VIRY.CZ

Logfile of random's system information tool 1.16 (written by random/random)
Run by jj at 2018-07-02 20:22:37
Microsoft Windows 10 Pro
System drive C: has 79 GB (33%) free of 238 GB
Total RAM: 3071 MB (46% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:22:47, on 2.7.2018
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.17134.0001)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\jj\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Users\jj\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files\trend micro\jj_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=12454
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8013
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_161\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_161\bin\jp2ssv.dll
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\jj\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\jj\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\jj\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} (Shockwave ActiveX Control) - https://fpdownload.macromedia.com/pub/s ... tor/sw.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Origin Web Helper Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginWebHelperService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)

--
End of file - 8985 bytes

====== Enumerating Processes ======

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\fontdrvhost.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
C:\WINDOWS\system32\svchost.exe -k RPCSS -p
C:\WINDOWS\system32\svchost.exe -k netsvcs -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p
"C:\WINDOWS\system32\nvvsvc.exe"
C:\WINDOWS\system32\svchost.exe -k LocalService -p
C:\WINDOWS\System32\svchost.exe -k NetworkService -p
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k appmodel -p
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k apphost
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
C:\WINDOWS\system32\mqsvc.exe
C:\WINDOWS\system32\svchost.exe -k iissvcs
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
C:\WINDOWS\system32\dashost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation -p
"C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\System32\WinLogon.exe -SpecialSession
C:\WINDOWS\System32\fontdrvhost.exe
C:\WINDOWS\System32\dwm.exe
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session
C:\WINDOWS\system32\sihost.exe
C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
C:\WINDOWS\system32\taskhostw.exe
C:\WINDOWS\Explorer.EXE
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
C:\Windows\System32\smartscreen.exe -Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
C:\WINDOWS\system32\browser_broker.exe -Embedding
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Windows Defender\MSASCuiL.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Users\jj\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\Users\jj\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
"C:\Users\jj\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
C:\WINDOWS\system32\AUDIODG.EXE 0x5e4
C:\WINDOWS\system32\dashost.exe
C:\WINDOWS\system32\dashost.exe
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.WindowsStore_11805.1001.42.0_x64__8wekyb3d8bbwe\WinStore.App.exe" -ServerName:App.AppXc75wvwned5vhz4xyxxecvgdjhdkgsdza.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\svchost.exe -k BcastDVRUserService
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\jj\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\jj\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\jj\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=67.0.3396.99 --initial-client-data=0x1d8,0x1dc,0x1e0,0x1d4,0x1e4,0x7ff925593228,0x7ff925593238,0x7ff925593248
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=3940 --on-initialized-event-handle=652 --parent-handle=656 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1372,9096631509661051919,11435654878738878562,131072 --gpu-preferences=KAAAAAAAAACAAwCAAQAAAAAAAAAAAGAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAKAAAAEAAAAAAAAAAAAAAACwAAABAAAAAAAAAAAQAAAAoAAAAQAAAAAAAAAAEAAAALAAAA --service-request-channel-token=25DDF2F330E2B0CF2FD313A8A5FDA89A --mojo-platform-channel-handle=1420 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1372,9096631509661051919,11435654878738878562,131072 --service-pipe-token=6F28D46E92DB59C771D5998F14599343 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --service-request-channel-token=6F28D46E92DB59C771D5998F14599343 --renderer-client-id=6 --mojo-platform-channel-handle=2344 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1372,9096631509661051919,11435654878738878562,131072 --service-pipe-token=984A4434228093E7B116DCFE2D479B5E --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --service-request-channel-token=984A4434228093E7B116DCFE2D479B5E --renderer-client-id=3 --mojo-platform-channel-handle=2380 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1372,9096631509661051919,11435654878738878562,131072 --service-pipe-token=751A7A248921E4F10E7FB83B454ECCE7 --lang=cs --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --service-request-channel-token=751A7A248921E4F10E7FB83B454ECCE7 --renderer-client-id=4 --mojo-platform-channel-handle=2740 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1372,9096631509661051919,11435654878738878562,131072 --service-pipe-token=313C3B6D6C3CE33B220244B962B134E2 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --service-request-channel-token=313C3B6D6C3CE33B220244B962B134E2 --renderer-client-id=8 --mojo-platform-channel-handle=3444 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1372,9096631509661051919,11435654878738878562,131072 --service-pipe-token=430D3A1FA0869C09B133FED24C68E37F --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --service-request-channel-token=430D3A1FA0869C09B133FED24C68E37F --renderer-client-id=11 --mojo-platform-channel-handle=4116 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1372,9096631509661051919,11435654878738878562,131072 --service-pipe-token=A4DADE44C48E430F1D7D2CE57AC29830 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --service-request-channel-token=A4DADE44C48E430F1D7D2CE57AC29830 --renderer-client-id=18 --mojo-platform-channel-handle=6600 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1372,9096631509661051919,11435654878738878562,131072 --service-pipe-token=5F804847509C5DE5B38A7193391CD531 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --service-request-channel-token=5F804847509C5DE5B38A7193391CD531 --renderer-client-id=19 --mojo-platform-channel-handle=5044 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1372,9096631509661051919,11435654878738878562,131072 --service-pipe-token=F6E7FC07203E35841FDDB4E8B157A609 --lang=cs --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=1 --service-request-channel-token=F6E7FC07203E35841FDDB4E8B157A609 --renderer-client-id=23 --mojo-platform-channel-handle=6384 /prefetch:1
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 744 748 756 8192 752
"C:\Users\jj\Downloads\RSITx64.exe"

====== Scheduled tasks folder ======

C:\WINDOWS\system32\tasks\Adobe Flash Player NPAPI Notifier - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_30_0_0_113_Plugin.exe -check plugin
C:\WINDOWS\system32\tasks\Adobe Flash Player Updater - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\system32\tasks\OneDrive Standalone Update Task-S-1-5-21-2253141340-2309542035-3164301-1000 - %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
C:\WINDOWS\system32\tasks\User_Feed_Synchronization-{7E34E83C-E88E-40EE-A69A-B74A0FA3F2FA} - C:\WINDOWS\system32\msfeedssync.exe sync
C:\WINDOWS\system32\tasks\{063790F2-F46E-4B93-A9DB-A9D514FCC90E} - C:\WINDOWS\system32\pcalua.exe -a C:\Users\jj\Downloads\neighbours-from-hell-2_1.0.exe -d C:\Users\jj\Downloads
C:\WINDOWS\system32\tasks\{29E47BE9-AA52-4C25-A73A-26E35F6D21B6} - C:\WINDOWS\system32\pcalua.exe -a C:\Users\jj\Downloads\DX81NTcze.exe -d C:\Users\jj\Downloads
C:\WINDOWS\system32\tasks\{529B748B-617D-4F21-83D2-0C5F05B94C29} - C:\WINDOWS\system32\pcalua.exe -a C:\Users\jj\Desktop\DirectX\dxsetup.exe -d C:\Users\jj\Desktop\DirectX
C:\WINDOWS\system32\tasks\{7E757880-165B-FC72-3BEF-A1052CEAE97A} - C:\WINDOWS\system32\regsvr32.exe /s /n /i:"/rt" "C:\PROGRA~3\98700878\9a99cebb.dll"
C:\WINDOWS\system32\tasks\{9A8BE5DB-2D20-5270-88C9-E129F84F8DAB} - C:\ProgramData\{8A7D27FC-3DD6-9057-66EA-3E13133766C1}\B2EB7318-0540-C4B3-E205-4116B224E677.exe /run
C:\WINDOWS\system32\tasks\{9E805134-292B-E69F-CC2A-908C2D2FFCFE} - C:\ProgramData\{08FB37C7-BF50-806C-C05E-998D3F3239BC}\981493FF-2FBF-2454-F45D-FCEFF5285E1D.exe /run
C:\WINDOWS\system32\tasks\{DA6B8569-6DC0-32C2-2A9A-FEB7AF81CD21} - C:\ProgramData\{36181486-81B3-A32D-30CC-CF02D1321DAD}\10545AD4-A7FF-ED7F-F746-0E315A445738.exe /run
C:\WINDOWS\system32\tasks\WPD\SqmUpload_S-1-5-21-2253141340-2309542035-3164301-1000 - %windir%\system32\rundll32.exe portabledeviceapi.dll,#1
C:\WINDOWS\system32\tasks\Microsoft\XblGameSave\XblGameSaveTask - %windir%\System32\XblGameSaveTask.exe standby
C:\WINDOWS\system32\tasks\Microsoft\Windows Defender\MP Scheduled Scan - c:\program files\windows defender\MpCmdRun.exe Scan -ScheduleJob -WinTask -RestrictPrivilegesScan
C:\WINDOWS\system32\tasks\Microsoft\Windows\WwanSvc\NotificationTask - %SystemRoot%\System32\WiFiTask.exe wwan
C:\WINDOWS\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join - %SystemRoot%\System32\dsregcmd.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Workplace Join\Recovery-Check - %SystemRoot%\System32\dsregcmd.exe /checkrecovery
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start - C:\WINDOWS\system32\sc.exe start wuauserv
C:\WINDOWS\system32\tasks\Microsoft\Windows\WindowsUpdate\sih - %systemroot%\System32\sihclient.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -upload
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance - C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe -IdleTask -TaskName WdCacheMaintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup - C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe -IdleTask -TaskName WdCleanup
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan - C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe Scan -ScheduleJob -ScanTrigger 55
C:\WINDOWS\system32\tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification - C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe -IdleTask -TaskName WdVerification
C:\WINDOWS\system32\tasks\Microsoft\Windows\WCM\WiFiTask - %SystemRoot%\System32\WiFiTask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Maintenance Install - %systemroot%\system32\usoclient.exe StartInstall
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval - %systemroot%\system32\MusNotification.exe Display
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Reboot - %systemroot%\system32\MusNotification.exe ReadyToReboot
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan - %systemroot%\system32\usoclient.exe StartScan
C:\WINDOWS\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_Broker_Display - %systemroot%\system32\MusNotification.exe Display
C:\WINDOWS\system32\tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr - %windir%\System32\UNP\UpdateNotificationMgr.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone - %windir%\system32\tzsync.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\WINDOWS\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
C:\WINDOWS\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
C:\WINDOWS\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation
C:\WINDOWS\system32\tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask - %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\Subscription\EnableLicenseAcquisition - %SystemRoot%\system32\ClipRenew.exe -e
C:\WINDOWS\system32\tasks\Microsoft\Windows\Subscription\LicenseAcquisition - %SystemRoot%\system32\ClipRenew.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization - %windir%\system32\defrag.exe -c -h -g -# -m 8 -i 13500
C:\WINDOWS\system32\tasks\Microsoft\Windows\Speech\HeadsetButtonPress - %windir%\system32\speech_onecore\common\SpeechRuntime.exe StartedFromTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\Speech\SpeechModelDownloadTask - %windir%\system32\speech_onecore\common\SpeechModelDownload.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SpacePort\SpaceAgentTask - %windir%\system32\SpaceAgent.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SpacePort\SpaceManagerTask - %windir%\system32\spaceman.exe /Work
C:\WINDOWS\system32\tasks\Microsoft\Windows\SMB\UninstallSMB1ClientTask - %windir%\system32\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy Unrestricted -NonInteractive -NoProfile -WindowStyle Hidden "& %windir%\system32\WindowsPowerShell\v1.0\Modules\SmbShare\DisableUnusedSmb1.ps1 -Scenario Client"
C:\WINDOWS\system32\tasks\Microsoft\Windows\SMB\UninstallSMB1ServerTask - %windir%\system32\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy Unrestricted -NonInteractive -NoProfile -WindowStyle Hidden "& %windir%\system32\WindowsPowerShell\v1.0\Modules\SmbShare\DisableUnusedSmb1.ps1 -Scenario Server"
C:\WINDOWS\system32\tasks\Microsoft\Windows\Shell\FamilySafetyMonitor - %windir%\System32\wpcmon.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\SharedPC\Account Cleanup - %windir%\System32\rundll32.exe %windir%\System32\Windows.SharedPC.AccountManager.dll,StartMaintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\Setup\Notifier - %windir%\system32\Notifier.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\rempl\shell-usoscan - %ProgramFiles%\rempl\remsh.exe /RunUsoScanOnly
C:\WINDOWS\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\WINDOWS\system32\tasks\Microsoft\Windows\PushToInstall\LoginCheck - %windir%\system32\sc.exe start pushtoinstall login
C:\WINDOWS\system32\tasks\Microsoft\Windows\PushToInstall\Registration - %windir%\system32\sc.exe start pushtoinstall registration
C:\WINDOWS\system32\tasks\Microsoft\Windows\Printing\EduPrintProv - %windir%\system32\eduprintprov.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - %SystemRoot%\System32\drvinst.exe 6
C:\WINDOWS\system32\tasks\Microsoft\Windows\NlaSvc\WiFiTask - %SystemRoot%\System32\WiFiTask.exe nla
C:\WINDOWS\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\WINDOWS\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - %SystemRoot%\System32\MbaeParserTask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch
C:\WINDOWS\system32\tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService - %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService
C:\WINDOWS\system32\tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks - %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0)
C:\WINDOWS\system32\tasks\Microsoft\Windows\Media Center\ehDRMInit - %SystemRoot%\ehome\ehPrivJob.exe /DRMInit
C:\WINDOWS\system32\tasks\Microsoft\Windows\Media Center\InstallPlayReady - %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0)
C:\WINDOWS\system32\tasks\Microsoft\Windows\Media Center\mcupdate - %SystemRoot%\ehome\mcupdate $(Arg0)
C:\WINDOWS\system32\tasks\Microsoft\Windows\Media Center\mcupdate_scheduled - %SystemRoot%\ehome\mcupdate -crl -hms -pscn 15
C:\WINDOWS\system32\tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\Media Center\OCURActivate - %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate
C:\WINDOWS\system32\tasks\Microsoft\Windows\Media Center\OCURDiscovery - %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0)
C:\WINDOWS\system32\tasks\Microsoft\Windows\Media Center\PBDADiscovery - %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery
C:\WINDOWS\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 - %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery
C:\WINDOWS\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 - %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery
C:\WINDOWS\system32\tasks\Microsoft\Windows\Media Center\PeriodicScanRetry - %windir%\ehome\MCUpdate.exe -pscn 0
C:\WINDOWS\system32\tasks\Microsoft\Windows\Media Center\PvrRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\Media Center\PvrScheduleTask - %SystemRoot%\ehome\mcupdate.exe -PvrSchedule
C:\WINDOWS\system32\tasks\Microsoft\Windows\Media Center\RecordingRestart - %SystemRoot%\ehome\ehrec /RestartRecording
C:\WINDOWS\system32\tasks\Microsoft\Windows\Media Center\RegisterSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0)
C:\WINDOWS\system32\tasks\Microsoft\Windows\Media Center\ReindexSearchRoot - %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot
C:\WINDOWS\system32\tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\Media Center\StartRecording - %SystemRoot%\ehome\ehrec /StartRecording
C:\WINDOWS\system32\tasks\Microsoft\Windows\Media Center\UpdateRecordPath - %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)
C:\WINDOWS\system32\tasks\Microsoft\Windows\Management\Provisioning\Cellular - %windir%\system32\ProvTool.exe /turn 7 /source CellStateChangeTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\Management\Provisioning\Logon - %windir%\system32\ProvTool.exe /turn 5 /source LogonIdleTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotificationWindows.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Location\WindowsActionDialog - %windir%\System32\WindowsActionDialog.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\HelloFace\FODCleanupTask - %WinDir%\System32\WinBioPlugIns\FaceFodUninstaller.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClient - %windir%\system32\dmclient.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload - %windir%\system32\dmclient.exe utcwnf
C:\WINDOWS\system32\tasks\Microsoft\Windows\EnterpriseMgmt\MDMMaintenenceTask - %windir%\system32\MDMAgent.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DUSM\dusmtask - %SystemRoot%\System32\dusmtask.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskFootprint\Diagnostics - %windir%\system32\disksnapshot.exe -z
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\DiskCleanup\SilentCleanup - %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
C:\WINDOWS\system32\tasks\Microsoft\Windows\DirectX\DXGIAdapterCache - %windir%\system32\dxgiadaptercache.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Device Information\Device - %windir%\system32\devicecensus.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c -h -o -$
C:\WINDOWS\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Clip\License Validation - %SystemRoot%\system32\ClipUp.exe -p -s -o
C:\WINDOWS\system32\tasks\Microsoft\Windows\Chkdsk\SyspartRepair - %windir%\system32\bcdboot.exe %windir% /sysrepair
C:\WINDOWS\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\WINDOWS\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup - %windir%\system32\rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierdaily - %windir%\system32\AppHostRegistrationVerifier.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\appuriverifierinstall - %windir%\system32\AppHostRegistrationVerifier.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState - %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
C:\WINDOWS\system32\tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup - %windir%\system32\dstokenclean.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - %windir%\system32\compattelrunner.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\compattelrunner.exe -maintenance
C:\WINDOWS\system32\tasks\Microsoft\Windows\Application Experience\StartupAppTask - %windir%\system32\rundll32.exe Startupscan.dll,SusRunTask
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\WINDOWS\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\jj\AppData\Roaming\Mozilla\Firefox\Profiles\fr1uthbk.default

