Občasné přesměrování na herní weby
Napsal: 02 srp 2017 20:46
Zřejmě jsem nainstaloval nějakou havěť, kterou sám, bohužel, nedokážu detekovat a zlikvidovat. Prosím tedy o pomoc. Díky.
------
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 31-07-2017
Ran by Tlustej (administrator) on SADLO (02-08-2017 21:40:42)
Running from C:\Users\Tlustej\Desktop
Loaded Profiles: Tlustej (Available Profiles: Tlustej & Administrator & Guest)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 9 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(Advanced Micro Devices) C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
(Dexpot GbR) C:\Program Files (x86)\Dexpot\dexpot.exe
(Dexpot GbR) C:\Program Files (x86)\Dexpot\Dexpot64.exe
(Dexpot GbR) C:\Program Files (x86)\Dexpot\plugins\DexControl.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
() C:\Program Files\Mouse\Amoumain.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE
(GBM Software) C:\Program Files (x86)\mobilni_ovladani\GRemote Pro2\GRemoteServer.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2RPK.EXE
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNACBSWK.EXE
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTAgent.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.10\Lightshot.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6064.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(C. Ghisler & Co.) C:\Program Files (x86)\Total Commander\TOTALCMD.EXE
(forum.viry.cz) C:\Users\Tlustej\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [WheelMouse] => C:\Program Files\Mouse\Amoumain.exe [196608 2008-03-03] ()
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7018568 2013-02-22] (Realtek Semiconductor)
HKLM\...\Run: [CNAP2 Launcher] => C:\Windows\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [226784 2010-10-15] (CANON INC.)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2017-04-11] ()
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\Run: [GRemoteServer Pro] => C:\Program Files (x86)\mobilni_ovladani\GRemote Pro2\GRemoteServer.exe [2818016 2011-08-16] (GBM Software)
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\Run: [DisplayFusion] => C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [8538648 2015-09-22] (Binary Fortress Software)
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files (x86)\DAEMON Tools Lite\DTAgent.exe [4836032 2017-07-03] (Disc Soft Ltd)
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\Policies\system: [EnableLUA] 1
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: F - F:\Install.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: H - H:\Dungeon.EXE
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: I - I:\Setup.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {0b811c8a-68a0-11e7-b383-d43d7ed81a23} - F:\stpdh2.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {2452f58b-8546-11e6-878d-d43d7ed81a23} - H:\Lenovo_Suite.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {30284bc6-3d6e-11e2-b621-0013d3789997} - H:\Launcher.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {4dc40539-5486-11e4-89a5-d43d7ed81a23} - I:\LGAutoRun.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {5d2ee97f-374e-11e5-966b-0013d3789997} - J:\setup_darksiders_warmastered_edition_2.0.0.2.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {5d2ee982-374e-11e5-966b-0013d3789997} - I:\setup.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {61ee4941-2663-11e2-9ede-0013d3789997} - H:\Startme.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {91f1f14f-206e-11e4-af66-d43d7ed81a23} - J:\Launcher.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {966d6ef8-e7c0-11e1-a29d-002185151c95} - G:\Launcher.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {a51a0399-c97a-11de-84a9-0013d3789997} - F:\Setup.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {a77301c3-3173-11e5-8d6a-0013d3789997} - I:\Setup.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {af869f3c-2fe8-11e3-ab60-0013d3789997} - I:\DTLplus_Launcher.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {af869f47-2fe8-11e3-ab60-0013d3789997} - I:\Launcher.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {bfdaee99-32fd-11e7-b283-d43d7ed81a23} - J:\Lenovo_Suite.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {dba06e89-4bc6-11e5-97e1-0013d3789997} - J:\Setup.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Ribbons.scr [241664 2010-11-20] (Microsoft Corporation)
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{35BC67DE-1310-4FA4-9256-EFBD669786AC}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{4E886062-4474-46BE-AAC6-BCD118C7D70B}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{68606441-B10F-4E0B-A939-D87546567D11}: [DhcpNameServer] 192.168.44.1
Tcpip\..\Interfaces\{6A8A05F6-C967-4D66-8EDC-24F892BE4C9F}: [DhcpNameServer] 192.168.44.1
Tcpip\..\Interfaces\{9FAB9FB6-4584-4B2F-923B-7639789542D8}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{A7A974F6-5E07-4D9E-B50D-148AE30715EF}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{DD3FF764-F973-4817-B797-411774994B2D}: [DhcpNameServer] 192.168.42.129
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/en-us/ie-firstrun/win-7/ie-11/eie
URLSearchHook: HKLM-x32 -> Default = {FE69C007-C452-4d3e-86D2-1730DF8BC871}
URLSearchHook: HKU\S-1-5-21-2284712058-3252830706-2285515748-1000 -> Default = {FE69C007-C452-4d3e-86D2-1730DF8BC871}
SearchScopes: HKLM -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-2284712058-3252830706-2285515748-1000 -> DefaultScope {B1E18990-3BD8-4B1E-9DA9-E85B64D4A230} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-2284712058-3252830706-2285515748-1000 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-2284712058-3252830706-2285515748-1000 -> {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} URL = hxxp://us.search.yahoo.com/search?p={searchTerms}&fr=chr-comodo
SearchScopes: HKU\S-1-5-21-2284712058-3252830706-2285515748-1000 -> {B1E18990-3BD8-4B1E-9DA9-E85B64D4A230} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-2284712058-3252830706-2285515748-1000 -> {B2B6FEA0-8803-4CF0-98F8-A604DC967136} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_13415
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-10-09] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: şŁĚÔÄŁżéÖúĘÖ -> {97510FAC-ED50-46BF-B2A1-25F434BF1030} -> C:\Users\Tlustej\AppData\Local\htyh\application\HTDataView64.dll => No File
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-10-09] (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: şŁĚÔÄŁżéÖúĘÖ -> {97510FAC-ED50-46BF-B2A1-25F434BF1030} -> C:\Users\Tlustej\AppData\Local\htyh\application\HTDataView.dll => No File
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Go!Zilla IE Helper -> {E1FF080D-12A3-439A-A2EF-4BA95A3148E8} -> C:\Program Files (x86)\GoZilla\GozCatch.dll => No File
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2017-04-05] (Skype Technologies)
Handler: WSIEChrome - No CLSID Value
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
FireFox:
========
FF DefaultProfile: 2ue7oeuq.default-1494601511584
FF ProfilePath: C:\Users\Tlustej\AppData\Roaming\TomTom\HOME\Profiles\cb0jco2b.default [2017-07-15]
FF NewTab: TomTom\HOME\Profiles\cb0jco2b.default -> about:newtab
FF Homepage: TomTom\HOME\Profiles\cb0jco2b.default -> about:home
FF Extension: (Emulator) - C:\Users\Tlustej\AppData\Roaming\TomTom\HOME\Profiles\cb0jco2b.default\Extensions\Navcore.9.510.1234792@tomtom.com [2014-07-30] [not signed]
FF Extension: (No Name) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [not found]
FF ProfilePath: C:\Users\Tlustej\AppData\Roaming\Mozilla\Firefox\Profiles\2ue7oeuq.default-1494601511584 [2017-08-02]
FF NewTab: Mozilla\Firefox\Profiles\2ue7oeuq.default-1494601511584 -> about:newtab
FF SearchEngineOrder.3: Mozilla\Firefox\Profiles\2ue7oeuq.default-1494601511584 -> Bing
FF Homepage: Mozilla\Firefox\Profiles\2ue7oeuq.default-1494601511584 -> about:home
FF Extension: (uBlock Origin) - C:\Users\Tlustej\AppData\Roaming\Mozilla\Firefox\Profiles\2ue7oeuq.default-1494601511584\Extensions\uBlock0@raymondhill.net.xpi [2017-07-19]
FF Extension: (Greasemonkey) - C:\Users\Tlustej\AppData\Roaming\Mozilla\Firefox\Profiles\2ue7oeuq.default-1494601511584\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2017-05-12]
FF SearchPlugin: C:\Users\Tlustej\AppData\Roaming\Mozilla\Firefox\Profiles\2ue7oeuq.default-1494601511584\searchplugins\bing-.xml [2017-06-21]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_131.dll [2017-06-30] ()
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-10-09] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-10-09] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [No File]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_131.dll [2017-06-30] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @haitao.com/npHaitaoPlugin -> C:\Users\Tlustej\AppData\Local\htyh\application\htwebHelper.dll [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2284712058-3252830706-2285515748-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Tlustej\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npLegitCheckPlugin.dll [2009-02-06] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2009-11-14] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2009-11-14] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2009-11-14] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2009-11-14] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2009-11-14] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll [2009-11-14] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll [2009-11-14] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpjplug.dll [2007-12-31] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np_gp.dll [2009-09-23] (NOS Microsystems Ltd.)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\62656303.js [2017-07-15] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\62656257.js [2017-07-15] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files\mozilla firefox\62656303.cfg [2017-07-15] <==== ATTENTION
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\firefox.cfg [2013-04-10] <==== ATTENTION
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default [2017-07-26]
CHR Extension: (Prezentace Google) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-03] [UpdateUrl: hxxps://epicunitscan.info/00service/update2/crx] <==== ATTENTION
