017 22:21:38)

"C:\Users\Jiří Školotík\AppData\Local\Temp" => Could not move

==== End of Fixlog 22:21:41 ====

Smazáno. Nastala nějaká změna?

Zdravím , bohužel ne, reklamy stále vyskakují

Zkusíme vyčistit prohlížeče. Spusťte postupně tyto utility:

1. Stahnete Zoek.exe http://download.bleepingcomputer.com/smeenk/zoek.exe a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize

autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;

Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem.

a

2. Junkware removal tool: http://thisisudax.org/downloads/JRT.exe
•Ulozte nejlepe na plochu
•Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
•Probehne vytvoreni zalohy a nasledne prohledavani
•Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte.

Log z ZOEK

Zoek.exe v5.0.0.1 Updated 27-09-2015
Tool run by Jiýˇ ćkolotˇk on 29.07.2017 at 18:21:10,87.
Microsoft Windows 10 Home 10.0.15063 x64
Running in: Normal Mode No Internet Access Detected
Launched: C:\Users\JIKOLO~1\Desktop\zoek.exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2017-07-29-161635.log 1901 bytes

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\Users\JIKOLO~1\AppData\Local\ConnectedDevicesPlatform deleted successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\NetworkTiles deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\Users\JIKOLO~1\.tmp deleted

==== Chromium Look ======================


HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
bgjpfhpjcgdppjbgnpnjllokbmcdllig - No path found[]
blmojkbhnkkphngknkmgccmlenfaelkd - No path found[]
olfeabkoenfaoljndfecamgilllcpiak - No path found[]

Seznam Lištička - Email - JIKOLO~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig
Seznam Lištička - Slovník - JIKOLO~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd
Seznam Lištička - Rychlá volba - JIKOLO~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak
Chrome Media Router - JIKOLO~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IESR02"
{26C2D99C-08EE-48CE-889C-03AFD03F6A3F} Firmy.cz Url="http://www.firmy.cz/?q={searchTerms}&so ... arch_12454"
{30ED034C-C89C-4CD5-B5AB-42814D81B246} Seznam TV Program Url="http://tv.seznam.cz/hledej?w={searchTer ... arch_12454"
{355136E8-15B5-4AD3-A617-ACF8AF782311} Slovnˇk EN/CZ Url="http://slovnik.seznam.cz/?q={searchTerm ... arch_12454"
{3A2E84C1-4629-447D-9ED1-1020E0D9154D} Slovnˇk CZ/EN Url="http://slovnik.seznam.cz/?q={searchTerm ... arch_12454"
{6D5275DE-60B1-440A-AAFD-F418B47942A2} Seznam Url="http://search.seznam.cz/?q={searchTerms ... arch_12454"
{7ED13C29-AE3E-4468-A832-185C3E0112C7} Zbo§ˇ.cz Url="http://www.zbozi.cz/?q={searchTerms}&r= ... arch_12454"
{8CFF5988-FE15-4336-9336-EF3BED07CA40} Mapy.cz Url="http://www.mapy.cz/?query={searchTerms} ... arch_12454"
{9B34707D-475D-461B-B077-D36224AD4F13} Encyklopedie Seznam Url="http://encyklopedie.seznam.cz/search?q= ... arch_12454"
{AF599CBB-7C72-4262-A57E-D6560417C479} Novinky.cz Url="http://www.novinky.cz/hledej?w={searchT ... arch_12454"

==== Reset Google Chrome ======================

C:\Users\JIKOLO~1\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\JIKOLO~1\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\JIKOLO~1\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\JIKOLO~1\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\JIKOLO~1\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\JIKOLO~1\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\JIKOLO~1\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\JIKOLO~1\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=1 folders=1 55 bytes)

==== Empty Temp Folders ======================

C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\JIKOLO~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on 29.07.2017 at 19:00:51,31 ======================

Log z JRT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 10 Home x64
Ran by Jiýˇ ćkolotˇk (Administrator) on 29.07.2017 at 19:03:57,16
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 9

Successfully deleted: C:\Users\Jiýˇ ćkolotˇk\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig (Folder)
Successfully deleted: C:\Users\Jiýˇ ćkolotˇk\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd (Folder)
Successfully deleted: C:\Users\Jiýˇ ćkolotˇk\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak (Folder)
Successfully deleted: C:\Users\Jiýˇ ćkolotˇk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bgjpfhpjcgdppjbgnpnjllokbmcdllig_0.localstorage-journal (File)
Successfully deleted: C:\Users\Jiýˇ ćkolotˇk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bgjpfhpjcgdppjbgnpnjllokbmcdllig_0.localstorage (File)
Successfully deleted: C:\Users\Jiýˇ ćkolotˇk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_blmojkbhnkkphngknkmgccmlenfaelkd_0.localstorage-journal (File)
Successfully deleted: C:\Users\Jiýˇ ćkolotˇk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_blmojkbhnkkphngknkmgccmlenfaelkd_0.localstorage (File)
Successfully deleted: C:\Users\Jiýˇ ćkolotˇk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_olfeabkoenfaoljndfecamgilllcpiak_0.localstorage-journal (File)
Successfully deleted: C:\Users\Jiýˇ ćkolotˇk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_olfeabkoenfaoljndfecamgilllcpiak_0.localstorage (File)



Registry: 4

Successfully deleted: HKCU\Software\Google\Chrome\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig (Registry Key)
Successfully deleted: HKCU\Software\Google\Chrome\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd (Registry Key)
Successfully deleted: HKCU\Software\Google\Chrome\Extensions\olfeabkoenfaoljndfecamgilllcpiak (Registry Key)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6D5275DE-60B1-440A-AAFD-F418B47942A2} (Registry Key)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 29.07.2017 at 19:09:13,51
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

bohužel pořád je to stejné, reklamy vyskakují stále