prefs.js - "browser.search.useDBForOrder" - true

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 30.0.0.113 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_30_0_0_113.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1224194.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.161.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.161.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_161\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 30.0.0.113 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_30_0_0_113.dll


C:\Program Files (x86)\Mozilla Firefox\plugins\
np32dsw.dll
ShockwavePlugin.class

C:\Users\jj\AppData\Roaming\Mozilla\Firefox\Profiles\fr1uthbk.default\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}

C:\Users\jj\AppData\Roaming\Mozilla\Firefox\Profiles\fr1uthbk.default\addons.json
Firefox Hello Beta (discontinued) - extension - loop@mozilla.org
Mozilla Firefox hotfix - extension - firefox-hotfix@mozilla.org

C:\Users\jj\AppData\Roaming\Mozilla\Firefox\Profiles\fr1uthbk.default\extensions.json
Firefox Hello - extension - loop@mozilla.org - C:\Program Files (x86)\Mozilla Firefox\browser\features\loop@mozilla.org.xpi
Multi-process staged rollout - extension - e10srollout@mozilla.org - C:\Program Files (x86)\Mozilla Firefox\browser\features\e10srollout@mozilla.org.xpi
Pocket - extension - firefox@getpocket.com - C:\Program Files (x86)\Mozilla Firefox\browser\features\firefox@getpocket.com.xpi
Default - theme - {972ce4c6-7e08-4474-a285-3208198ce6fd} - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi
Seznam lištička - extension - {ea614400-e918-4741-9a97-7a972ff7c30b} - C:\Users\jj\AppData\Roaming\Mozilla\Firefox\Profiles\fr1uthbk.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}

C:\Users\jj\AppData\Roaming\Mozilla\Firefox\Profiles\fr1uthbk.default\pluginreg.dat
Plugin - Google Update - 1.3.33.17 - C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll
Plugin - Java(TM) Platform SE 8 U161 - 11.161.2.12 - C:\Program Files (x86)\Java\jre1.8.0_161\bin\plugin2\npjp2.dll
Plugin - Java Deployment Toolkit 8.0.1610.12 - 11.161.2.12 - C:\Program Files (x86)\Java\jre1.8.0_161\bin\dtplugin\npdeployJava1.dll
Plugin - Shockwave for Director - 12.2.4.194 - C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1224194.dll
Plugin - Shockwave Flash - 30.0.0.113 - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_30_0_0_113.dll
Plugin - Unity Player - 5.3.3.3441 - C:\Users\jj\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll

=========Google Chrome=========

C:\Users\jj\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension aapocclcgogkmnckokdopfmhonfmgoek 1 Prezentace 0.10
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Obchod Chrome 0.2
Extension aohghmighlieiainnegkcijnfilokake 1 Dokumenty 0.10
Extension apdfllckaahabafndbhieahigkjlhalf 1 Disk Google 14.1
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension bgjpfhpjcgdppjbgnpnjllokbmcdllig 1 Seznam doplněk - Email 4.2.4
Extension blmojkbhnkkphngknkmgccmlenfaelkd 0 Seznam doplněk - Esko- 4.2.4
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension cpmnhbncebjjpeligahihhphgkkblldl 1 Online Football Manager 1
Extension dogdoihocdkadpalbghcpfafbojcfofa 0 My Start - Stunning Scenery Wallpapers 2.17.0
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension ennkphjdgehloodpbhlhldgbnhmacadg 1 Settings 0.2
Extension felcaaldnbdncclmgdcncolpebgiejap 1 Tabulky 1.2
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi 1 Dokumenty Google offline 1.4
Extension heglpchjbjmchcmenfopoohbdibnnfap 0 Penaltovém Rozstřelu 2010 1.0
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.73
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mfffpogegjflfpflabcdkioaeobkgjik 1 GaiaAuthExtension 0.0.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf 1 Chrome 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.8
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.4
Extension olfeabkoenfaoljndfecamgilllcpiak 1 Seznam doplněk - Esko 4.2.4
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 6718.423.0.0
Homepage:
default_search_provider.search_url:
C:\Users\jj\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage:
default_search_provider.search_url:

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dogdoihocdkadpalbghcpfafbojcfofa]
"Path"=


======Registry dump ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_161\bin\ssv.dll [2018-03-25 474688]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_161\bin\jp2ssv.dll [2018-03-25 188992]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2018-04-12 638872]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2016-04-05 2397752]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2016-04-05 1767432]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-06-18 14021336]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\jj\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2018-06-20 1628840]
"EADM"=C:\Program Files (x86)\Origin\Origin.exe [2018-06-20 3106600]
"cz.seznam.software.autoupdate"=C:\Users\jj\AppData\Roaming\Seznam.cz\szninstall.exe [2018-03-27 1069296]
"cz.seznam.software.szndesktop"=C:\Users\jj\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2018-03-27 109808]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2017-12-19 587288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders" = credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"DSCAutomationHostEnabled"=2
"EnableCursorSuppression"=1
"EnableFullTrustStartupTasks"=2
"EnableUIADesktopToggle"=0
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1
"undockwithoutlogon"=1
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"StubPath" = "C:\Program Files (x86)\Google\Chrome\Application\67.0.3396.99\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

====== File associations ======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== List of files/folders created in the last 1 month ======