CHR Extension: (海淘1号) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\aeppgfljjlhcnnbddcccndljodpdkpdh [2017-06-30]
CHR Extension: (Dokumenty Google) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-03] [UpdateUrl: hxxps://epicunitscan.info/00service/update2/crx] <==== ATTENTION
CHR Extension: (Disk Google) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-08]
CHR Extension: (YouTube) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-08]
CHR Extension: (Vyhledávání Google) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-08]
CHR Extension: (Tabulky Google) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-03] [UpdateUrl: hxxps://epicunitscan.info/00service/update2/crx] <==== ATTENTION
CHR Extension: (System Drive) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggekjaligipajhljkbemifjgmlpcfkao [2014-11-17] [UpdateUrl: hxxps://epicunitscan.info/00service/update2/crx] <==== ATTENTION
CHR Extension: (Dokumenty Google offline) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-07]
CHR Extension: (Peněženka Google) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-03] [UpdateUrl: hxxps://epicunitscan.info/00service/update2/crx] <==== ATTENTION
CHR Extension: (Gmail) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-08]
CHR Extension: (Chrome Media Router) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-06]
CHR HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [aeppgfljjlhcnnbddcccndljodpdkpdh] - <not found>
CHR HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
Opera:
=======
OPR StartupUrls: "hxxp://whatismyip.com/"
OPR Extension: (SurfEasy Proxy, an Opera Software Company) - C:\Users\Tlustej\AppData\Roaming\Opera Software\Opera Stable\Extensions\ebpielhlnnpkiddeeacoephkilopgblc [2017-02-11]
OPR Extension: (Fast search) - C:\Users\Tlustej\AppData\Roaming\Opera Software\Opera Stable\Extensions\pbdpajcdgknpendpmecafmopknefafha [2017-07-15]
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-11-20] (Advanced Micro Devices, Inc.) [File not signed]
R2 amdacpusrsvc; C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe [121856 2017-07-04] (Advanced Micro Devices) [File not signed]
S4 cmcore; C:\Program Files (x86)\Clean Master\cmcore.exe [315208 2016-03-31] (Kingsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files (x86)\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [2291904 2017-07-03] (Disc Soft Ltd)
R2 DisplayFusionService; C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [4608040 2015-09-22] (Binary Fortress Software)
S4 GalaxyClientService; C:\Program Files (x86)\GOG-GalaxyClient\GalaxyClientService.exe [244800 2016-07-04] (GOG.com)
S4 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6506048 2016-08-12] (GOG.com)
S4 lxbk_device; C:\Windows\system32\lxbkcoms.exe [565928 2008-02-19] ( )
R2 MDM; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [335872 2006-10-26] (Microsoft Corporation) [File not signed]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22056 2013-01-27] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [379360 2013-01-27] (Microsoft Corporation)
S4 NMSAccessU; C:\Program Files (x86)\Super_DVD_Creator_9.8\NMSAccessU.exe [71096 2008-05-03] ()
S4 OkayFreedom VPN Starter Service; C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe [355328 2017-03-02] (Steganos Software GmbH)
S4 OMSI download service; C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [90112 2009-04-30] () [File not signed]
S4 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [37504 2016-10-03] (The OpenVPN Project)
S4 ovpnagent; C:\Program Files (x86)\OpenVPN Technologies\PrivateTunnel\ovpnagent.exe [949480 2016-08-29] ()
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1254736 2017-04-11] (Bitdefender)
S4 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [741640 2014-08-25] (DEVGURU Co., LTD.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10885360 2017-05-31] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S4 Wireless modem support.; C:\Program Files\Vodafone pripojeni\CMSrv.exe [100864 2010-06-24] () [File not signed]
S4 wxpSvc; C:\Program Files (x86)\webcamXP5\wService.exe [5223744 2014-01-13] (Moonware Studios)
S4 HPZebra Service; C:\Program Files (x86)\HPZebra\HPZebraSrv.exe [X]
S2 WMPNetworkSvc; "%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe" [X]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 adusbser; C:\Windows\System32\DRIVERS\adusbser.sys [154112 2009-11-06] (AnyDATA.NET INC.) [File not signed]
R2 amdacpksd; C:\Windows\system32\drivers\amdacpksd.sys [305544 2017-07-05] (Advanced Micro Devices)
R1 Amfilter; C:\Windows\System32\DRIVERS\Amfltx64.sys [12288 2007-10-15] ((Standard mouse types))
S3 Amps2prt; C:\Windows\System32\DRIVERS\Amps2x64.sys [21504 2007-10-15] ((Standard mouse types))
R3 Amusbprt; C:\Windows\System32\DRIVERS\Amusbx64.sys [17920 2008-02-13] (A4Tech Co.,Ltd.)
R1 anodlwf; C:\Windows\System32\DRIVERS\anodlwfx.sys [15872 2015-03-13] ()
R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc)
R3 DroidCam; C:\Windows\System32\DRIVERS\droidcam.sys [33592 2015-07-11] (Dev47Apps)
R3 DroidCamVideo; C:\Windows\System32\DRIVERS\droidcamvideo.sys [229432 2015-07-11] (Dev47Apps)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2017-07-15] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2017-07-15] (Disc Soft Ltd)
S3 ghsdiagMDM; C:\Windows\System32\DRIVERS\ghsdiagMDM.sys [122496 2011-11-28] (HS Incorporated)
R3 GRemoteBus; C:\Windows\System32\DRIVERS\GRemoteBus64.sys [27336 2009-08-05] (GBM Software)
S3 GRemoteJoy; C:\Windows\System32\DRIVERS\GRemoteJoy64.sys [46792 2009-08-05] (GBM Software)
S4 IObitUnlocker; C:\Program Files (x86)\IObit\IObit Unlocker\IObitUnlocker.sys [36944 2014-03-04] (IObit)
S3 ksapi64; C:\Windows\system32\drivers\ksapi64.sys [56680 2016-03-31] (Kingsoft Corporation)
R3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv_x64.sys [44928 2012-10-11] (ManyCam LLC)
S3 massfilter_hs; C:\Windows\System32\drivers\massfilter_hs.sys [11776 2010-06-28] (HandSet Incorporated)
S3 massfilter_hs; C:\Windows\SysWOW64\drivers\massfilter_hs.sys [9216 2010-06-28] (HandSet Incorporated)
R3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [28160 2013-01-31] (ManyCam LLC)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [230320 2013-01-20] (Microsoft Corporation)
R1 MpKsl17dc66d3; C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{8121D493-1081-4E48-8B1B-B6CD8FA01810}\MpKsl17dc66d3.sys [44928 2017-08-02] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [130008 2013-01-20] (Microsoft Corporation)
S3 NTIOLib_1_0_6; C:\Program Files (x86)\Setup Files\Ms7512v340\NTIOLib_X64.sys [11888 2011-01-06] (MSI) [File not signed]
S3 ptun0901; C:\Windows\System32\DRIVERS\ptun0901.sys [27136 2016-06-15] (The OpenVPN Project)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S3 s0016bus; C:\Windows\System32\DRIVERS\s0016bus.sys [115240 2008-05-16] (MCCI Corporation)
S3 s0016mdfl; C:\Windows\System32\DRIVERS\s0016mdfl.sys [19496 2008-05-16] (MCCI Corporation)
S3 s0016mdm; C:\Windows\System32\DRIVERS\s0016mdm.sys [158760 2008-05-16] (MCCI Corporation)
S3 s0016mgmt; C:\Windows\System32\DRIVERS\s0016mgmt.sys [137256 2008-05-16] (MCCI Corporation)
S3 s0016obex; C:\Windows\System32\DRIVERS\s0016obex.sys [136744 2008-05-16] (MCCI Corporation)
S3 s0016unic; C:\Windows\System32\DRIVERS\s0016unic.sys [151592 2008-05-16] (MCCI Corporation)
S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)
S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)
S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)
S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)
S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)
S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [394296 2017-07-15] (Duplex Secure Ltd.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)
S3 tapwp01; C:\Windows\System32\DRIVERS\tapwp01.sys [40664 2014-12-11] (The OpenVPN Project)
R3 tenCapture; C:\Windows\System32\DRIVERS\tenCapture.sys [23736 2012-07-20] (Hajo Krabbenhöft)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-12] (Microsoft Corporation)
R3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex)
R1 veracrypt; C:\Windows\System32\drivers\veracrypt.sys [437160 2016-09-04] (IDRIX)
R1 wfcre; C:\Windows\System32\drivers\wfcre.sys [124288 2017-07-04] ()
S3 zghsdiag; C:\Windows\System32\DRIVERS\zghsdiag.sys [122624 2010-09-08] (ZTE Incorporated)
S3 zghsdiag; C:\Windows\SysWOW64\DRIVERS\zghsdiag.sys [106752 2010-09-08] (ZTE Incorporated)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-08-02 21:40 - 2017-08-02 21:41 - 000032302 _____ C:\Users\Tlustej\Desktop\FRST.txt
2017-08-02 21:39 - 2017-08-02 21:39 - 000112640 _____ (forum.viry.cz) C:\Users\Tlustej\Desktop\FRSTLauncher.exe
2017-08-02 21:29 - 2017-08-02 21:29 - 000003640 _____ C:\Windows\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2017-08-02 21:28 - 2017-08-02 21:28 - 000000000 ____D C:\Program Files\Bitdefender Antivirus Free
2017-08-02 21:24 - 2017-08-02 21:24 - 000000134 _____ C:\Users\Tlustej\Desktop\Poradce při potížích s aplikací Internet Explorer.url
2017-08-02 21:07 - 2017-08-02 21:07 - 000000000 ___HD C:\Windows\msdownld.tmp
2017-08-02 21:05 - 2017-08-02 21:05 - 000859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2017-08-02 21:05 - 2017-08-02 21:05 - 000619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2017-08-02 20:53 - 2017-08-02 21:29 - 000000000 ____D C:\Program Files\Bitdefender Agent
2017-07-31 03:34 - 2017-08-02 21:39 - 002381312 _____ (Farbar) C:\Users\Tlustej\Desktop\FRST64.exe
2017-07-31 03:19 - 2017-07-31 03:19 - 000028272 _____ C:\Windows\system32\Drivers\TrueSight.sys
2017-07-31 03:18 - 2017-07-31 03:18 - 026543176 _____ C:\Users\Tlustej\RogueKillerX64.exe
2017-07-31 02:49 - 2017-07-31 02:49 - 000034614 _____ C:\Users\Tlustej\dds.txt
2017-07-31 02:49 - 2017-07-31 02:49 - 000012041 _____ C:\Users\Tlustej\attach.txt
2017-07-31 02:48 - 2017-07-31 02:48 - 000688992 ____R (Swearware) C:\Users\Tlustej\dds.scr
2017-07-31 02:04 - 2017-07-31 02:04 - 000001068 _____ C:\Users\Tlustej\Reset Browser Setting.lnk
2017-07-31 02:04 - 2017-07-31 02:04 - 000000976 _____ C:\Users\Tlustej\Trojan Killer.lnk
2017-07-31 02:04 - 2017-07-31 02:04 - 000000000 ____D C:\Program Files (x86)\Trojan Killer
2017-07-31 01:49 - 2017-07-31 02:28 - 000000000 ____D C:\Program Files (x86)\Security Task Manager
2017-07-30 02:35 - 2017-07-31 02:34 - 000005406 _____ C:\Users\Tlustej\1.txt
2017-07-28 12:37 - 2017-07-28 12:37 - 000001107 _____ C:\Users\Tlustej\ADATA USB Flash Drive – zástupce.lnk
2017-07-27 15:40 - 2017-07-27 15:40 - 000130525 _____ C:\Users\Tlustej\GI.txt
2017-07-26 14:32 - 2017-07-26 14:32 - 012078583 _____ C:\Users\Tlustej\Documents\Bez názvu (17).wma
2017-07-26 14:00 - 2017-07-26 14:00 - 001374423 _____ C:\Users\Tlustej\Documents\Bez názvu (16).wma
2017-07-26 13:58 - 2017-07-26 13:58 - 000431523 _____ C:\Users\Tlustej\Documents\Bez názvu (15).wma
2017-07-26 13:56 - 2017-07-26 13:56 - 000072323 _____ C:\Users\Tlustej\Documents\Bez názvu (14).wma
2017-07-20 16:54 - 2017-07-20 16:54 - 000003146 _____ C:\Windows\System32\Tasks\StartCN
2017-07-20 16:50 - 2017-07-20 16:50 - 000000000 ____D C:\Users\Tlustej\AppData\LocalLow\AMD
2017-07-20 16:46 - 2016-09-09 20:25 - 000269600 _____ C:\Windows\SysWOW64\vulkan-1.dll
2017-07-20 16:46 - 2016-09-09 20:25 - 000261920 _____ C:\Windows\system32\vulkan-1.dll
2017-07-20 16:46 - 2016-09-09 20:25 - 000110880 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2017-07-20 16:46 - 2016-09-09 20:24 - 000125216 _____ C:\Windows\system32\vulkaninfo.exe
2017-07-19 20:11 - 2017-07-19 20:13 - 000000148 _____ C:\Users\Tlustej\Documents\1.ccd
2017-07-19 20:11 - 2017-07-19 20:11 - 000000000 ____D C:\Users\Tlustej\AppData\Roaming\MouseTask
2017-07-19 19:51 - 2017-07-19 19:51 - 000000000 ____D C:\Users\Tlustej\AppData\Roaming\Ellanet
2017-07-19 19:49 - 2017-07-19 19:49 - 000002964 _____ C:\Windows\System32\Tasks\{2384C9E8-C55C-4674-B64F-37B3409C7076}
2017-07-19 19:48 - 2017-07-19 19:48 - 000002964 _____ C:\Windows\System32\Tasks\{731B47C2-B4A8-4089-8CD8-631A69279B72}
2017-07-19 19:20 - 2017-07-19 19:20 - 000001048 _____ C:\Users\Tlustej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2017-07-19 19:20 - 2017-07-19 19:20 - 000001048 _____ C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2017-07-19 19:20 - 2017-07-19 19:20 - 000001038 _____ C:\Users\Tlustej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-07-19 19:20 - 2017-07-19 19:20 - 000001038 _____ C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-07-18 16:35 - 2017-07-18 16:35 - 000000000 ____D C:\Users\Tlustej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-07-18 16:33 - 2017-07-18 16:33 - 000000000 ____D C:\Users\Tlustej\AppData\Roaming\VeraCrypt
2017-07-16 15:45 - 2017-07-16 15:45 - 000000000 ____D C:\Users\Tlustej\AppData\Roaming\A
2017-07-16 14:35 - 2017-07-16 14:35 - 000000000 ____D C:\Program Files (x86)\Skillbrains
2017-07-16 01:02 - 2017-08-02 21:11 - 000000000 ____D C:\Users\Tlustej\AppData\Roaming\Dexpot
2017-07-15 15:03 - 2017-07-15 15:03 - 000000000 ___SD C:\Windows\system32\CompatTel
2017-07-15 15:03 - 2017-07-15 15:03 - 000000000 ____D C:\Windows\system32\appraiser
2017-07-15 14:19 - 2014-07-01 00:24 - 000008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2017-07-15 14:19 - 2014-07-01 00:14 - 000008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2017-07-15 14:19 - 2014-06-06 08:16 - 000035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2017-07-15 14:19 - 2014-06-06 08:12 - 000035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2017-07-15 14:19 - 2014-03-09 23:48 - 001389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2017-07-15 14:19 - 2014-03-09 23:48 - 000171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2017-07-15 14:19 - 2014-03-09 23:47 - 000619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2017-07-15 14:19 - 2014-03-09 23:47 - 000099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2017-07-15 14:16 - 2017-07-06 06:56 - 000119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys
2017-07-15 14:16 - 2017-06-30 04:57 - 002319872 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-07-15 14:16 - 2017-06-30 04:57 - 002222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-07-15 14:16 - 2017-06-30 04:57 - 002058240 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2017-07-15 14:16 - 2017-06-30 04:57 - 000778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-07-15 14:16 - 2017-06-30 04:57 - 000491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-07-15 14:16 - 2017-06-30 04:57 - 000288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-07-15 14:16 - 2017-06-30 04:57 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-07-15 14:16 - 2017-06-30 04:57 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-07-15 14:16 - 2017-06-30 04:57 - 000075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2017-07-15 14:16 - 2017-06-30 04:57 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2017-07-15 14:16 - 2017-06-30 04:40 - 000591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-07-15 14:16 - 2017-06-30 04:40 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-07-15 14:16 - 2017-06-30 04:39 - 001549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-07-15 14:16 - 2017-06-30 04:39 - 000113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-07-15 14:16 - 2017-06-30 04:38 - 001400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-07-15 14:16 - 2017-06-30 04:38 - 001363968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Query.dll
2017-07-15 14:16 - 2017-06-30 04:38 - 000666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2017-07-15 14:16 - 2017-06-30 04:38 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2017-07-15 14:16 - 2017-06-30 04:38 - 000197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2017-07-15 14:16 - 2017-06-30 04:38 - 000104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2017-07-15 14:16 - 2017-06-30 04:38 - 000059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2017-07-15 14:16 - 2017-06-30 04:38 - 000034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2017-07-15 14:16 - 2017-06-30 04:27 - 000427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-07-15 14:16 - 2017-06-30 04:27 - 000164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2017-07-15 14:16 - 2017-06-30 04:26 - 000086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2017-07-15 14:16 - 2017-06-30 04:26 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2017-07-15 14:16 - 2017-06-22 16:58 - 003223040 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-07-15 14:16 - 2017-06-15 22:23 - 000753664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2017-07-15 14:16 - 2017-06-13 00:54 - 000370920 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2017-07-15 14:16 - 2017-06-13 00:54 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-07-15 14:16 - 2017-06-13 00:54 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-07-15 14:16 - 2017-06-13 00:49 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 001363456 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000594432 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000475136 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2017-07-15 14:16 - 2017-06-13 00:49 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000058880 _____ (Microsoft Corporation) C:\Windows\system32\pdhui.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-07-15 14:16 - 2017-06-13 00:29 - 001227264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
2017-07-15 14:16 - 2017-06-13 00:29 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-07-15 14:16 - 2017-06-13 00:29 - 000444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll
2017-07-15 14:16 - 2017-06-13 00:29 - 000390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx
2017-07-15 14:16 - 2017-06-13 00:29 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-07-15 14:16 - 2017-06-13 00:29 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-07-15 14:16 - 2017-06-13 00:29 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-07-15 14:16 - 2017-06-13 00:29 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdhui.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-07-15 14:16 - 2017-06-13 00:19 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-07-15 14:16 - 2017-06-13 00:14 - 000379392 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2017-07-15 14:16 - 2017-06-13 00:14 - 000172544 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe
2017-07-15 14:16 - 2017-06-13 00:14 - 000103936 _____ (Microsoft Corporation) C:\Windows\system32\resmon.exe
2017-07-15 14:16 - 2017-06-13 00:12 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-07-15 14:16 - 2017-06-13 00:12 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-07-15 14:16 - 2017-06-13 00:12 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-07-15 14:16 - 2017-06-13 00:11 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-07-15 14:16 - 2017-06-13 00:09 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-07-15 14:16 - 2017-06-13 00:06 - 000303616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinfo32.exe
2017-07-15 14:16 - 2017-06-13 00:06 - 000157184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfmon.exe
2017-07-15 14:16 - 2017-06-13 00:06 - 000103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resmon.exe