2018-07-02 20:22:37 ----D---- C:\rsit
2018-07-02 19:55:45 ----D---- C:\Program Files\Realtek
2018-07-02 19:55:03 ----A---- C:\WINDOWS\system32\YamahaAE2.dll
2018-07-02 19:55:03 ----A---- C:\WINDOWS\system32\YamahaAE.dll
2018-07-02 19:55:02 ----A---- C:\WINDOWS\system32\WavesGUILib64.dll
2018-07-02 19:55:02 ----A---- C:\WINDOWS\system32\tossaemaxapo64.dll
2018-07-02 19:55:01 ----A---- C:\WINDOWS\system32\tossaeapo64.dll
2018-07-02 19:55:01 ----A---- C:\WINDOWS\system32\toseaeapo64.dll
2018-07-02 19:55:01 ----A---- C:\WINDOWS\system32\tosasfapo64.dll
2018-07-02 19:55:01 ----A---- C:\WINDOWS\system32\tosade.dll
2018-07-02 19:55:01 ----A---- C:\WINDOWS\system32\tepeqapo64.dll
2018-07-02 19:55:00 ----A---- C:\WINDOWS\system32\tadefxapo264.dll
2018-07-02 19:55:00 ----A---- C:\WINDOWS\system32\tadefxapo.dll
2018-07-02 19:55:00 ----A---- C:\WINDOWS\system32\SRSWOW64.dll
2018-07-02 19:55:00 ----A---- C:\WINDOWS\system32\SRSTSX64.dll
2018-07-02 19:55:00 ----A---- C:\WINDOWS\system32\SRSTSH64.dll
2018-07-02 19:55:00 ----A---- C:\WINDOWS\system32\SRSHP64.dll
2018-07-02 19:55:00 ----A---- C:\WINDOWS\system32\SRRPTR64.dll
2018-07-02 19:54:59 ----A---- C:\WINDOWS\SYSWOW64\SRCOM.dll
2018-07-02 19:54:59 ----A---- C:\WINDOWS\system32\SRCOM64.dll
2018-07-02 19:54:59 ----A---- C:\WINDOWS\system32\SRCOM.dll
2018-07-02 19:54:59 ----A---- C:\WINDOWS\system32\SRAPO64.dll
2018-07-02 19:54:58 ----A---- C:\WINDOWS\system32\sltech64.dll
2018-07-02 19:54:58 ----A---- C:\WINDOWS\system32\slprp64.dll
2018-07-02 19:54:56 ----A---- C:\WINDOWS\system32\slcnt64.dll
2018-07-02 19:54:56 ----A---- C:\WINDOWS\system32\sl3apo64.dll
2018-07-02 19:54:55 ----A---- C:\WINDOWS\SYSWOW64\SFCOM.dll
2018-07-02 19:54:55 ----A---- C:\WINDOWS\system32\SFSS_APO.dll
2018-07-02 19:54:55 ----A---- C:\WINDOWS\system32\SFNHK64.dll
2018-07-02 19:54:55 ----A---- C:\WINDOWS\system32\SFCOM64.dll
2018-07-02 19:54:55 ----A---- C:\WINDOWS\system32\SFAPO64.dll
2018-07-02 19:54:54 ----A---- C:\WINDOWS\SYSWOW64\SECOMN32.DLL
2018-07-02 19:54:54 ----A---- C:\WINDOWS\system32\SEHDRA64.dll
2018-07-02 19:54:54 ----A---- C:\WINDOWS\system32\SECOMN64.dll
2018-07-02 19:54:54 ----A---- C:\WINDOWS\system32\SEAPO64.dll
2018-07-02 19:54:53 ----A---- C:\WINDOWS\system32\RtPgEx64.dll
2018-07-02 19:54:53 ----A---- C:\WINDOWS\system32\RtlCPAPI64.dll
2018-07-02 19:54:53 ----A---- C:\WINDOWS\system32\drivers\rtvienna.dat
2018-07-02 19:54:52 ----A---- C:\WINDOWS\system32\drivers\RTKVHD64.sys
2018-07-02 19:54:51 ----A---- C:\WINDOWS\system32\drivers\rtkSSTsetting.dat
2018-07-02 19:54:50 ----A---- C:\WINDOWS\system32\RtkCoLDR64.dll
2018-07-02 19:54:50 ----A---- C:\WINDOWS\system32\RtkCfg64.dll
2018-07-02 19:54:50 ----A---- C:\WINDOWS\system32\RtkApi64.dll
2018-07-02 19:54:49 ----A---- C:\WINDOWS\system32\RTEEP64A.dll
2018-07-02 19:54:49 ----A---- C:\WINDOWS\system32\RTEEL64A.dll
2018-07-02 19:54:49 ----A---- C:\WINDOWS\system32\RTEEG64A.dll
2018-07-02 19:54:49 ----A---- C:\WINDOWS\system32\RTEED64A.dll
2018-07-02 19:54:49 ----A---- C:\WINDOWS\system32\RtDataProc64.dll
2018-07-02 19:54:48 ----A---- C:\WINDOWS\system32\RTCOM64.dll
2018-07-02 19:54:48 ----A---- C:\WINDOWS\system32\RP3DHT64.dll
2018-07-02 19:54:48 ----A---- C:\WINDOWS\system32\drivers\RTAIODAT.DAT
2018-07-02 19:54:47 ----A---- C:\WINDOWS\system32\RP3DAA64.dll
2018-07-02 19:54:47 ----A---- C:\WINDOWS\system32\RltkAPO64.dll
2018-07-02 19:54:46 ----A---- C:\WINDOWS\SYSWOW64\RltkAPO.dll
2018-07-02 19:54:36 ----A---- C:\WINDOWS\system32\RCoRes64.dat
2018-07-02 19:54:35 ----A---- C:\WINDOWS\system32\RCoInstII64.dll
2018-07-02 19:54:34 ----A---- C:\WINDOWS\system32\R4EEP64A.dll
2018-07-02 19:54:32 ----A---- C:\WINDOWS\system32\R4EEL64A.dll
2018-07-02 19:54:32 ----A---- C:\WINDOWS\system32\R4EEG64A.dll
2018-07-02 19:54:32 ----A---- C:\WINDOWS\system32\R4EED64A.dll
2018-07-02 19:54:32 ----A---- C:\WINDOWS\system32\R4EEA64A.dll
2018-07-02 19:54:31 ----A---- C:\WINDOWS\system32\NAHIMICV2apo.dll
2018-07-02 19:54:31 ----A---- C:\WINDOWS\system32\NahimicAPONSControl.dll
2018-07-02 19:54:31 ----A---- C:\WINDOWS\system32\NAHIMICAPOlfx.dll
2018-07-02 19:54:30 ----A---- C:\WINDOWS\system32\MISS_APO.dll
2018-07-02 19:54:28 ----A---- C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
2018-07-02 19:54:27 ----A---- C:\WINDOWS\system32\MaxxVoiceAPO4064.dll
2018-07-02 19:54:25 ----A---- C:\WINDOWS\system32\MaxxVoiceAPO3064.dll
2018-07-02 19:54:21 ----A---- C:\WINDOWS\system32\MaxxVoiceAPO2064.dll
2018-07-02 19:54:21 ----A---- C:\WINDOWS\system32\MaxxSpeechAPO64.dll
2018-07-02 19:54:19 ----A---- C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2018-07-02 19:54:15 ----A---- C:\WINDOWS\system32\MaxxAudioEQ64.dll
2018-07-02 19:54:14 ----A---- C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2018-07-02 19:54:14 ----A---- C:\WINDOWS\system32\MaxxAudioAPO7064.dll
2018-07-02 19:54:13 ----A---- C:\WINDOWS\system32\MaxxAudioAPO6064.dll
2018-07-02 19:54:12 ----A---- C:\WINDOWS\system32\MaxxAudioAPO5064.dll
2018-07-02 19:54:12 ----A---- C:\WINDOWS\system32\MaxxAudioAPO4064.dll
2018-07-02 19:54:12 ----A---- C:\WINDOWS\system32\MaxxAudioAPO30.dll
2018-07-02 19:54:12 ----A---- C:\WINDOWS\system32\MaxxAudioAPO20.dll
2018-07-02 19:54:10 ----A---- C:\WINDOWS\system32\KAAPORT64.dll
2018-07-02 19:54:10 ----A---- C:\WINDOWS\system32\IntelSstCApoPropPage.dll
2018-07-02 19:54:10 ----A---- C:\WINDOWS\system32\IntelSSTAPO.dll
2018-07-02 19:54:10 ----A---- C:\WINDOWS\system32\ICEsoundAPO64.dll
2018-07-02 19:54:09 ----A---- C:\WINDOWS\system32\HiFiDAX2API.dll
2018-07-02 19:53:50 ----A---- C:\WINDOWS\system32\FMAPO64.dll
2018-07-02 19:53:49 ----A---- C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2018-07-02 19:53:49 ----A---- C:\WINDOWS\system32\DTSU2PREC64.dll
2018-07-02 19:53:49 ----A---- C:\WINDOWS\system32\DTSU2PLFX64.dll
2018-07-02 19:53:49 ----A---- C:\WINDOWS\system32\DTSU2PGFX64.dll
2018-07-02 19:53:48 ----A---- C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2018-07-02 19:53:48 ----A---- C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2018-07-02 19:53:47 ----A---- C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2018-07-02 19:53:47 ----A---- C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2018-07-02 19:53:47 ----A---- C:\WINDOWS\system32\DTSLimiterDLL64.dll
2018-07-02 19:53:46 ----A---- C:\WINDOWS\system32\DTSLFXAPO64.dll
2018-07-02 19:53:46 ----A---- C:\WINDOWS\system32\DTSGFXAPONS64.dll
2018-07-02 19:53:46 ----A---- C:\WINDOWS\system32\DTSGFXAPO64.dll
2018-07-02 19:53:45 ----A---- C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2018-07-02 19:53:45 ----A---- C:\WINDOWS\system32\DTSBoostDLL64.dll
2018-07-02 19:53:45 ----A---- C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2018-07-02 19:53:44 ----A---- C:\WINDOWS\system32\DolbyDAX2APOv211.dll
2018-07-02 19:53:43 ----A---- C:\WINDOWS\system32\DolbyDAX2APOv201.dll
2018-07-02 19:53:43 ----A---- C:\WINDOWS\system32\DolbyDAX2APOProp.dll
2018-07-02 19:53:40 ----A---- C:\WINDOWS\system32\DDPP64AF3.dll
2018-07-02 19:53:39 ----A---- C:\WINDOWS\system32\DDPP64A.dll
2018-07-02 19:53:38 ----A---- C:\WINDOWS\system32\DDPO64AF3.dll
2018-07-02 19:53:37 ----A---- C:\WINDOWS\system32\DDPO64A.dll
2018-07-02 19:53:33 ----A---- C:\WINDOWS\system32\DDPD64AF3.dll
2018-07-02 19:53:33 ----A---- C:\WINDOWS\system32\DDPD64A.dll
2018-07-02 19:53:33 ----A---- C:\WINDOWS\system32\DDPA64F3.dll
2018-07-02 19:53:32 ----A---- C:\WINDOWS\system32\DDPA64.dll
2018-07-02 19:53:31 ----A---- C:\WINDOWS\system32\CX64APO.dll
2018-07-02 19:53:30 ----A---- C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2018-07-02 19:53:29 ----A---- C:\WINDOWS\system32\audioLibVc.dll
2018-07-02 19:53:28 ----A---- C:\WINDOWS\system32\AERTAR64.dll
2018-07-02 19:53:28 ----A---- C:\WINDOWS\system32\AERTAC64.dll
2018-07-02 19:53:28 ----A---- C:\WINDOWS\system32\AcpiServiceVnA64.dll
2018-07-02 19:39:08 ----D---- C:\WINDOWS\LastGood.Tmp
2018-06-15 16:48:43 ----A---- C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-06-15 16:48:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Protection.PlayReady.dll
2018-06-15 16:48:37 ----A---- C:\WINDOWS\system32\edgehtml.dll
2018-06-15 16:48:34 ----A---- C:\WINDOWS\system32\mshtml.dll
2018-06-15 16:48:32 ----A---- C:\WINDOWS\system32\Hydrogen.dll
2018-06-15 16:48:27 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2018-06-15 16:48:24 ----A---- C:\WINDOWS\system32\sppsvc.exe
2018-06-15 16:48:22 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-06-15 16:48:21 ----A---- C:\WINDOWS\system32\windows.storage.dll
2018-06-15 16:48:20 ----A---- C:\WINDOWS\system32\shell32.dll
2018-06-15 16:48:17 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2018-06-15 16:48:15 ----A---- C:\WINDOWS\SYSWOW64\edgehtml.dll
2018-06-15 16:48:12 ----A---- C:\WINDOWS\SYSWOW64\AppVEntSubsystems32.dll
2018-06-15 16:48:11 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2018-06-15 16:48:10 ----A---- C:\WINDOWS\system32\tquery.dll
2018-06-15 16:48:09 ----A---- C:\WINDOWS\system32\cdp.dll
2018-06-15 16:48:08 ----A---- C:\WINDOWS\system32\Chakra.dll