2017-07-15 14:16 - 2017-06-13 00:05 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-07-15 14:16 - 2017-06-10 17:59 - 000313856 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2017-07-15 14:16 - 2017-06-10 17:39 - 000271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2017-07-15 14:16 - 2017-06-09 17:33 - 001680616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-07-15 14:16 - 2017-06-06 17:30 - 001867264 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-07-15 14:16 - 2017-06-06 17:12 - 001499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-07-15 14:16 - 2017-06-02 10:10 - 000733696 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-07-15 14:16 - 2017-05-30 06:56 - 001895656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-07-15 14:16 - 2017-05-30 06:56 - 000377576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2017-07-15 14:16 - 2017-05-30 06:56 - 000287976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2017-07-15 14:16 - 2017-05-21 06:24 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2017-07-15 14:16 - 2017-05-21 06:06 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2017-07-15 14:16 - 2017-05-16 17:35 - 000986856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-07-15 14:16 - 2017-05-16 17:35 - 000265448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-07-15 14:16 - 2017-05-16 17:30 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2017-07-15 14:16 - 2017-05-12 20:27 - 000631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-07-15 14:16 - 2017-05-12 20:26 - 005547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-07-15 14:16 - 2017-05-12 20:26 - 000706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-07-15 14:16 - 2017-05-12 20:26 - 000382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-07-15 14:16 - 2017-05-12 20:24 - 001732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000806912 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:07 - 004001000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-07-15 14:16 - 2017-05-12 20:07 - 003945704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-07-15 14:16 - 2017-05-12 20:07 - 000308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-07-15 14:16 - 2017-05-12 20:04 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 19:55 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-07-15 14:16 - 2017-05-12 19:54 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-07-15 14:16 - 2017-05-12 19:54 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-07-15 14:16 - 2017-05-12 19:51 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2017-07-15 14:16 - 2017-05-12 19:50 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-07-15 14:16 - 2017-05-12 19:46 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-07-15 14:16 - 2017-05-12 19:43 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-07-15 14:16 - 2017-05-12 19:41 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2017-07-15 14:16 - 2017-05-12 19:41 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2017-07-15 14:16 - 2017-05-12 19:41 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2017-07-15 14:16 - 2017-05-12 19:41 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2017-07-15 14:16 - 2017-05-12 19:40 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 19:40 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 19:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 19:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 18:25 - 001251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2017-07-15 14:16 - 2017-05-12 17:58 - 001648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-07-15 14:16 - 2017-05-12 17:58 - 001180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-07-15 14:16 - 2017-05-10 17:33 - 000091368 _____ (Microsoft Corporation) C:\Windows\system32\MigAutoPlay.exe
2017-07-15 14:16 - 2017-05-10 17:29 - 014183936 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-07-15 14:16 - 2017-05-10 17:29 - 003165184 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2017-07-15 14:16 - 2017-05-10 17:29 - 000192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2017-07-15 14:16 - 2017-05-10 17:29 - 000098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-07-15 14:16 - 2017-05-10 17:28 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2017-07-15 14:16 - 2017-05-10 17:16 - 000091368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MigAutoPlay.exe
2017-07-15 14:16 - 2017-05-10 17:14 - 002651136 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-07-15 14:16 - 2017-05-10 17:13 - 000709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-07-15 14:16 - 2017-05-10 17:13 - 000140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-07-15 14:16 - 2017-05-10 17:13 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2017-07-15 14:16 - 2017-05-10 17:13 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2017-07-15 14:16 - 2017-05-10 17:13 - 000036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2017-07-15 14:16 - 2017-05-10 17:13 - 000012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2017-07-15 14:16 - 2017-05-10 17:12 - 012880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-07-15 14:16 - 2017-05-10 17:12 - 000174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2017-07-15 14:16 - 2017-05-10 17:00 - 000573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-07-15 14:16 - 2017-05-10 17:00 - 000093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2017-07-15 14:16 - 2017-05-10 17:00 - 000035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2017-07-15 14:16 - 2017-05-10 17:00 - 000030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2017-07-15 14:16 - 2017-05-10 16:52 - 000117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-07-15 14:16 - 2017-05-09 17:30 - 000757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-07-15 14:16 - 2017-05-09 17:29 - 000970240 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-07-15 14:16 - 2017-05-09 17:15 - 000071680 _____ C:\Windows\system32\PrintBrmUi.exe
2017-07-15 14:16 - 2017-05-09 17:11 - 000497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2017-07-15 14:16 - 2017-05-07 17:33 - 000094440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2017-07-15 14:16 - 2017-05-07 17:29 - 000011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2017-07-15 14:16 - 2017-04-28 00:50 - 003550208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2017-07-15 14:16 - 2017-04-21 17:34 - 001133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2017-07-15 14:16 - 2017-04-21 17:15 - 000805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2017-07-15 14:16 - 2017-04-17 17:37 - 002065408 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-07-15 14:16 - 2017-04-17 17:37 - 000876544 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2017-07-15 14:16 - 2017-04-17 17:37 - 000512000 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2017-07-15 14:16 - 2017-04-17 17:37 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
2017-07-15 14:16 - 2017-04-17 17:37 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
2017-07-15 14:16 - 2017-04-17 17:12 - 001417728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-07-15 14:16 - 2017-04-17 17:12 - 000581632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2017-07-15 14:16 - 2017-04-17 17:12 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll
2017-07-15 14:16 - 2017-04-17 16:54 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
2017-07-15 14:16 - 2017-04-12 17:32 - 001483776 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2017-07-15 14:16 - 2017-04-12 17:32 - 000229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2017-07-15 14:16 - 2017-04-12 17:32 - 000190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2017-07-15 14:16 - 2017-04-12 17:32 - 000141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2017-07-15 14:16 - 2017-04-12 17:26 - 000179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2017-07-15 14:16 - 2017-04-12 17:25 - 001176064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2017-07-15 14:16 - 2017-04-12 17:25 - 000145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2017-07-15 14:16 - 2017-04-12 17:25 - 000106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2017-07-15 14:16 - 2017-04-12 15:05 - 004296704 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-07-15 14:16 - 2017-04-05 16:55 - 000460800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-07-15 14:16 - 2017-04-05 16:55 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-07-15 14:16 - 2017-04-05 16:55 - 000168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-07-15 14:16 - 2017-04-04 16:53 - 000496128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2017-07-15 14:16 - 2017-03-30 17:03 - 000046080 _____ (Microsoft Corporation) C:\Windows\system32\rundll32.exe
2017-07-15 14:16 - 2017-03-30 16:58 - 000045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
2017-07-15 14:16 - 2017-03-10 18:32 - 001389056 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll
2017-07-15 14:16 - 2017-03-10 18:32 - 000300544 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2017-07-15 14:16 - 2017-03-10 18:20 - 001508352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pla.dll
2017-07-15 14:16 - 2017-03-10 18:20 - 000237056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll
2017-07-15 14:16 - 2017-03-10 17:57 - 000009216 _____ (Microsoft Corporation) C:\Windows\system32\plasrv.exe
2017-07-15 14:16 - 2017-03-10 17:55 - 000205312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2017-07-15 14:16 - 2017-03-10 17:55 - 000195584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys
2017-07-15 14:16 - 2017-03-07 18:30 - 000085504 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2017-07-15 14:16 - 2017-03-07 18:17 - 000067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2017-07-15 14:16 - 2017-03-07 16:05 - 000243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2017-07-15 14:16 - 2017-03-04 03:27 - 001574912 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2017-07-15 14:16 - 2017-03-04 03:27 - 000093696 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll
2017-07-15 14:16 - 2017-03-04 03:14 - 001329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2017-07-15 14:16 - 2017-03-04 03:14 - 000077312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmjpegdec.dll
2017-07-15 14:16 - 2017-02-09 18:32 - 000769536 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2017-07-15 14:16 - 2017-02-09 18:32 - 000106496 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2017-07-15 14:16 - 2017-02-09 18:32 - 000040960 _____ (Microsoft Corporation) C:\Windows\system32\WcsPlugInService.dll
2017-07-15 14:16 - 2017-02-09 18:31 - 000625664 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2017-07-15 14:16 - 2017-02-09 18:31 - 000250880 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll
2017-07-15 14:16 - 2017-02-09 18:14 - 000481792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll
2017-07-15 14:16 - 2017-02-09 18:14 - 000215040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icm32.dll
2017-07-15 14:16 - 2017-02-09 18:14 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2017-07-15 14:16 - 2017-02-09 17:51 - 000032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcsPlugInService.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
------
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 31-07-2017
Ran by Tlustej (administrator) on SADLO (02-08-2017 21:40:42)