2018-06-15 16:48:08 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2018-06-15 16:48:06 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2018-06-15 16:48:05 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2vdec.dll
2018-06-15 16:48:05 ----A---- C:\WINDOWS\system32\WebRuntimeManager.dll
2018-06-15 16:48:05 ----A---- C:\WINDOWS\system32\msmpeg2vdec.dll
2018-06-15 16:48:05 ----A---- C:\WINDOWS\system32\msmpeg2adec.dll
2018-06-15 16:48:05 ----A---- C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-06-15 16:48:04 ----A---- C:\WINDOWS\SYSWOW64\msmpeg2adec.dll
2018-06-15 16:48:04 ----A---- C:\WINDOWS\system32\Windows.UI.Logon.dll
2018-06-15 16:48:04 ----A---- C:\WINDOWS\system32\ieframe.dll
2018-06-15 16:48:03 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2018-06-15 16:48:03 ----A---- C:\WINDOWS\system32\EdgeContent.dll
2018-06-15 16:48:02 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2018-06-15 16:48:02 ----A---- C:\WINDOWS\system32\jscript9.dll
2018-06-15 16:48:01 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.dll
2018-06-15 16:48:00 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2018-06-15 16:48:00 ----A---- C:\WINDOWS\SYSWOW64\mfasfsrcsnk.dll
2018-06-15 16:47:59 ----A---- C:\WINDOWS\system32\SettingsHandlers_nt.dll
2018-06-15 16:47:59 ----A---- C:\WINDOWS\system32\mfnetsrc.dll
2018-06-15 16:47:58 ----A---- C:\WINDOWS\system32\Windows.Mirage.dll
2018-06-15 16:47:58 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2018-06-15 16:47:57 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2018-06-15 16:47:56 ----A---- C:\WINDOWS\SYSWOW64\Chakra.dll
2018-06-15 16:47:55 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2018-06-15 16:47:55 ----A---- C:\WINDOWS\system32\win32kfull.sys
2018-06-15 16:47:55 ----A---- C:\WINDOWS\system32\combase.dll
2018-06-15 16:47:54 ----A---- C:\WINDOWS\system32\OpcServices.dll
2018-06-15 16:47:53 ----A---- C:\WINDOWS\system32\mfcore.dll
2018-06-15 16:47:53 ----A---- C:\WINDOWS\system32\mfasfsrcsnk.dll
2018-06-15 16:47:53 ----A---- C:\WINDOWS\system32\CoreUIComponents.dll
2018-06-15 16:47:52 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2018-06-15 16:47:52 ----A---- C:\WINDOWS\system32\wlidsvc.dll
2018-06-15 16:47:51 ----A---- C:\WINDOWS\SYSWOW64\windows.storage.dll
2018-06-15 16:47:51 ----A---- C:\WINDOWS\SYSWOW64\mfnetsrc.dll
2018-06-15 16:47:51 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2018-06-15 16:47:50 ----A---- C:\WINDOWS\system32\wpnapps.dll
2018-06-15 16:47:50 ----A---- C:\WINDOWS\system32\CoreShell.dll
2018-06-15 16:47:50 ----A---- C:\WINDOWS\system32\comsvcs.dll
2018-06-15 16:47:50 ----A---- C:\WINDOWS\system32\bisrv.dll
2018-06-15 16:47:49 ----A---- C:\WINDOWS\SYSWOW64\wpnapps.dll
2018-06-15 16:47:48 ----A---- C:\WINDOWS\system32\WMVCORE.DLL
2018-06-15 16:47:48 ----A---- C:\WINDOWS\system32\Windows.StateRepository.dll
2018-06-15 16:47:48 ----A---- C:\WINDOWS\system32\twinapi.appcore.dll
2018-06-15 16:47:48 ----A---- C:\WINDOWS\system32\d3d11.dll
2018-06-15 16:47:47 ----A---- C:\WINDOWS\system32\WpcDesktopMonSvc.dll
2018-06-15 16:47:47 ----A---- C:\WINDOWS\system32\wininet.dll
2018-06-15 16:47:47 ----A---- C:\WINDOWS\system32\uDWM.dll
2018-06-15 16:47:46 ----A---- C:\WINDOWS\system32\KernelBase.dll
2018-06-15 16:47:46 ----A---- C:\WINDOWS\system32\HoloSI.PCShell.dll
2018-06-15 16:47:46 ----A---- C:\WINDOWS\system32\dwmcore.dll
2018-06-15 16:47:46 ----A---- C:\WINDOWS\system32\d2d1.dll
2018-06-15 16:47:46 ----A---- C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-06-15 16:47:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepository.dll
2018-06-15 16:47:43 ----A---- C:\WINDOWS\SYSWOW64\tquery.dll
2018-06-15 16:47:43 ----A---- C:\WINDOWS\SYSWOW64\combase.dll
2018-06-15 16:47:43 ----A---- C:\WINDOWS\system32\msxml6.dll
2018-06-15 16:47:43 ----A---- C:\WINDOWS\system32\iertutil.dll
2018-06-15 16:47:43 ----A---- C:\WINDOWS\system32\d3d9.dll
2018-06-15 16:47:42 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.dll
2018-06-15 16:47:42 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2018-06-15 16:47:42 ----A---- C:\WINDOWS\SYSWOW64\d3d11.dll
2018-06-15 16:47:42 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2018-06-15 16:47:42 ----A---- C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-06-15 16:47:41 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll
2018-06-15 16:47:41 ----A---- C:\WINDOWS\system32\audiosrv.dll
2018-06-15 16:47:40 ----A---- C:\WINDOWS\SYSWOW64\MSAudDecMFT.dll
2018-06-15 16:47:40 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2018-06-15 16:47:40 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2018-06-15 16:47:40 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2018-06-15 16:47:40 ----A---- C:\WINDOWS\system32\SndVolSSO.dll
2018-06-15 16:47:40 ----A---- C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-06-15 16:47:39 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2018-06-15 16:47:38 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2018-06-15 16:47:38 ----A---- C:\WINDOWS\SYSWOW64\d2d1.dll
2018-06-15 16:47:38 ----A---- C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2018-06-15 16:47:38 ----A---- C:\WINDOWS\system32\urlmon.dll
2018-06-15 16:47:37 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2018-06-15 16:47:37 ----A---- C:\WINDOWS\system32\wevtsvc.dll
2018-06-15 16:47:36 ----A---- C:\WINDOWS\SYSWOW64\msxml6.dll
2018-06-15 16:47:36 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2018-06-15 16:47:36 ----A---- C:\WINDOWS\system32\MSAudDecMFT.dll
2018-06-15 16:47:35 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2018-06-15 16:47:35 ----A---- C:\WINDOWS\SYSWOW64\twinapi.appcore.dll
2018-06-15 16:47:35 ----A---- C:\WINDOWS\system32\usocore.dll
2018-06-15 16:47:35 ----A---- C:\WINDOWS\system32\UIRibbon.dll
2018-06-15 16:47:35 ----A---- C:\WINDOWS\system32\TokenBroker.dll
2018-06-15 16:47:34 ----A---- C:\WINDOWS\system32\UpdateAgent.dll
2018-06-15 16:47:34 ----A---- C:\WINDOWS\system32\rasapi32.dll
2018-06-15 16:47:34 ----A---- C:\WINDOWS\system32\bcastdvruserservice.dll
2018-06-15 16:47:34 ----A---- C:\WINDOWS\system32\AudioSes.dll
2018-06-15 16:47:33 ----A---- C:\WINDOWS\SYSWOW64\MSVPXENC.dll
2018-06-15 16:47:33 ----A---- C:\WINDOWS\SYSWOW64\CoreUIComponents.dll
2018-06-15 16:47:33 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2018-06-15 16:47:33 ----A---- C:\WINDOWS\system32\DolbyDecMFT.dll
2018-06-15 16:47:33 ----A---- C:\WINDOWS\system32\D3D12.dll
2018-06-15 16:47:32 ----A---- C:\WINDOWS\SYSWOW64\UIRibbon.dll
2018-06-15 16:47:32 ----A---- C:\WINDOWS\system32\webplatstorageserver.dll
2018-06-15 16:47:32 ----A---- C:\WINDOWS\system32\mf.dll
2018-06-15 16:47:32 ----A---- C:\WINDOWS\system32\InstallService.dll
2018-06-15 16:47:31 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2018-06-15 16:47:31 ----A---- C:\WINDOWS\system32\EdgeManager.dll
2018-06-15 16:47:30 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2018-06-15 16:47:30 ----A---- C:\WINDOWS\system32\ntdll.dll
2018-06-15 16:47:30 ----A---- C:\WINDOWS\system32\msftedit.dll
2018-06-15 16:47:30 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-06-15 16:47:29 ----A---- C:\WINDOWS\system32\ISM.dll
2018-06-15 16:47:29 ----A---- C:\WINDOWS\system32\drivers\dxgkrnl.sys
2018-06-15 16:47:28 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2018-06-15 16:47:28 ----A---- C:\WINDOWS\system32\dxgi.dll
2018-06-15 16:47:28 ----A---- C:\WINDOWS\system32\daxexec.dll
2018-06-15 16:47:28 ----A---- C:\WINDOWS\system32\AppReadiness.dll
2018-06-15 16:47:27 ----A---- C:\WINDOWS\SYSWOW64\SndVolSSO.dll
2018-06-15 16:47:27 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2018-06-15 16:47:27 ----A---- C:\WINDOWS\SYSWOW64\cdp.dll
2018-06-15 16:47:27 ----A---- C:\WINDOWS\system32\mfsvr.dll
2018-06-15 16:47:27 ----A---- C:\WINDOWS\system32\MbaeApiPublic.dll
2018-06-15 16:47:27 ----A---- C:\WINDOWS\system32\jscript.dll
2018-06-15 16:47:27 ----A---- C:\WINDOWS\system32\DolbyHrtfEnc.dll
2018-06-15 16:47:27 ----A---- C:\WINDOWS\system32\AudioEng.dll
2018-06-15 16:47:27 ----A---- C:\WINDOWS\system32\AppVEntSubsystems64.dll
2018-06-15 16:47:26 ----A---- C:\WINDOWS\SYSWOW64\win32kfull.sys
2018-06-15 16:47:26 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll
2018-06-15 16:47:26 ----A---- C:\WINDOWS\SYSWOW64\D3D12.dll
2018-06-15 16:47:25 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2018-06-15 16:47:25 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2018-06-15 16:47:25 ----A---- C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-06-15 16:47:25 ----A---- C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2018-06-15 16:47:25 ----A---- C:\WINDOWS\system32\win32kbase.sys
2018-06-15 16:47:25 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2018-06-15 16:47:25 ----A---- C:\WINDOWS\system32\propsys.dll
2018-06-15 16:47:24 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2018-06-15 16:47:24 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2018-06-15 16:47:24 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2018-06-15 16:47:24 ----A---- C:\WINDOWS\system32\SettingSyncCore.dll