Running from C:\Users\Tlustej\Desktop
Loaded Profiles: Tlustej (Available Profiles: Tlustej & Administrator & Guest)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 9 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(Advanced Micro Devices) C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
(Dexpot GbR) C:\Program Files (x86)\Dexpot\dexpot.exe
(Dexpot GbR) C:\Program Files (x86)\Dexpot\Dexpot64.exe
(Dexpot GbR) C:\Program Files (x86)\Dexpot\plugins\DexControl.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
() C:\Program Files\Mouse\Amoumain.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE
(GBM Software) C:\Program Files (x86)\mobilni_ovladani\GRemote Pro2\GRemoteServer.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2RPK.EXE
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNACBSWK.EXE
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTAgent.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.10\Lightshot.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6064.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(C. Ghisler & Co.) C:\Program Files (x86)\Total Commander\TOTALCMD.EXE
(forum.viry.cz) C:\Users\Tlustej\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [WheelMouse] => C:\Program Files\Mouse\Amoumain.exe [196608 2008-03-03] ()
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7018568 2013-02-22] (Realtek Semiconductor)
HKLM\...\Run: [CNAP2 Launcher] => C:\Windows\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [226784 2010-10-15] (CANON INC.)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2017-04-11] ()
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\Run: [GRemoteServer Pro] => C:\Program Files (x86)\mobilni_ovladani\GRemote Pro2\GRemoteServer.exe [2818016 2011-08-16] (GBM Software)
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\Run: [DisplayFusion] => C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [8538648 2015-09-22] (Binary Fortress Software)
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files (x86)\DAEMON Tools Lite\DTAgent.exe [4836032 2017-07-03] (Disc Soft Ltd)
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\Policies\system: [EnableLUA] 1
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: F - F:\Install.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: H - H:\Dungeon.EXE
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: I - I:\Setup.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {0b811c8a-68a0-11e7-b383-d43d7ed81a23} - F:\stpdh2.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {2452f58b-8546-11e6-878d-d43d7ed81a23} - H:\Lenovo_Suite.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {30284bc6-3d6e-11e2-b621-0013d3789997} - H:\Launcher.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {4dc40539-5486-11e4-89a5-d43d7ed81a23} - I:\LGAutoRun.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {5d2ee97f-374e-11e5-966b-0013d3789997} - J:\setup_darksiders_warmastered_edition_2.0.0.2.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {5d2ee982-374e-11e5-966b-0013d3789997} - I:\setup.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {61ee4941-2663-11e2-9ede-0013d3789997} - H:\Startme.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {91f1f14f-206e-11e4-af66-d43d7ed81a23} - J:\Launcher.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {966d6ef8-e7c0-11e1-a29d-002185151c95} - G:\Launcher.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {a51a0399-c97a-11de-84a9-0013d3789997} - F:\Setup.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {a77301c3-3173-11e5-8d6a-0013d3789997} - I:\Setup.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {af869f3c-2fe8-11e3-ab60-0013d3789997} - I:\DTLplus_Launcher.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {af869f47-2fe8-11e3-ab60-0013d3789997} - I:\Launcher.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {bfdaee99-32fd-11e7-b283-d43d7ed81a23} - J:\Lenovo_Suite.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\...\MountPoints2: {dba06e89-4bc6-11e5-97e1-0013d3789997} - J:\Setup.exe
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Ribbons.scr [241664 2010-11-20] (Microsoft Corporation)
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{35BC67DE-1310-4FA4-9256-EFBD669786AC}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{4E886062-4474-46BE-AAC6-BCD118C7D70B}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{68606441-B10F-4E0B-A939-D87546567D11}: [DhcpNameServer] 192.168.44.1
Tcpip\..\Interfaces\{6A8A05F6-C967-4D66-8EDC-24F892BE4C9F}: [DhcpNameServer] 192.168.44.1
Tcpip\..\Interfaces\{9FAB9FB6-4584-4B2F-923B-7639789542D8}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{A7A974F6-5E07-4D9E-B50D-148AE30715EF}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{DD3FF764-F973-4817-B797-411774994B2D}: [DhcpNameServer] 192.168.42.129
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/en-us/ie-firstrun/win-7/ie-11/eie
URLSearchHook: HKLM-x32 -> Default = {FE69C007-C452-4d3e-86D2-1730DF8BC871}
URLSearchHook: HKU\S-1-5-21-2284712058-3252830706-2285515748-1000 -> Default = {FE69C007-C452-4d3e-86D2-1730DF8BC871}
SearchScopes: HKLM -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-2284712058-3252830706-2285515748-1000 -> DefaultScope {B1E18990-3BD8-4B1E-9DA9-E85B64D4A230} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-2284712058-3252830706-2285515748-1000 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-2284712058-3252830706-2285515748-1000 -> {8EEAC88A-079B-4b2c-80C1-7836F79EB40A} URL = hxxp://us.search.yahoo.com/search?p={searchTerms}&fr=chr-comodo
SearchScopes: HKU\S-1-5-21-2284712058-3252830706-2285515748-1000 -> {B1E18990-3BD8-4B1E-9DA9-E85B64D4A230} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-2284712058-3252830706-2285515748-1000 -> {B2B6FEA0-8803-4CF0-98F8-A604DC967136} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_13415
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-10-09] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: şŁĚÔÄŁżéÖúĘÖ -> {97510FAC-ED50-46BF-B2A1-25F434BF1030} -> C:\Users\Tlustej\AppData\Local\htyh\application\HTDataView64.dll => No File
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-10-09] (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: şŁĚÔÄŁżéÖúĘÖ -> {97510FAC-ED50-46BF-B2A1-25F434BF1030} -> C:\Users\Tlustej\AppData\Local\htyh\application\HTDataView.dll => No File
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Go!Zilla IE Helper -> {E1FF080D-12A3-439A-A2EF-4BA95A3148E8} -> C:\Program Files (x86)\GoZilla\GozCatch.dll => No File
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2017-04-05] (Skype Technologies)
Handler: WSIEChrome - No CLSID Value
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
FireFox:
========
FF DefaultProfile: 2ue7oeuq.default-1494601511584
FF ProfilePath: C:\Users\Tlustej\AppData\Roaming\TomTom\HOME\Profiles\cb0jco2b.default [2017-07-15]
FF NewTab: TomTom\HOME\Profiles\cb0jco2b.default -> about:newtab
FF Homepage: TomTom\HOME\Profiles\cb0jco2b.default -> about:home
FF Extension: (Emulator) - C:\Users\Tlustej\AppData\Roaming\TomTom\HOME\Profiles\cb0jco2b.default\Extensions\Navcore.9.510.1234792@tomtom.com [2014-07-30] [not signed]
FF Extension: (No Name) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [not found]
FF ProfilePath: C:\Users\Tlustej\AppData\Roaming\Mozilla\Firefox\Profiles\2ue7oeuq.default-1494601511584 [2017-08-02]
FF NewTab: Mozilla\Firefox\Profiles\2ue7oeuq.default-1494601511584 -> about:newtab
FF SearchEngineOrder.3: Mozilla\Firefox\Profiles\2ue7oeuq.default-1494601511584 -> Bing
FF Homepage: Mozilla\Firefox\Profiles\2ue7oeuq.default-1494601511584 -> about:home
FF Extension: (uBlock Origin) - C:\Users\Tlustej\AppData\Roaming\Mozilla\Firefox\Profiles\2ue7oeuq.default-1494601511584\Extensions\uBlock0@raymondhill.net.xpi [2017-07-19]
FF Extension: (Greasemonkey) - C:\Users\Tlustej\AppData\Roaming\Mozilla\Firefox\Profiles\2ue7oeuq.default-1494601511584\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2017-05-12]
FF SearchPlugin: C:\Users\Tlustej\AppData\Roaming\Mozilla\Firefox\Profiles\2ue7oeuq.default-1494601511584\searchplugins\bing-.xml [2017-06-21]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_131.dll [2017-06-30] ()
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-10-09] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-10-09] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [No File]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_131.dll [2017-06-30] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @haitao.com/npHaitaoPlugin -> C:\Users\Tlustej\AppData\Local\htyh\application\htwebHelper.dll [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2284712058-3252830706-2285515748-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Tlustej\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npLegitCheckPlugin.dll [2009-02-06] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2009-11-14] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2009-11-14] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2009-11-14] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2009-11-14] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2009-11-14] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll [2009-11-14] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll [2009-11-14] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpjplug.dll [2007-12-31] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np_gp.dll [2009-09-23] (NOS Microsystems Ltd.)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\62656303.js [2017-07-15] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\62656257.js [2017-07-15] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files\mozilla firefox\62656303.cfg [2017-07-15] <==== ATTENTION
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\firefox.cfg [2013-04-10] <==== ATTENTION
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default [2017-07-26]
CHR Extension: (Prezentace Google) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-03] [UpdateUrl: hxxps://epicunitscan.info/00service/update2/crx] <==== ATTENTION
CHR Extension: (海淘1号) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\aeppgfljjlhcnnbddcccndljodpdkpdh [2017-06-30]
CHR Extension: (Dokumenty Google) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-03] [UpdateUrl: hxxps://epicunitscan.info/00service/update2/crx] <==== ATTENTION
CHR Extension: (Disk Google) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-08]
CHR Extension: (YouTube) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-08]
CHR Extension: (Vyhledávání Google) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-08]
CHR Extension: (Tabulky Google) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-03] [UpdateUrl: hxxps://epicunitscan.info/00service/update2/crx] <==== ATTENTION
CHR Extension: (System Drive) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggekjaligipajhljkbemifjgmlpcfkao [2014-11-17] [UpdateUrl: hxxps://epicunitscan.info/00service/update2/crx] <==== ATTENTION
CHR Extension: (Dokumenty Google offline) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-07]
CHR Extension: (Peněženka Google) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-03] [UpdateUrl: hxxps://epicunitscan.info/00service/update2/crx] <==== ATTENTION
CHR Extension: (Gmail) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-08]
CHR Extension: (Chrome Media Router) - C:\Users\Tlustej\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-06]
CHR HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [aeppgfljjlhcnnbddcccndljodpdkpdh] - <not found>
CHR HKU\S-1-5-21-2284712058-3252830706-2285515748-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
Opera:
=======
OPR StartupUrls: "hxxp://whatismyip.com/"
OPR Extension: (SurfEasy Proxy, an Opera Software Company) - C:\Users\Tlustej\AppData\Roaming\Opera Software\Opera Stable\Extensions\ebpielhlnnpkiddeeacoephkilopgblc [2017-02-11]
OPR Extension: (Fast search) - C:\Users\Tlustej\AppData\Roaming\Opera Software\Opera Stable\Extensions\pbdpajcdgknpendpmecafmopknefafha [2017-07-15]
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-11-20] (Advanced Micro Devices, Inc.) [File not signed]
R2 amdacpusrsvc; C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe [121856 2017-07-04] (Advanced Micro Devices) [File not signed]
S4 cmcore; C:\Program Files (x86)\Clean Master\cmcore.exe [315208 2016-03-31] (Kingsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files (x86)\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [2291904 2017-07-03] (Disc Soft Ltd)
R2 DisplayFusionService; C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [4608040 2015-09-22] (Binary Fortress Software)
S4 GalaxyClientService; C:\Program Files (x86)\GOG-GalaxyClient\GalaxyClientService.exe [244800 2016-07-04] (GOG.com)
S4 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6506048 2016-08-12] (GOG.com)
S4 lxbk_device; C:\Windows\system32\lxbkcoms.exe [565928 2008-02-19] ( )
R2 MDM; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [335872 2006-10-26] (Microsoft Corporation) [File not signed]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22056 2013-01-27] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [379360 2013-01-27] (Microsoft Corporation)
S4 NMSAccessU; C:\Program Files (x86)\Super_DVD_Creator_9.8\NMSAccessU.exe [71096 2008-05-03] ()
S4 OkayFreedom VPN Starter Service; C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe [355328 2017-03-02] (Steganos Software GmbH)
S4 OMSI download service; C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [90112 2009-04-30] () [File not signed]
S4 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [37504 2016-10-03] (The OpenVPN Project)
S4 ovpnagent; C:\Program Files (x86)\OpenVPN Technologies\PrivateTunnel\ovpnagent.exe [949480 2016-08-29] ()
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1254736 2017-04-11] (Bitdefender)
S4 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [741640 2014-08-25] (DEVGURU Co., LTD.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10885360 2017-05-31] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S4 Wireless modem support.; C:\Program Files\Vodafone pripojeni\CMSrv.exe [100864 2010-06-24] () [File not signed]
S4 wxpSvc; C:\Program Files (x86)\webcamXP5\wService.exe [5223744 2014-01-13] (Moonware Studios)
S4 HPZebra Service; C:\Program Files (x86)\HPZebra\HPZebraSrv.exe [X]
S2 WMPNetworkSvc; "%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe" [X]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 adusbser; C:\Windows\System32\DRIVERS\adusbser.sys [154112 2009-11-06] (AnyDATA.NET INC.) [File not signed]
R2 amdacpksd; C:\Windows\system32\drivers\amdacpksd.sys [305544 2017-07-05] (Advanced Micro Devices)
R1 Amfilter; C:\Windows\System32\DRIVERS\Amfltx64.sys [12288 2007-10-15] ((Standard mouse types))
S3 Amps2prt; C:\Windows\System32\DRIVERS\Amps2x64.sys [21504 2007-10-15] ((Standard mouse types))
R3 Amusbprt; C:\Windows\System32\DRIVERS\Amusbx64.sys [17920 2008-02-13] (A4Tech Co.,Ltd.)
R1 anodlwf; C:\Windows\System32\DRIVERS\anodlwfx.sys [15872 2015-03-13] ()
R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc)
R3 DroidCam; C:\Windows\System32\DRIVERS\droidcam.sys [33592 2015-07-11] (Dev47Apps)
R3 DroidCamVideo; C:\Windows\System32\DRIVERS\droidcamvideo.sys [229432 2015-07-11] (Dev47Apps)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2017-07-15] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2017-07-15] (Disc Soft Ltd)
S3 ghsdiagMDM; C:\Windows\System32\DRIVERS\ghsdiagMDM.sys [122496 2011-11-28] (HS Incorporated)
R3 GRemoteBus; C:\Windows\System32\DRIVERS\GRemoteBus64.sys [27336 2009-08-05] (GBM Software)
S3 GRemoteJoy; C:\Windows\System32\DRIVERS\GRemoteJoy64.sys [46792 2009-08-05] (GBM Software)
S4 IObitUnlocker; C:\Program Files (x86)\IObit\IObit Unlocker\IObitUnlocker.sys [36944 2014-03-04] (IObit)
S3 ksapi64; C:\Windows\system32\drivers\ksapi64.sys [56680 2016-03-31] (Kingsoft Corporation)
R3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv_x64.sys [44928 2012-10-11] (ManyCam LLC)
S3 massfilter_hs; C:\Windows\System32\drivers\massfilter_hs.sys [11776 2010-06-28] (HandSet Incorporated)
S3 massfilter_hs; C:\Windows\SysWOW64\drivers\massfilter_hs.sys [9216 2010-06-28] (HandSet Incorporated)
R3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [28160 2013-01-31] (ManyCam LLC)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [230320 2013-01-20] (Microsoft Corporation)
R1 MpKsl17dc66d3; C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{8121D493-1081-4E48-8B1B-B6CD8FA01810}\MpKsl17dc66d3.sys [44928 2017-08-02] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [130008 2013-01-20] (Microsoft Corporation)
S3 NTIOLib_1_0_6; C:\Program Files (x86)\Setup Files\Ms7512v340\NTIOLib_X64.sys [11888 2011-01-06] (MSI) [File not signed]
S3 ptun0901; C:\Windows\System32\DRIVERS\ptun0901.sys [27136 2016-06-15] (The OpenVPN Project)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S3 s0016bus; C:\Windows\System32\DRIVERS\s0016bus.sys [115240 2008-05-16] (MCCI Corporation)
S3 s0016mdfl; C:\Windows\System32\DRIVERS\s0016mdfl.sys [19496 2008-05-16] (MCCI Corporation)
S3 s0016mdm; C:\Windows\System32\DRIVERS\s0016mdm.sys [158760 2008-05-16] (MCCI Corporation)
S3 s0016mgmt; C:\Windows\System32\DRIVERS\s0016mgmt.sys [137256 2008-05-16] (MCCI Corporation)
S3 s0016obex; C:\Windows\System32\DRIVERS\s0016obex.sys [136744 2008-05-16] (MCCI Corporation)
S3 s0016unic; C:\Windows\System32\DRIVERS\s0016unic.sys [151592 2008-05-16] (MCCI Corporation)
S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)
S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)
S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)
S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)
S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)
S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [394296 2017-07-15] (Duplex Secure Ltd.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)
S3 tapwp01; C:\Windows\System32\DRIVERS\tapwp01.sys [40664 2014-12-11] (The OpenVPN Project)
R3 tenCapture; C:\Windows\System32\DRIVERS\tenCapture.sys [23736 2012-07-20] (Hajo Krabbenhöft)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-12] (Microsoft Corporation)
R3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex)
R1 veracrypt; C:\Windows\System32\drivers\veracrypt.sys [437160 2016-09-04] (IDRIX)
R1 wfcre; C:\Windows\System32\drivers\wfcre.sys [124288 2017-07-04] ()
S3 zghsdiag; C:\Windows\System32\DRIVERS\zghsdiag.sys [122624 2010-09-08] (ZTE Incorporated)
S3 zghsdiag; C:\Windows\SysWOW64\DRIVERS\zghsdiag.sys [106752 2010-09-08] (ZTE Incorporated)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-08-02 21:40 - 2017-08-02 21:41 - 000032302 _____ C:\Users\Tlustej\Desktop\FRST.txt
2017-08-02 21:39 - 2017-08-02 21:39 - 000112640 _____ (forum.viry.cz) C:\Users\Tlustej\Desktop\FRSTLauncher.exe
2017-08-02 21:29 - 2017-08-02 21:29 - 000003640 _____ C:\Windows\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2017-08-02 21:28 - 2017-08-02 21:28 - 000000000 ____D C:\Program Files\Bitdefender Antivirus Free
2017-08-02 21:24 - 2017-08-02 21:24 - 000000134 _____ C:\Users\Tlustej\Desktop\Poradce při potížích s aplikací Internet Explorer.url
2017-08-02 21:07 - 2017-08-02 21:07 - 000000000 ___HD C:\Windows\msdownld.tmp
2017-08-02 21:05 - 2017-08-02 21:05 - 000859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2017-08-02 21:05 - 2017-08-02 21:05 - 000619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2017-08-02 20:53 - 2017-08-02 21:29 - 000000000 ____D C:\Program Files\Bitdefender Agent
2017-07-31 03:34 - 2017-08-02 21:39 - 002381312 _____ (Farbar) C:\Users\Tlustej\Desktop\FRST64.exe
2017-07-31 03:19 - 2017-07-31 03:19 - 000028272 _____ C:\Windows\system32\Drivers\TrueSight.sys
2017-07-31 03:18 - 2017-07-31 03:18 - 026543176 _____ C:\Users\Tlustej\RogueKillerX64.exe
2017-07-31 02:49 - 2017-07-31 02:49 - 000034614 _____ C:\Users\Tlustej\dds.txt
2017-07-31 02:49 - 2017-07-31 02:49 - 000012041 _____ C:\Users\Tlustej\attach.txt
2017-07-31 02:48 - 2017-07-31 02:48 - 000688992 ____R (Swearware) C:\Users\Tlustej\dds.scr
2017-07-31 02:04 - 2017-07-31 02:04 - 000001068 _____ C:\Users\Tlustej\Reset Browser Setting.lnk
2017-07-31 02:04 - 2017-07-31 02:04 - 000000976 _____ C:\Users\Tlustej\Trojan Killer.lnk
2017-07-31 02:04 - 2017-07-31 02:04 - 000000000 ____D C:\Program Files (x86)\Trojan Killer
2017-07-31 01:49 - 2017-07-31 02:28 - 000000000 ____D C:\Program Files (x86)\Security Task Manager
2017-07-30 02:35 - 2017-07-31 02:34 - 000005406 _____ C:\Users\Tlustej\1.txt
2017-07-28 12:37 - 2017-07-28 12:37 - 000001107 _____ C:\Users\Tlustej\ADATA USB Flash Drive – zástupce.lnk