2018-06-15 16:47:24 ----A---- C:\WINDOWS\system32\rpcss.dll
2018-06-15 16:47:24 ----A---- C:\WINDOWS\system32\gdi32full.dll
2018-06-15 16:47:24 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-06-15 16:47:24 ----A---- C:\WINDOWS\system32\audiodg.exe
2018-06-15 16:47:23 ----A---- C:\WINDOWS\SYSWOW64\WMVCORE.DLL
2018-06-15 16:47:23 ----A---- C:\WINDOWS\system32\wuaueng.dll
2018-06-15 16:47:22 ----A---- C:\WINDOWS\system32\StorSvc.dll
2018-06-15 16:47:21 ----A---- C:\WINDOWS\SYSWOW64\SettingSyncCore.dll
2018-06-15 16:47:21 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2018-06-15 16:47:21 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2018-06-15 16:47:21 ----A---- C:\WINDOWS\system32\Spectrum.exe
2018-06-15 16:47:21 ----A---- C:\WINDOWS\system32\dui70.dll
2018-06-15 16:47:21 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2018-06-15 16:47:20 ----A---- C:\WINDOWS\SYSWOW64\AcGenral.dll
2018-06-15 16:47:20 ----A---- C:\WINDOWS\system32\XpsPrint.dll
2018-06-15 16:47:20 ----A---- C:\WINDOWS\system32\wintrust.dll
2018-06-15 16:47:20 ----A---- C:\WINDOWS\system32\edgeIso.dll
2018-06-15 16:47:20 ----A---- C:\WINDOWS\system32\DolbyMATEnc.dll
2018-06-15 16:47:20 ----A---- C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-06-15 16:47:19 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.Maps.dll
2018-06-15 16:47:19 ----A---- C:\WINDOWS\SYSWOW64\UIAutomationCore.dll
2018-06-15 16:47:19 ----A---- C:\WINDOWS\system32\MSVP9DEC.dll
2018-06-15 16:47:19 ----A---- C:\WINDOWS\system32\mfds.dll
2018-06-15 16:47:19 ----A---- C:\WINDOWS\system32\esent.dll
2018-06-15 16:47:19 ----A---- C:\WINDOWS\system32\ActivationManager.dll
2018-06-15 16:47:19 ----A---- C:\WINDOWS\system32\AcGenral.dll
2018-06-15 16:47:18 ----A---- C:\WINDOWS\system32\WinTypes.dll
2018-06-15 16:47:18 ----A---- C:\WINDOWS\system32\winload.exe
2018-06-15 16:47:18 ----A---- C:\WINDOWS\system32\webservices.dll
2018-06-15 16:47:18 ----A---- C:\WINDOWS\system32\MSVPXENC.dll
2018-06-15 16:47:18 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2018-06-15 16:47:17 ----A---- C:\WINDOWS\system32\WpcWebFilter.dll
2018-06-15 16:47:17 ----A---- C:\WINDOWS\system32\SHCore.dll
2018-06-15 16:47:17 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2018-06-15 16:47:16 ----A---- C:\WINDOWS\SYSWOW64\WMVDECOD.DLL
2018-06-15 16:47:16 ----A---- C:\WINDOWS\SYSWOW64\webservices.dll
2018-06-15 16:47:16 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2018-06-15 16:47:16 ----A---- C:\WINDOWS\SYSWOW64\rpcrt4.dll
2018-06-15 16:47:16 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2018-06-15 16:47:16 ----A---- C:\WINDOWS\SYSWOW64\mfds.dll
2018-06-15 16:47:16 ----A---- C:\WINDOWS\SYSWOW64\DolbyDecMFT.dll
2018-06-15 16:47:16 ----A---- C:\WINDOWS\SYSWOW64\AppXDeploymentClient.dll
2018-06-15 16:47:16 ----A---- C:\WINDOWS\system32\winresume.exe
2018-06-15 16:47:16 ----A---- C:\WINDOWS\system32\msvproc.dll
2018-06-15 16:47:16 ----A---- C:\WINDOWS\system32\MSMPEG2ENC.DLL
2018-06-15 16:47:16 ----A---- C:\WINDOWS\system32\ci.dll
2018-06-15 16:47:15 ----A---- C:\WINDOWS\SYSWOW64\TokenBroker.dll
2018-06-15 16:47:15 ----A---- C:\WINDOWS\system32\LicensingWinRT.dll
2018-06-15 16:47:15 ----A---- C:\WINDOWS\system32\hvix64.exe
2018-06-15 16:47:15 ----A---- C:\WINDOWS\system32\HeadTrackerStorage.dll
2018-06-15 16:47:15 ----A---- C:\WINDOWS\system32\AppHostRegistrationVerifier.exe
2018-06-15 16:47:14 ----A---- C:\WINDOWS\system32\ReAgent.dll
2018-06-15 16:47:14 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2018-06-15 16:47:14 ----A---- C:\WINDOWS\system32\CPFilters.dll
2018-06-15 16:47:13 ----A---- C:\WINDOWS\SYSWOW64\gdi32full.dll
2018-06-15 16:47:13 ----A---- C:\WINDOWS\SYSWOW64\dui70.dll
2018-06-15 16:47:13 ----A---- C:\WINDOWS\SYSWOW64\daxexec.dll
2018-06-15 16:47:13 ----A---- C:\WINDOWS\SYSWOW64\CPFilters.dll
2018-06-15 16:47:13 ----A---- C:\WINDOWS\system32\TSWorkspace.dll
2018-06-15 16:47:13 ----A---- C:\WINDOWS\system32\RTMediaFrame.dll
2018-06-15 16:47:13 ----A---- C:\WINDOWS\system32\pwcreator.exe
2018-06-15 16:47:13 ----A---- C:\WINDOWS\system32\drivers\crashdmp.sys
2018-06-15 16:47:13 ----A---- C:\WINDOWS\system32\credprovs.dll
2018-06-15 16:47:13 ----A---- C:\WINDOWS\system32\browserbroker.dll
2018-06-15 16:47:12 ----A---- C:\WINDOWS\SYSWOW64\WinTypes.dll
2018-06-15 16:47:12 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2018-06-15 16:47:12 ----A---- C:\WINDOWS\SYSWOW64\dxgi.dll
2018-06-15 16:47:12 ----A---- C:\WINDOWS\system32\wevtutil.exe
2018-06-15 16:47:12 ----A---- C:\WINDOWS\system32\TelephonyInteractiveUser.dll
2018-06-15 16:47:12 ----A---- C:\WINDOWS\system32\tcblaunch.exe
2018-06-15 16:47:12 ----A---- C:\WINDOWS\system32\msdtctm.dll
2018-06-15 16:47:12 ----A---- C:\WINDOWS\system32\modernexecserver.dll
2018-06-15 16:47:12 ----A---- C:\WINDOWS\system32\hvax64.exe
2018-06-15 16:47:12 ----A---- C:\WINDOWS\system32\dafWfdProvider.dll
2018-06-15 16:47:11 ----A---- C:\WINDOWS\SYSWOW64\ReAgent.dll
2018-06-15 16:47:11 ----A---- C:\WINDOWS\SYSWOW64\InstallService.dll
2018-06-15 16:47:11 ----A---- C:\WINDOWS\system32\systemreset.exe
2018-06-15 16:47:11 ----A---- C:\WINDOWS\system32\SppExtComObj.Exe
2018-06-15 16:47:11 ----A---- C:\WINDOWS\system32\LanguageOverlayUtil.dll
2018-06-15 16:47:11 ----A---- C:\WINDOWS\system32\FlightSettings.dll
2018-06-15 16:47:11 ----A---- C:\WINDOWS\system32\acmigration.dll
2018-06-15 16:47:10 ----RSH---- C:\WINDOWS\fonts\StaticCache.dat
2018-06-15 16:47:10 ----A---- C:\WINDOWS\SYSWOW64\rasapi32.dll
2018-06-15 16:47:10 ----A---- C:\WINDOWS\SYSWOW64\MSVP9DEC.dll
2018-06-15 16:47:10 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2018-06-15 16:47:10 ----A---- C:\WINDOWS\system32\DXP.dll
2018-06-15 16:47:10 ----A---- C:\WINDOWS\system32\drivers\stornvme.sys
2018-06-15 16:47:09 ----A---- C:\WINDOWS\SYSWOW64\UserDataTimeUtil.dll
2018-06-15 16:47:09 ----A---- C:\WINDOWS\system32\FrameServer.dll
2018-06-15 16:47:09 ----A---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2018-06-15 16:47:09 ----A---- C:\WINDOWS\system32\drivers\http.sys
2018-06-15 16:47:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.Web.dll
2018-06-15 16:47:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.Vpn.dll
2018-06-15 16:47:08 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2018-06-15 16:47:08 ----A---- C:\WINDOWS\SYSWOW64\LanguageOverlayUtil.dll
2018-06-15 16:47:08 ----A---- C:\WINDOWS\SYSWOW64\credprovs.dll
2018-06-15 16:47:08 ----A---- C:\WINDOWS\system32\skci.dll
2018-06-15 16:47:08 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2018-06-15 16:47:08 ----A---- C:\WINDOWS\system32\rasplap.dll
2018-06-15 16:47:08 ----A---- C:\WINDOWS\system32\MSPhotography.dll
2018-06-15 16:47:07 ----A---- C:\WINDOWS\SYSWOW64\WpcWebFilter.dll
2018-06-15 16:47:07 ----A---- C:\WINDOWS\SYSWOW64\msvproc.dll
2018-06-15 16:47:07 ----A---- C:\WINDOWS\system32\mfsensorgroup.dll
2018-06-15 16:47:07 ----A---- C:\WINDOWS\system32\drivers\msrpc.sys
2018-06-15 16:47:06 ----A---- C:\WINDOWS\SYSWOW64\edgeIso.dll
2018-06-15 16:47:06 ----A---- C:\WINDOWS\system32\wimgapi.dll
2018-06-15 16:47:06 ----A---- C:\WINDOWS\system32\vertdll.dll
2018-06-15 16:47:06 ----A---- C:\WINDOWS\system32\mfps.dll
2018-06-15 16:47:06 ----A---- C:\WINDOWS\system32\HoloShellRuntime.dll
2018-06-15 16:47:05 ----A---- C:\WINDOWS\SYSWOW64\Windows.Mirage.Internal.dll
2018-06-15 16:47:05 ----A---- C:\WINDOWS\SYSWOW64\webplatstorageserver.dll
2018-06-15 16:47:05 ----A---- C:\WINDOWS\SYSWOW64\kernel.appcore.dll
2018-06-15 16:47:05 ----A---- C:\WINDOWS\SYSWOW64\EdgeManager.dll
2018-06-15 16:47:05 ----A---- C:\WINDOWS\system32\reseteng.dll
2018-06-15 16:47:05 ----A---- C:\WINDOWS\system32\msfeeds.dll
2018-06-15 16:47:05 ----A---- C:\WINDOWS\system32\kernel.appcore.dll
2018-06-15 16:47:05 ----A---- C:\WINDOWS\system32\drivers\wfplwfs.sys
2018-06-15 16:47:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-06-15 16:47:04 ----A---- C:\WINDOWS\SYSWOW64\wimgapi.dll
2018-06-15 16:47:04 ----A---- C:\WINDOWS\SYSWOW64\CoreMessaging.dll
2018-06-15 16:47:04 ----A---- C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2018-06-15 16:47:04 ----A---- C:\WINDOWS\system32\wimserv.exe
2018-06-15 16:47:04 ----A---- C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-06-15 16:47:04 ----A---- C:\WINDOWS\system32\mfmkvsrcsnk.dll
2018-06-15 16:47:04 ----A---- C:\WINDOWS\system32\GenValObj.exe
2018-06-15 16:47:03 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2018-06-15 16:47:03 ----A---- C:\WINDOWS\system32\mfplat.dll
2018-06-15 16:47:03 ----A---- C:\WINDOWS\system32\drivers\vhdmp.sys
2018-06-15 16:47:02 ----A---- C:\WINDOWS\system32\WMVDECOD.DLL
2018-06-15 16:47:02 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-06-15 16:47:02 ----A---- C:\WINDOWS\system32\drivers\uefi.sys
2018-06-15 16:47:02 ----A---- C:\WINDOWS\system32\drivers\refs.sys
2018-06-15 16:47:02 ----A---- C:\WINDOWS\system32\drivers\hvsocket.sys
2018-06-15 16:47:01 ----A---- C:\WINDOWS\SYSWOW64\XpsPrint.dll
2018-06-15 16:47:01 ----A---- C:\WINDOWS\SYSWOW64\RTMediaFrame.dll
2018-06-15 16:47:01 ----A---- C:\WINDOWS\SYSWOW64\mstsc.exe
2018-06-15 16:47:01 ----A---- C:\WINDOWS\SYSWOW64\LicensingWinRT.dll
2018-06-15 16:47:01 ----A---- C:\WINDOWS\system32\StateRepository.Core.dll
2018-06-15 16:47:01 ----A---- C:\WINDOWS\system32\Phoneutil.dll
2018-06-15 16:47:01 ----A---- C:\WINDOWS\system32\hvloader.dll
2018-06-15 16:47:01 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2018-06-15 16:47:01 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2018-06-15 16:47:00 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryPS.dll
2018-06-15 16:47:00 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2018-06-15 16:47:00 ----A---- C:\WINDOWS\SYSWOW64\ActivationManager.dll
2018-06-15 16:47:00 ----A---- C:\WINDOWS\system32\SgrmEnclave.dll
2018-06-15 16:47:00 ----A---- C:\WINDOWS\system32\mstsc.exe
2018-06-15 16:47:00 ----A---- C:\WINDOWS\system32\drivers\refsv1.sys
2018-06-15 16:47:00 ----A---- C:\WINDOWS\system32\CoreMessaging.dll
2018-06-15 16:46:59 ----A---- C:\WINDOWS\SYSWOW64\mfmkvsrcsnk.dll
2018-06-15 16:46:59 ----A---- C:\WINDOWS\system32\Windows.Web.dll
2018-06-15 16:46:59 ----A---- C:\WINDOWS\system32\rdpudd.dll
2018-06-15 16:46:59 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2018-06-15 16:46:59 ----A---- C:\WINDOWS\system32\CompPkgSup.dll
2018-06-15 16:46:59 ----A---- C:\WINDOWS\system32\ClipUp.exe
2018-06-15 16:46:58 ----A---- C:\WINDOWS\SYSWOW64\rmclient.dll
2018-06-15 16:46:58 ----A---- C:\WINDOWS\SYSWOW64\Phoneutil.dll
2018-06-15 16:46:58 ----A---- C:\WINDOWS\SYSWOW64\mavinject.exe
2018-06-15 16:46:58 ----A---- C:\WINDOWS\SYSWOW64\bcrypt.dll
2018-06-15 16:46:58 ----A---- C:\WINDOWS\system32\rmclient.dll
2018-06-15 16:46:58 ----A---- C:\WINDOWS\system32\MSVideoDSP.dll
2018-06-15 16:46:58 ----A---- C:\WINDOWS\system32\mavinject.exe
2018-06-15 16:46:58 ----A---- C:\WINDOWS\system32\drivers\Ucx01000.sys
2018-06-15 16:46:58 ----A---- C:\WINDOWS\system32\drivers\mskssrv.sys
2018-06-15 16:46:58 ----A---- C:\WINDOWS\system32\drivers\dxgmms2.sys
2018-06-15 16:46:58 ----A---- C:\WINDOWS\system32\drivers\dxgmms1.sys
2018-06-15 16:46:58 ----A---- C:\WINDOWS\system32\bcrypt.dll
2018-06-15 16:46:58 ----A---- C:\WINDOWS\system32\AppVTerminator.dll
2018-06-15 16:46:58 ----A---- C:\WINDOWS\system32\AppVClientPS.dll
2018-06-15 16:46:57 ----A---- C:\WINDOWS\SYSWOW64\hvsicontainerservice.dll
2018-06-15 16:46:57 ----A---- C:\WINDOWS\SYSWOW64\FSClient.dll
2018-06-15 16:46:57 ----A---- C:\WINDOWS\SYSWOW64\FlightSettings.dll
2018-06-15 16:46:57 ----A---- C:\WINDOWS\system32\Windows.CloudStore.dll
2018-06-15 16:46:57 ----A---- C:\WINDOWS\system32\rasmans.dll
2018-06-15 16:46:57 ----A---- C:\WINDOWS\system32\FSClient.dll
2018-06-15 16:46:57 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2018-06-15 16:46:57 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2018-06-15 16:46:56 ----A---- C:\WINDOWS\SYSWOW64\wlidcredprov.dll
2018-06-15 16:46:56 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Playback.MediaPlayer.dll
2018-06-15 16:46:56 ----A---- C:\WINDOWS\SYSWOW64\TSWorkspace.dll
2018-06-15 16:46:56 ----A---- C:\WINDOWS\SYSWOW64\CompPkgSup.dll
2018-06-15 16:46:56 ----A---- C:\WINDOWS\system32\wuuhosdeployment.dll
2018-06-15 16:46:56 ----A---- C:\WINDOWS\system32\UserDataTimeUtil.dll
2018-06-15 16:46:56 ----A---- C:\WINDOWS\system32\rasdlg.dll
2018-06-15 16:46:56 ----A---- C:\WINDOWS\system32\MBR2GPT.EXE
2018-06-15 16:46:56 ----A---- C:\WINDOWS\system32\drivers\hidparse.sys
2018-06-15 16:46:55 ----A---- C:\WINDOWS\SYSWOW64\Windows.Security.Authentication.Web.Core.dll
2018-06-15 16:46:55 ----A---- C:\WINDOWS\SYSWOW64\rasdlg.dll
2018-06-15 16:46:55 ----A---- C:\WINDOWS\SYSWOW64\MSMPEG2ENC.DLL
2018-06-15 16:46:54 ----A---- C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2018-06-15 16:46:54 ----A---- C:\WINDOWS\system32\wbiosrvc.dll
2018-06-15 16:46:54 ----A---- C:\WINDOWS\system32\browserexport.exe
2018-06-15 16:46:53 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.BackgroundMediaPlayback.dll
2018-06-15 16:46:53 ----A---- C:\WINDOWS\SYSWOW64\wevtutil.exe
2018-06-15 16:46:53 ----A---- C:\WINDOWS\SYSWOW64\MSPhotography.dll
2018-06-15 16:46:53 ----A---- C:\WINDOWS\SYSWOW64\msexcl40.dll
2018-06-15 16:46:53 ----A---- C:\WINDOWS\SYSWOW64\MSAC3ENC.DLL
2018-06-15 16:46:53 ----A---- C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2018-06-15 16:46:53 ----A---- C:\WINDOWS\system32\easwrt.dll
2018-06-15 16:46:53 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2018-06-15 16:46:52 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.MixedRealityCapture.dll
2018-06-15 16:46:52 ----A---- C:\WINDOWS\SYSWOW64\rasplap.dll
2018-06-15 16:46:52 ----A---- C:\WINDOWS\SYSWOW64\msIso.dll
2018-06-15 16:46:52 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2018-06-15 16:46:52 ----A---- C:\WINDOWS\SYSWOW64\InstallServiceTasks.dll
2018-06-15 16:46:52 ----A---- C:\WINDOWS\system32\TDLMigration.dll
2018-06-15 16:46:52 ----A---- C:\WINDOWS\system32\sppcext.dll
2018-06-15 16:46:52 ----A---- C:\WINDOWS\system32\rdpshell.exe
2018-06-15 16:46:52 ----A---- C:\WINDOWS\system32\rdpinit.exe
2018-06-15 16:46:52 ----A---- C:\WINDOWS\system32\InstallServiceTasks.dll
2018-06-15 16:46:52 ----A---- C:\WINDOWS\system32\drivers\WdiWiFi.sys
2018-06-15 16:46:51 ----A---- C:\WINDOWS\SYSWOW64\Windows.StateRepositoryUpgrade.dll
2018-06-15 16:46:51 ----A---- C:\WINDOWS\SYSWOW64\srms-apr.dat
2018-06-15 16:46:51 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2018-06-15 16:46:51 ----A---- C:\WINDOWS\SYSWOW64\dbgeng.dll
2018-06-15 16:46:51 ----A---- C:\WINDOWS\system32\wuuhext.dll
2018-06-15 16:46:51 ----A---- C:\WINDOWS\system32\Windows.Globalization.PhoneNumberFormatting.dll
2018-06-15 16:46:51 ----A---- C:\WINDOWS\system32\srms-apr.dat
2018-06-15 16:46:51 ----A---- C:\WINDOWS\system32\MDEServer.exe
2018-06-15 16:46:51 ----A---- C:\WINDOWS\system32\dbgeng.dll
2018-06-15 16:46:51 ----A---- C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2018-06-15 16:46:50 ----A---- C:\WINDOWS\SYSWOW64\msdt.exe
2018-06-15 16:46:49 ----A---- C:\WINDOWS\system32\ResetEngine.dll
2018-06-15 16:46:49 ----A---- C:\WINDOWS\system32\msdt.exe
2018-06-15 16:46:49 ----A---- C:\WINDOWS\system32\BitLockerCsp.dll
2018-06-15 16:46:48 ----A---- C:\WINDOWS\SYSWOW64\wincorlib.dll
2018-06-15 16:46:48 ----A---- C:\WINDOWS\system32\wlidcredprov.dll
2018-06-15 16:46:48 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2018-06-15 16:46:48 ----A---- C:\WINDOWS\system32\usoapi.dll
2018-06-15 16:46:48 ----A---- C:\WINDOWS\system32\tbauth.dll
2018-06-15 16:46:48 ----A---- C:\WINDOWS\system32\SIHClient.exe
2018-06-15 16:46:48 ----A---- C:\WINDOWS\system32\PhoneService.dll
2018-06-15 16:46:48 ----A---- C:\WINDOWS\system32\mqsnap.dll
2018-06-15 16:46:48 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2018-06-15 16:46:48 ----A---- C:\WINDOWS\system32\iemigplugin.dll
2018-06-15 16:46:48 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2018-06-15 16:46:48 ----A---- C:\WINDOWS\system32\Chakradiag.dll
2018-06-15 16:46:48 ----A---- C:\WINDOWS\system32\dssvc.dll
2018-06-15 16:46:48 ----A---- C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2018-06-15 16:46:48 ----A---- C:\WINDOWS\system32\CapabilityAccessManager.dll
2018-06-15 16:46:48 ----A---- C:\WINDOWS\system32\BFE.DLL
2018-06-15 16:46:47 ----A---- C:\WINDOWS\SYSWOW64\TokenBrokerCookies.exe
2018-06-15 16:46:47 ----A---- C:\WINDOWS\SYSWOW64\tbauth.dll
2018-06-15 16:46:47 ----A---- C:\WINDOWS\SYSWOW64\MSHEIF.dll
2018-06-15 16:46:47 ----A---- C:\WINDOWS\SYSWOW64\ApiSetHost.AppExecutionAlias.dll
2018-06-15 16:46:47 ----A---- C:\WINDOWS\SYSWOW64\aadtb.dll
2018-06-15 16:46:47 ----A---- C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2018-06-15 16:46:47 ----A---- C:\WINDOWS\system32\UIRibbonRes.dll
2018-06-15 16:46:47 ----A---- C:\WINDOWS\system32\TokenBrokerCookies.exe
2018-06-15 16:46:47 ----A---- C:\WINDOWS\system32\rascustom.dll
2018-06-15 16:46:47 ----A---- C:\WINDOWS\system32\MSHEIF.dll
2018-06-15 16:46:47 ----A---- C:\WINDOWS\system32\GamePanel.exe
2018-06-15 16:46:47 ----A---- C:\WINDOWS\system32\edpnotify.exe
2018-06-15 16:46:47 ----A---- C:\WINDOWS\system32\ApiSetHost.AppExecutionAlias.dll
2018-06-15 16:46:47 ----A---- C:\WINDOWS\system32\aadtb.dll
2018-06-15 16:46:46 ----A---- C:\WINDOWS\SYSWOW64\tzres.dll
2018-06-15 16:46:46 ----A---- C:\WINDOWS\SYSWOW64\OpcServices.dll
2018-06-15 16:46:46 ----A---- C:\WINDOWS\SYSWOW64\HoloShellRuntime.dll
2018-06-15 16:46:46 ----A---- C:\WINDOWS\system32\tzres.dll
2018-06-15 16:46:46 ----A---- C:\WINDOWS\system32\RasMediaManager.dll
2018-06-15 16:46:46 ----A---- C:\WINDOWS\system32\msi.dll
2018-06-15 16:46:46 ----A---- C:\WINDOWS\system32\drivers\mpsdrv.sys
2018-06-15 16:46:46 ----A---- C:\WINDOWS\system32\DHolographicDisplay.dll
2018-06-15 14:27:11 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerInstaller.exe