2017-07-27 15:40 - 2017-07-27 15:40 - 000130525 _____ C:\Users\Tlustej\GI.txt
2017-07-26 14:32 - 2017-07-26 14:32 - 012078583 _____ C:\Users\Tlustej\Documents\Bez názvu (17).wma
2017-07-26 14:00 - 2017-07-26 14:00 - 001374423 _____ C:\Users\Tlustej\Documents\Bez názvu (16).wma
2017-07-26 13:58 - 2017-07-26 13:58 - 000431523 _____ C:\Users\Tlustej\Documents\Bez názvu (15).wma
2017-07-26 13:56 - 2017-07-26 13:56 - 000072323 _____ C:\Users\Tlustej\Documents\Bez názvu (14).wma
2017-07-20 16:54 - 2017-07-20 16:54 - 000003146 _____ C:\Windows\System32\Tasks\StartCN
2017-07-20 16:50 - 2017-07-20 16:50 - 000000000 ____D C:\Users\Tlustej\AppData\LocalLow\AMD
2017-07-20 16:46 - 2016-09-09 20:25 - 000269600 _____ C:\Windows\SysWOW64\vulkan-1.dll
2017-07-20 16:46 - 2016-09-09 20:25 - 000261920 _____ C:\Windows\system32\vulkan-1.dll
2017-07-20 16:46 - 2016-09-09 20:25 - 000110880 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2017-07-20 16:46 - 2016-09-09 20:24 - 000125216 _____ C:\Windows\system32\vulkaninfo.exe
2017-07-19 20:11 - 2017-07-19 20:13 - 000000148 _____ C:\Users\Tlustej\Documents\1.ccd
2017-07-19 20:11 - 2017-07-19 20:11 - 000000000 ____D C:\Users\Tlustej\AppData\Roaming\MouseTask
2017-07-19 19:51 - 2017-07-19 19:51 - 000000000 ____D C:\Users\Tlustej\AppData\Roaming\Ellanet
2017-07-19 19:49 - 2017-07-19 19:49 - 000002964 _____ C:\Windows\System32\Tasks\{2384C9E8-C55C-4674-B64F-37B3409C7076}
2017-07-19 19:48 - 2017-07-19 19:48 - 000002964 _____ C:\Windows\System32\Tasks\{731B47C2-B4A8-4089-8CD8-631A69279B72}
2017-07-19 19:20 - 2017-07-19 19:20 - 000001048 _____ C:\Users\Tlustej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2017-07-19 19:20 - 2017-07-19 19:20 - 000001048 _____ C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2017-07-19 19:20 - 2017-07-19 19:20 - 000001038 _____ C:\Users\Tlustej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-07-19 19:20 - 2017-07-19 19:20 - 000001038 _____ C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-07-18 16:35 - 2017-07-18 16:35 - 000000000 ____D C:\Users\Tlustej\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-07-18 16:33 - 2017-07-18 16:33 - 000000000 ____D C:\Users\Tlustej\AppData\Roaming\VeraCrypt
2017-07-16 15:45 - 2017-07-16 15:45 - 000000000 ____D C:\Users\Tlustej\AppData\Roaming\A
2017-07-16 14:35 - 2017-07-16 14:35 - 000000000 ____D C:\Program Files (x86)\Skillbrains
2017-07-16 01:02 - 2017-08-02 21:11 - 000000000 ____D C:\Users\Tlustej\AppData\Roaming\Dexpot
2017-07-15 15:03 - 2017-07-15 15:03 - 000000000 ___SD C:\Windows\system32\CompatTel
2017-07-15 15:03 - 2017-07-15 15:03 - 000000000 ____D C:\Windows\system32\appraiser
2017-07-15 14:19 - 2014-07-01 00:24 - 000008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2017-07-15 14:19 - 2014-07-01 00:14 - 000008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2017-07-15 14:19 - 2014-06-06 08:16 - 000035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2017-07-15 14:19 - 2014-06-06 08:12 - 000035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2017-07-15 14:19 - 2014-03-09 23:48 - 001389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2017-07-15 14:19 - 2014-03-09 23:48 - 000171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2017-07-15 14:19 - 2014-03-09 23:47 - 000619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2017-07-15 14:19 - 2014-03-09 23:47 - 000099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2017-07-15 14:16 - 2017-07-06 06:56 - 000119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys
2017-07-15 14:16 - 2017-06-30 04:57 - 002319872 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-07-15 14:16 - 2017-06-30 04:57 - 002222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-07-15 14:16 - 2017-06-30 04:57 - 002058240 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2017-07-15 14:16 - 2017-06-30 04:57 - 000778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-07-15 14:16 - 2017-06-30 04:57 - 000491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-07-15 14:16 - 2017-06-30 04:57 - 000288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-07-15 14:16 - 2017-06-30 04:57 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-07-15 14:16 - 2017-06-30 04:57 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-07-15 14:16 - 2017-06-30 04:57 - 000075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2017-07-15 14:16 - 2017-06-30 04:57 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2017-07-15 14:16 - 2017-06-30 04:40 - 000591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-07-15 14:16 - 2017-06-30 04:40 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-07-15 14:16 - 2017-06-30 04:39 - 001549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-07-15 14:16 - 2017-06-30 04:39 - 000113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-07-15 14:16 - 2017-06-30 04:38 - 001400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-07-15 14:16 - 2017-06-30 04:38 - 001363968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Query.dll
2017-07-15 14:16 - 2017-06-30 04:38 - 000666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2017-07-15 14:16 - 2017-06-30 04:38 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2017-07-15 14:16 - 2017-06-30 04:38 - 000197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2017-07-15 14:16 - 2017-06-30 04:38 - 000104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2017-07-15 14:16 - 2017-06-30 04:38 - 000059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2017-07-15 14:16 - 2017-06-30 04:38 - 000034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2017-07-15 14:16 - 2017-06-30 04:27 - 000427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-07-15 14:16 - 2017-06-30 04:27 - 000164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2017-07-15 14:16 - 2017-06-30 04:26 - 000086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2017-07-15 14:16 - 2017-06-30 04:26 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2017-07-15 14:16 - 2017-06-22 16:58 - 003223040 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-07-15 14:16 - 2017-06-15 22:23 - 000753664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2017-07-15 14:16 - 2017-06-13 00:54 - 000370920 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2017-07-15 14:16 - 2017-06-13 00:54 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-07-15 14:16 - 2017-06-13 00:54 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-07-15 14:16 - 2017-06-13 00:49 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 001363456 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000594432 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000475136 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2017-07-15 14:16 - 2017-06-13 00:49 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000058880 _____ (Microsoft Corporation) C:\Windows\system32\pdhui.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-07-15 14:16 - 2017-06-13 00:49 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-07-15 14:16 - 2017-06-13 00:29 - 001227264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
2017-07-15 14:16 - 2017-06-13 00:29 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-07-15 14:16 - 2017-06-13 00:29 - 000444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll
2017-07-15 14:16 - 2017-06-13 00:29 - 000390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx
2017-07-15 14:16 - 2017-06-13 00:29 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-07-15 14:16 - 2017-06-13 00:29 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-07-15 14:16 - 2017-06-13 00:29 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-07-15 14:16 - 2017-06-13 00:29 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdhui.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-07-15 14:16 - 2017-06-13 00:28 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-07-15 14:16 - 2017-06-13 00:19 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-07-15 14:16 - 2017-06-13 00:14 - 000379392 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2017-07-15 14:16 - 2017-06-13 00:14 - 000172544 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe
2017-07-15 14:16 - 2017-06-13 00:14 - 000103936 _____ (Microsoft Corporation) C:\Windows\system32\resmon.exe
2017-07-15 14:16 - 2017-06-13 00:12 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-07-15 14:16 - 2017-06-13 00:12 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-07-15 14:16 - 2017-06-13 00:12 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-07-15 14:16 - 2017-06-13 00:11 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-07-15 14:16 - 2017-06-13 00:09 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-07-15 14:16 - 2017-06-13 00:06 - 000303616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinfo32.exe
2017-07-15 14:16 - 2017-06-13 00:06 - 000157184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfmon.exe
2017-07-15 14:16 - 2017-06-13 00:06 - 000103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resmon.exe
2017-07-15 14:16 - 2017-06-13 00:05 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-07-15 14:16 - 2017-06-10 17:59 - 000313856 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2017-07-15 14:16 - 2017-06-10 17:39 - 000271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2017-07-15 14:16 - 2017-06-09 17:33 - 001680616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-07-15 14:16 - 2017-06-06 17:30 - 001867264 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-07-15 14:16 - 2017-06-06 17:12 - 001499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-07-15 14:16 - 2017-06-02 10:10 - 000733696 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-07-15 14:16 - 2017-05-30 06:56 - 001895656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-07-15 14:16 - 2017-05-30 06:56 - 000377576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2017-07-15 14:16 - 2017-05-30 06:56 - 000287976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2017-07-15 14:16 - 2017-05-21 06:24 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2017-07-15 14:16 - 2017-05-21 06:06 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2017-07-15 14:16 - 2017-05-16 17:35 - 000986856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-07-15 14:16 - 2017-05-16 17:35 - 000265448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-07-15 14:16 - 2017-05-16 17:30 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2017-07-15 14:16 - 2017-05-12 20:27 - 000631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-07-15 14:16 - 2017-05-12 20:26 - 005547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-07-15 14:16 - 2017-05-12 20:26 - 000706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-07-15 14:16 - 2017-05-12 20:26 - 000382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-07-15 14:16 - 2017-05-12 20:24 - 001732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000806912 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:22 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:07 - 004001000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-07-15 14:16 - 2017-05-12 20:07 - 003945704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-07-15 14:16 - 2017-05-12 20:07 - 000308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-07-15 14:16 - 2017-05-12 20:04 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 20:03 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 19:55 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-07-15 14:16 - 2017-05-12 19:54 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-07-15 14:16 - 2017-05-12 19:54 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-07-15 14:16 - 2017-05-12 19:51 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2017-07-15 14:16 - 2017-05-12 19:50 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-07-15 14:16 - 2017-05-12 19:46 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-07-15 14:16 - 2017-05-12 19:43 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-07-15 14:16 - 2017-05-12 19:41 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2017-07-15 14:16 - 2017-05-12 19:41 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2017-07-15 14:16 - 2017-05-12 19:41 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2017-07-15 14:16 - 2017-05-12 19:41 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2017-07-15 14:16 - 2017-05-12 19:40 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 19:40 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 19:40 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 19:40 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2017-07-15 14:16 - 2017-05-12 18:25 - 001251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2017-07-15 14:16 - 2017-05-12 17:58 - 001648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-07-15 14:16 - 2017-05-12 17:58 - 001180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-07-15 14:16 - 2017-05-10 17:33 - 000091368 _____ (Microsoft Corporation) C:\Windows\system32\MigAutoPlay.exe
2017-07-15 14:16 - 2017-05-10 17:29 - 014183936 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-07-15 14:16 - 2017-05-10 17:29 - 003165184 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2017-07-15 14:16 - 2017-05-10 17:29 - 000192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2017-07-15 14:16 - 2017-05-10 17:29 - 000098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-07-15 14:16 - 2017-05-10 17:28 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2017-07-15 14:16 - 2017-05-10 17:16 - 000091368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MigAutoPlay.exe
2017-07-15 14:16 - 2017-05-10 17:14 - 002651136 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-07-15 14:16 - 2017-05-10 17:13 - 000709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-07-15 14:16 - 2017-05-10 17:13 - 000140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-07-15 14:16 - 2017-05-10 17:13 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2017-07-15 14:16 - 2017-05-10 17:13 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2017-07-15 14:16 - 2017-05-10 17:13 - 000036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2017-07-15 14:16 - 2017-05-10 17:13 - 000012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2017-07-15 14:16 - 2017-05-10 17:12 - 012880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-07-15 14:16 - 2017-05-10 17:12 - 000174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2017-07-15 14:16 - 2017-05-10 17:00 - 000573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-07-15 14:16 - 2017-05-10 17:00 - 000093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2017-07-15 14:16 - 2017-05-10 17:00 - 000035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2017-07-15 14:16 - 2017-05-10 17:00 - 000030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2017-07-15 14:16 - 2017-05-10 16:52 - 000117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-07-15 14:16 - 2017-05-09 17:30 - 000757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-07-15 14:16 - 2017-05-09 17:29 - 000970240 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-07-15 14:16 - 2017-05-09 17:15 - 000071680 _____ C:\Windows\system32\PrintBrmUi.exe
2017-07-15 14:16 - 2017-05-09 17:11 - 000497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2017-07-15 14:16 - 2017-05-07 17:33 - 000094440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2017-07-15 14:16 - 2017-05-07 17:29 - 000011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2017-07-15 14:16 - 2017-04-28 00:50 - 003550208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2017-07-15 14:16 - 2017-04-21 17:34 - 001133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2017-07-15 14:16 - 2017-04-21 17:15 - 000805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2017-07-15 14:16 - 2017-04-17 17:37 - 002065408 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-07-15 14:16 - 2017-04-17 17:37 - 000876544 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2017-07-15 14:16 - 2017-04-17 17:37 - 000512000 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2017-07-15 14:16 - 2017-04-17 17:37 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
2017-07-15 14:16 - 2017-04-17 17:37 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
2017-07-15 14:16 - 2017-04-17 17:12 - 001417728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-07-15 14:16 - 2017-04-17 17:12 - 000581632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2017-07-15 14:16 - 2017-04-17 17:12 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll
2017-07-15 14:16 - 2017-04-17 16:54 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
2017-07-15 14:16 - 2017-04-12 17:32 - 001483776 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2017-07-15 14:16 - 2017-04-12 17:32 - 000229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2017-07-15 14:16 - 2017-04-12 17:32 - 000190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2017-07-15 14:16 - 2017-04-12 17:32 - 000141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2017-07-15 14:16 - 2017-04-12 17:26 - 000179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2017-07-15 14:16 - 2017-04-12 17:25 - 001176064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2017-07-15 14:16 - 2017-04-12 17:25 - 000145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2017-07-15 14:16 - 2017-04-12 17:25 - 000106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2017-07-15 14:16 - 2017-04-12 15:05 - 004296704 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-07-15 14:16 - 2017-04-05 16:55 - 000460800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-07-15 14:16 - 2017-04-05 16:55 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-07-15 14:16 - 2017-04-05 16:55 - 000168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-07-15 14:16 - 2017-04-04 16:53 - 000496128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2017-07-15 14:16 - 2017-03-30 17:03 - 000046080 _____ (Microsoft Corporation) C:\Windows\system32\rundll32.exe
2017-07-15 14:16 - 2017-03-30 16:58 - 000045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
2017-07-15 14:16 - 2017-03-10 18:32 - 001389056 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll
2017-07-15 14:16 - 2017-03-10 18:32 - 000300544 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2017-07-15 14:16 - 2017-03-10 18:20 - 001508352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pla.dll
2017-07-15 14:16 - 2017-03-10 18:20 - 000237056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll
2017-07-15 14:16 - 2017-03-10 17:57 - 000009216 _____ (Microsoft Corporation) C:\Windows\system32\plasrv.exe
2017-07-15 14:16 - 2017-03-10 17:55 - 000205312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2017-07-15 14:16 - 2017-03-10 17:55 - 000195584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys
2017-07-15 14:16 - 2017-03-07 18:30 - 000085504 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2017-07-15 14:16 - 2017-03-07 18:17 - 000067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2017-07-15 14:16 - 2017-03-07 16:05 - 000243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2017-07-15 14:16 - 2017-03-04 03:27 - 001574912 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2017-07-15 14:16 - 2017-03-04 03:27 - 000093696 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll
2017-07-15 14:16 - 2017-03-04 03:14 - 001329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2017-07-15 14:16 - 2017-03-04 03:14 - 000077312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmjpegdec.dll
2017-07-15 14:16 - 2017-02-09 18:32 - 000769536 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2017-07-15 14:16 - 2017-02-09 18:32 - 000106496 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2017-07-15 14:16 - 2017-02-09 18:32 - 000040960 _____ (Microsoft Corporation) C:\Windows\system32\WcsPlugInService.dll
2017-07-15 14:16 - 2017-02-09 18:31 - 000625664 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2017-07-15 14:16 - 2017-02-09 18:31 - 000250880 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll
2017-07-15 14:16 - 2017-02-09 18:14 - 000481792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll
2017-07-15 14:16 - 2017-02-09 18:14 - 000215040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icm32.dll
2017-07-15 14:16 - 2017-02-09 18:14 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2017-07-15 14:16 - 2017-02-09 17:51 - 000032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcsPlugInService.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2017-07-15 14:16 - 2017-01-18 17:36 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