====== List of files/folders modified in the last 1 month ======

2018-07-02 20:22:45 ----D---- C:\WINDOWS\Temp
2018-07-02 20:22:45 ----D---- C:\WINDOWS\Prefetch
2018-07-02 20:22:45 ----D---- C:\Program Files\trend micro
2018-07-02 20:21:05 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2018-07-02 20:16:57 ----D---- C:\Users\jj\AppData\Roaming\Seznam.cz
2018-07-02 20:12:19 ----D---- C:\ProgramData\Origin
2018-07-02 20:00:06 ----D---- C:\WINDOWS\system32\sru
2018-07-02 19:57:06 ----D---- C:\WINDOWS\system32\catroot2
2018-07-02 19:56:37 ----HD---- C:\Program Files (x86)\Temp
2018-07-02 19:55:58 ----D---- C:\WINDOWS\System32
2018-07-02 19:55:57 ----D---- C:\WINDOWS\system32\DAX2
2018-07-02 19:55:56 ----D---- C:\WINDOWS\SysWOW64
2018-07-02 19:55:45 ----RD---- C:\Program Files
2018-07-02 19:55:45 ----D---- C:\WINDOWS\SYSWOW64\RTCOM
2018-07-02 19:55:45 ----D---- C:\WINDOWS\system32\drivers
2018-07-02 19:55:44 ----D---- C:\WINDOWS\INF
2018-07-02 19:55:39 ----D---- C:\WINDOWS\system32\DriverStore
2018-07-02 19:53:14 ----SHD---- C:\System Volume Information
2018-07-02 19:50:55 ----D---- C:\Windows
2018-07-02 19:48:39 ----D---- C:\WINDOWS\system32\SleepStudy
2018-07-02 19:44:09 ----D---- C:\WINDOWS\system32\DAX3
2018-07-02 19:44:09 ----D---- C:\ProgramData\Audyssey Labs
2018-07-02 19:43:58 ----D---- C:\WINDOWS\Logs
2018-07-01 11:27:36 ----D---- C:\WINDOWS\AppReadiness
2018-06-30 12:00:01 ----D---- C:\WINDOWS\system32\LogFiles
2018-06-30 10:46:32 ----RD---- C:\WINDOWS\Microsoft.NET
2018-06-30 08:16:32 ----HD---- C:\Program Files\WindowsApps
2018-06-30 07:53:15 ----D---- C:\WINDOWS\system32\drivers\wd
2018-06-24 12:11:45 ----D---- C:\WINDOWS\system32\config
2018-06-23 19:21:53 ----D---- C:\WINDOWS\WinSxS
2018-06-20 21:03:11 ----D---- C:\WINDOWS\CbsTemp
2018-06-20 21:03:09 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2018-06-20 21:02:53 ----RD---- C:\WINDOWS\assembly
2018-06-20 20:39:08 ----D---- C:\WINDOWS\system32\Tasks
2018-06-20 20:37:19 ----AD---- C:\Program Files (x86)\Origin
2018-06-17 20:53:34 ----D---- C:\WINDOWS\system32\WDI
2018-06-15 22:59:05 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2018-06-15 22:47:28 ----D---- C:\WINDOWS\TextInput
2018-06-15 22:47:28 ----D---- C:\WINDOWS\SYSWOW64\zu-ZA
2018-06-15 22:47:28 ----D---- C:\WINDOWS\SYSWOW64\yo-NG
2018-06-15 22:47:28 ----D---- C:\WINDOWS\SYSWOW64\xh-ZA
2018-06-15 22:47:28 ----D---- C:\WINDOWS\SYSWOW64\wo-SN
2018-06-15 22:47:27 ----D---- C:\WINDOWS\SYSWOW64\uz-Latn-UZ
2018-06-15 22:47:27 ----D---- C:\WINDOWS\SYSWOW64\tn-ZA
2018-06-15 22:47:27 ----D---- C:\WINDOWS\SYSWOW64\ti-ET
2018-06-15 22:47:27 ----D---- C:\WINDOWS\SYSWOW64\tg-Cyrl-TJ
2018-06-15 22:47:27 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-RS
2018-06-15 22:47:27 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-BA
2018-06-15 22:47:27 ----D---- C:\WINDOWS\SYSWOW64\setup
2018-06-15 22:47:27 ----D---- C:\WINDOWS\SYSWOW64\sd-Arab-PK
2018-06-15 22:47:27 ----D---- C:\WINDOWS\SYSWOW64\rw-RW
2018-06-15 22:47:27 ----D---- C:\WINDOWS\SYSWOW64\quc-Latn-GT
2018-06-15 22:47:27 ----D---- C:\WINDOWS\SYSWOW64\pa-Arab-PK
2018-06-15 22:47:27 ----D---- C:\WINDOWS\SYSWOW64\oobe
2018-06-15 22:47:27 ----D---- C:\WINDOWS\SYSWOW64\nso-ZA
2018-06-15 22:47:27 ----D---- C:\WINDOWS\SYSWOW64\ku-Arab-IQ
2018-06-15 22:47:27 ----D---- C:\WINDOWS\SYSWOW64\ig-NG
2018-06-15 22:47:27 ----D---- C:\WINDOWS\SYSWOW64\chr-CHER-US
2018-06-15 22:47:27 ----D---- C:\WINDOWS\SYSWOW64\ha-Latn-NG
2018-06-15 22:47:27 ----D---- C:\WINDOWS\SYSWOW64\Dism
2018-06-15 22:47:27 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2018-06-15 22:47:27 ----D---- C:\WINDOWS\SYSWOW64\ca-ES-valencia
2018-06-15 22:47:27 ----D---- C:\WINDOWS\SYSWOW64\bs-Latn-BA
2018-06-15 22:47:27 ----D---- C:\WINDOWS\SYSWOW64\az-Latn-AZ
2018-06-15 22:47:25 ----D---- C:\WINDOWS\system32\zu-ZA
2018-06-15 22:47:25 ----D---- C:\WINDOWS\system32\yo-NG
2018-06-15 22:47:25 ----D---- C:\WINDOWS\system32\xh-ZA
2018-06-15 22:47:25 ----D---- C:\WINDOWS\system32\wo-SN
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\uz-Latn-UZ
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\tn-ZA
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\ti-ET
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\tg-Cyrl-TJ
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\sr-Cyrl-RS
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\sr-Cyrl-BA
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\setup
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\sd-Arab-PK
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\rw-RW
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\quc-Latn-GT
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\pa-Arab-PK
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\oobe
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\nso-ZA
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\migration
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\ku-Arab-IQ
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\ig-NG
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\chr-CHER-US
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\ha-Latn-NG
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\en-US
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\Dism
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\cs-CZ
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\ca-ES-valencia
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\bs-Latn-BA
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\Boot
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\az-Latn-AZ
2018-06-15 22:47:19 ----D---- C:\WINDOWS\system32\appraiser
2018-06-15 22:47:17 ----RSD---- C:\WINDOWS\Fonts
2018-06-15 22:47:17 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2018-06-15 22:47:17 ----D---- C:\WINDOWS\ShellExperiences
2018-06-15 22:47:17 ----D---- C:\WINDOWS\bcastdvr
2018-06-15 22:47:17 ----D---- C:\WINDOWS\apppatch
2018-06-15 22:47:17 ----D---- C:\Program Files\Windows Photo Viewer
2018-06-15 22:47:17 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2018-06-15 20:19:08 ----D---- C:\WINDOWS\system32\MRT
2018-06-15 20:19:01 ----AC---- C:\WINDOWS\system32\MRT-KB890830.exe
2018-06-15 20:18:53 ----AC---- C:\WINDOWS\system32\MRT.exe
2018-06-15 14:27:17 ----D---- C:\WINDOWS\system32\Macromed
2018-06-15 14:27:14 ----D---- C:\WINDOWS\SYSWOW64\Macromed
2018-06-06 01:29:25 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

File C:\WINDOWS\system32\winlogon.exe is digitally signed
File C:\WINDOWS\system32\wininit.exe is digitally signed
File C:\WINDOWS\explorer.exe is digitally signed
File C:\WINDOWS\SysWOW64\explorer.exe is digitally signed
File C:\WINDOWS\system32\svchost.exe is digitally signed
File C:\WINDOWS\SysWOW64\svchost.exe is digitally signed
File C:\WINDOWS\system32\services.exe is digitally signed
File C:\WINDOWS\system32\User32.dll is digitally signed
File C:\WINDOWS\SysWOW64\User32.dll is digitally signed
File C:\WINDOWS\system32\userinit.exe is digitally signed
File C:\WINDOWS\SysWOW64\userinit.exe is digitally signed
File C:\WINDOWS\system32\rpcss.dll is digitally signed
File C:\WINDOWS\system32\Drivers\volsnap.sys is digitally signed

====== List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2018-04-12 58272]
R0 MsSecFlt;@%SystemRoot%\System32\Drivers\mssecflt.sys,-1001; C:\WINDOWS\system32\drivers\mssecflt.sys [2018-04-12 304032]
R0 SgrmAgent;@%SystemRoot%\System32\Drivers\SgrmAgent.sys,-1001; C:\WINDOWS\system32\drivers\SgrmAgent.sys [2018-04-12 63896]
R1 afunix;afunix; C:\WINDOWS\system32\drivers\afunix.sys [2018-04-12 39424]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2018-04-12 60320]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2018-04-12 414208]
R2 MQAC;@mqutil.dll,-6101; C:\WINDOWS\system32\drivers\mqac.sys [2018-04-12 178688]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2016-12-09 12914360]
R3 NVNET;@netnvm64.inf,%NVENETFD.Service.DispName%;NVIDIA nForce Ethernet Driver; C:\WINDOWS\System32\drivers\nvmf6264.sys [2018-04-12 344192]
R3 nvsmu;nvsmu; C:\WINDOWS\system32\DRIVERS\nvsmu.sys [2000-01-01 29800]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys [2018-04-12 38304]
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2018-04-12 321432]
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\WINDOWS\System32\drivers\iaStorAVC.sys [2018-04-12 885144]
S0 ItSas35i;ItSas35i; C:\WINDOWS\System32\drivers\ItSas35i.sys [2018-04-12 145816]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2018-04-12 75160]
S0 megasas35i;megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys [2018-04-12 82328]
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2018-04-12 39840]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2018-04-12 128416]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2018-04-12 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2018-04-12 18432]
S3 AppvStrm;@%systemroot%\system32\drivers\AppvStrm.sys,-101; C:\WINDOWS\system32\drivers\AppvStrm.sys [2018-04-12 127384]
S3 AppvVemgr;@%systemroot%\system32\drivers\AppvVemgr.sys,-101; C:\WINDOWS\system32\drivers\AppvVemgr.sys [2018-04-12 162712]
S3 AppvVfs;@%systemroot%\system32\drivers\AppvVfs.sys,-101; C:\WINDOWS\system32\drivers\AppvVfs.sys [2018-04-12 143768]
S3 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\WINDOWS\system32\drivers\bindflt.sys [2018-04-12 92056]
S3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2018-04-12 60320]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2018-04-12 73632]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2018-04-12 27136]
S3 HyperVideo;HyperVideo; C:\WINDOWS\System32\drivers\HyperVideo.sys [2018-04-12 28672]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2018-04-12 1836952]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2018-04-12 36864]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2018-04-12 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2018-04-12 88576]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2018-04-12 174592]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2018-04-12 38912]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2018-04-12 32256]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2018-04-12 119808]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2018-04-12 505240]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2018-04-12 56736]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2018-04-12 175104]
S3 netvsc;netvsc; C:\WINDOWS\System32\drivers\netvsc.sys [2018-04-12 197632]
S3 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\WINDOWS\System32\drivers\nvdimm.sys [2018-04-12 104448]
S3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2016-04-05 28216]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2016-03-21 56384]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2018-04-12 105984]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2018-04-12 16896]
S3 ReFS;ReFS; C:\WINDOWS\system32\drivers\ReFS.sys [2018-06-08 1921952]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2018-04-12 104448]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2018-04-12 33176]
S3 SpatialGraphFilter;Holographic Spatial Graph Filter; C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys [2018-04-12 57752]
S4 hvcrash;hvcrash; C:\WINDOWS\System32\drivers\hvcrash.sys [2018-04-12 33184]

====== List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; %windir%\system32\svchost.exe -k apphost;"ServiceDll" = %windir%\system32\inetsrv\apphostsvc.dll
R2 CDPUserSvc_13675d;Uživatelská služba platformy připojených zařízení_13675d; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p;"ServiceDll" = %SystemRoot%\System32\dusmsvc.dll
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2016-04-05 1164856]
R2 MSMQ;@mqutil.dll,-6102; C:\WINDOWS\system32\mqsvc.exe [2018-04-12 26112]
R2 NetMsmqActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8195; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-04-12 136296]
R2 NetPipeActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8197; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-04-12 136296]
R2 NetTcpActivator;@%systemroot%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelInstallRC.dll,-8199; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2018-04-12 136296]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2016-04-05 1881144]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2016-11-14 932728]
R2 OneSyncSvc_13675d;Hostitel synchronizace_13675d; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2018-04-12 761440]
R2 SgrmBroker;@%SystemRoot%\System32\SgrmBroker.exe,-100; C:\WINDOWS\system32\SgrmBroker.exe [2018-04-12 163336]
R3 BcastDVRUserService_13675d;Uživatelská služba pro GameDVR a vysílání her_13675d; C:\WINDOWS\system32\svchost.exe -k BcastDVRUserService;"ServiceDll" =
R3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; %SystemRoot%\system32\svchost.exe -k appmodel -p;"ServiceDll" = %SystemRoot%\system32\CapabilityAccessManager.dll
R3 PimIndexMaintenanceSvc_13675d;Data kontaktů_13675d; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" = %SystemRoot%\System32\CDPUserSvc.dll
S2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2016-04-05 2522680]
S2 Origin Web Helper Service;Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2018-06-20 3072328]
S3 AssignedAccessManagerSvc;@%SystemRoot%\system32\assignedaccessmanagersvc.dll,-100; %SystemRoot%\system32\svchost.exe -k AssignedAccessManagerSvc;"ServiceDll" = %SystemRoot%\System32\assignedaccessmanagersvc.dll
S3 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; %SystemRoot%\system32\svchost.exe -k BcastDVRUserService;"ServiceDll" = %SystemRoot%\System32\BcastDVRUserService.dll
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; %SystemRoot%\system32\svchost.exe -k BthAppGroup;"ServiceDll" = %SystemRoot%\System32\Microsoft.Bluetooth.UserService.dll
S3 BluetoothUserService_13675d;Služba pro podporu uživatelů Bluetooth_13675d; C:\WINDOWS\system32\svchost.exe -k BthAppGroup;"ServiceDll" =
S3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\BTAGService.dll
S3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; %SystemRoot%\system32\svchost.exe -k LocalService -p;"ServiceDll" = %SystemRoot%\System32\BthAvctpSvc.dll
S3 CaptureService;@%SystemRoot%\system32\CaptureService.dll,-100; %SystemRoot%\system32\svchost.exe -k LocalService -p;"ServiceDll" = %SystemRoot%\System32\CaptureService.dll
S3 CaptureService_13675d;CaptureService_13675d; C:\WINDOWS\system32\svchost.exe -k LocalService -p;"ServiceDll" =
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; %SystemRoot%\system32\svchost.exe -k DevicesFlow;"ServiceDll" = %SystemRoot%\System32\Windows.Devices.Picker.dll
S3 DevicePickerUserSvc_13675d;DevicePicker_13675d; C:\WINDOWS\system32\svchost.exe -k DevicesFlow;"ServiceDll" =
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; %SystemRoot%\system32\svchost.exe -k DevicesFlow;"ServiceDll" = %SystemRoot%\System32\DevicesFlowBroker.dll
S3 DevicesFlowUserSvc_13675d;Tok zařízení_13675d; C:\WINDOWS\system32\svchost.exe -k DevicesFlow;"ServiceDll" =
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; %SystemRoot%\System32\svchost.exe -k diagnostics;"ServiceDll" = %systemroot%\system32\DiagSvc.dll
S3 EasyAntiCheat;EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [2018-05-07 776832]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2018-05-30 43648]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; %SystemRoot%\System32\svchost.exe -k Camera;"ServiceDll" = %SystemRoot%\system32\FrameServer.dll
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; %SystemRoot%\System32\svchost.exe -k GraphicsPerfSvcGroup;"ServiceDll" = %SystemRoot%\System32\GraphicsPerfSvc.dll
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p;"ServiceDll" = %SystemRoot%\System32\hvhostsvc.dll
S3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; %SystemRoot%\System32\svchost.exe -k netsvcs -p;"ServiceDll" = %SystemRoot%\system32\InstallService.dll
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p;"ServiceDll" = %SystemRoot%\System32\IpxlatCfg.dll
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p;"ServiceDll" = %SystemRoot%\System32\irmon.dll
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; %SystemRoot%\system32\svchost.exe -k netsvcs;"ServiceDll" = %SystemRoot%\System32\LanguageOverlayServer.dll
S3 MessagingService_13675d;Služba zasílání zpráv_13675d; C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" =
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-06-05 146888]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; %SystemRoot%\system32\svchost.exe -k netsvcs -p;"ServiceDll" = %SystemRoot%\System32\NaturalAuth.dll
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2018-06-20 2201920]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; %SystemRoot%\system32\svchost.exe -k PrintWorkflow;"ServiceDll" = %SystemRoot%\System32\PrintWorkflowService.dll
S3 PrintWorkflowUserSvc_13675d;PrintWorkflow_13675d; C:\WINDOWS\system32\svchost.exe -k PrintWorkflow;"ServiceDll" =
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; %SystemRoot%\System32\svchost.exe -k netsvcs -p;"ServiceDll" = %SystemRoot%\system32\PushToInstall.dll
S3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\RMapi.dll
S3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; %SystemRoot%\system32\svchost.exe -k LocalService -p;"ServiceDll" = %SystemRoot%\system32\SEMgrSvc.dll
S3 Sense;@%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2018-04-12 4737448]
S3 SharedRealitySvc;@%SystemRoot%\system32\SharedRealitySvc.dll,-100; %SystemRoot%\system32\svchost.exe -k LocalService -p;"ServiceDll" = %SystemRoot%\System32\SharedRealitySvc.dll
S3 spectrum;@%systemroot%\system32\spectrum.exe,-101; C:\WINDOWS\system32\spectrum.exe [2018-06-08 976384]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2018-04-03 1671968]
S4 AppVClient;@%systemroot%\system32\AppVClient.exe,-102; C:\WINDOWS\system32\AppVClient.exe [2018-05-30 826776]
S4 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2018-04-12 52832]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; %SystemRoot%\System32\svchost.exe -k netsvcs -p;"ServiceDll" = %systemroot%\system32\Windows.SharedPC.AccountManager.dll
S4 ssh-agent;OpenSSH Authentication Agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [2018-03-10 495616]

-----------------EOF-----------------

Ahoj

Nefunkcny zvuk bude sposobeny skor nefungujucim driverom (ovladacom) ako virusom. Napis presny nazov zakladnej dosky (alebo notebooku). Podla podla tohto logu to nevyzera zavirovane, ale mozme precistit zbytocnosti.

Ak nepouzivas, odorucam odinstalovat Seznam Software (Seznam Listicka). Takisto tam su nejake doplnky v Chrome.

Stiahni AdwCleaner: https://toolslib.net/downloads/finish/1/

• Uloz na plochu a ukonci vsetky programy
• Spusti AdwCleaner ako spravca
• Odsuhlas licencne podmienky
• Klikni na Skenovat nyni (Scan now) a pockaj na dokoncenie
• Klikni na Cisteni a opravy (Clean and Repair) a potvrd restart PC teraz
• Po restartovani PC sa otvori AdwCleaner, klikni na Zobrazit soubor protokolu
• Otvori sa log, jeho obsah sem skopiruj

Dobry den,
ok, oznaceni zakl. desky od MSI je MS-7504 ver. 1.0.
Diky

Nieco tam predsalen je. Pokracuj dalsimi krokmi z predchadzajuceho prispevku:

Ak nepouzivas, odorucam odinstalovat Seznam Software (Seznam Listicka). Takisto tam su nejake doplnky v Chrome.

Stiahni AdwCleaner: https://toolslib.net/downloads/finish/1/

• Uloz na plochu a ukonci vsetky programy
• Spusti AdwCleaner ako spravca
• Odsuhlas licencne podmienky
• Klikni na Skenovat nyni (Scan now) a pockaj na dokoncenie
• Klikni na Cisteni a opravy (Clean and Repair) a potvrd restart PC teraz
• Po restartovani PC sa otvori AdwCleaner, klikni na Zobrazit soubor protokolu
• Otvori sa log, jeho obsah sem skopiruj

OK TADY TO JE

# -------------------------------
# Malwarebytes AdwCleaner 7.2.1.0
# -------------------------------
# Build: 06-26-2018
# Database: 2018-07-03.1
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 07-03-2018
# Duration: 00:00:05
# OS: Windows 10 Pro
# Cleaned: 27
# Failed: 2


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Program Files (x86)\OneSystemCare

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{98700878}
Deleted HKLM\Software\Classes\Interface\{EBBC143E-44AC-4B9C-BCCE-9A0E42921F2A}
Deleted HKLM\Software\Classes\Interface\{655847A1-FA36-46ED-923B-A5CD523696EA}
Deleted HKLM\Software\Classes\Interface\{FBA8498F-B3A0-4942-A2BF-E0CB7BC7E000}
Deleted HKLM\Software\Classes\Interface\{F68DC16C-9C2B-455B-8853-7E4D34BAA3F4}
Deleted HKLM\Software\Classes\Interface\{F1912128-469A-4138-AA26-9699C15BB13E}
Deleted HKLM\Software\Classes\Interface\{EB1F9F3C-5526-4DAE-BD4B-3EAA7715DA9F}
Deleted HKLM\Software\Classes\Interface\{DD260902-9420-4055-A956-9152EB4F3E6A}
Deleted HKLM\Software\Classes\Interface\{D83C83BF-3EDD-4410-ADAB-5295116DD8C7}
Deleted HKLM\Software\Classes\Interface\{BFDE183A-C6FE-41D2-80F9-586C29210AC2}
Deleted HKLM\Software\Classes\Interface\{B0474212-0D9D-4361-90B3-B89D1A44275D}
Deleted HKLM\Software\Classes\Interface\{A5ACC874-D943-483F-A2D1-14598D51F872}
Deleted HKLM\Software\Classes\Interface\{991C9D8D-A789-4DB9-BDFC-5F33398B04BF}
Deleted HKLM\Software\Classes\Interface\{8D5BC51D-C9D3-43B9-B728-B30677B7C7E8}
Deleted HKLM\Software\Classes\Interface\{803F550E-BAAE-42BB-8917-64BA0006AB17}
Deleted HKLM\Software\Classes\Interface\{7A6BE473-7960-44D0-BD54-D23DA76353DF}
Deleted HKLM\Software\Classes\Interface\{762D463B-C45A-456D-A80D-8689C297C91E}
Deleted HKLM\Software\Classes\Interface\{615FACDF-DADB-440D-AC91-8AAB0AE9E3AD}
Deleted HKLM\Software\Classes\Interface\{5D3DCC39-9233-4330-94E9-DA92BE49CA1A}
Deleted HKLM\Software\Classes\Interface\{52C5395B-1FCD-47FA-A834-FD830701C2D5}
Deleted HKLM\Software\Classes\Interface\{4CA2AC92-971B-47B1-ACB6-357B552155AC}
Deleted HKLM\Software\Classes\Interface\{3137BC14-D8D7-4B67-8FFA-2E0B2E9D541B}
Deleted HKLM\Software\Classes\Interface\{2AF343DD-3102-4F9D-AC95-DCA4C95382C7}
Deleted HKLM\Software\Classes\Interface\{02F878DF-E2BE-4B85-8CB4-A0D2D4E2ED7F}
Deleted HKLM\Software\Classes\Interface\{0FEB2313-F89B-4AC6-8153-84025604A06A}
Deleted HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{72A6AB0F-2FA8-4C73-9FCB-1E62A608F001}

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****


Not Deleted search.eshield.com
Not Deleted search.eshield.com


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [4077 octets] - [03/07/2018 20:58:59]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Poprosim o obidva logy z FRST podla tohto navodu (FRST.txt a Addition.txt): https://forum.viry.cz/viewtopic.php?f=13&t=152707

V pripade, ze sa FRSTLauncher nebude dat stiahnut alebo spustit, pouzi iba samotny FRST.

Ak sa logy nezmestia do jedneho prispevku, zabal ich do archivu RAR alebo ZIP a posli ako prilohu.

FRSTlanch nelze stahnout

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20.06.2018
Ran by jj (administrator) on JJ-PC (04-07-2018 15:32:53)
Running from C:\Users\jj\Downloads
Loaded Profiles: jj (Available Profiles: jj & DefaultAppPool)
Platform: Windows 10 Pro Version 1803 17134.112 (X64) Language: Čeština (Česko)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1806.18062-0\MsMpEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1806.18062-0\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\jj\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\jj\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
() C:\Program Files (x86)\Origin\QtWebEngineProcess.exe
() C:\Program Files (x86)\Origin\QtWebEngineProcess.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11805.1001.42.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397752 2016-04-05] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14021336 2015-06-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-12-19] (Oracle Corporation)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-21-2253141340-2309542035-3164301-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3106600 2018-06-20] (Electronic Arts)
HKU\S-1-5-21-2253141340-2309542035-3164301-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\jj\AppData\Roaming\Seznam.cz\szninstall.exe [1069296 2018-03-27] ()
HKU\S-1-5-21-2253141340-2309542035-3164301-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\jj\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [109808 2018-03-27] ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: [S-1-5-21-2253141340-2309542035-3164301-1000] => 127.0.0.1:8013
Tcpip\Parameters: [DhcpNameServer] 192.168.33.5 192.168.33.1
Tcpip\..\Interfaces\{336ccda5-3d46-468a-b8b5-10dfce35e50b}: [DhcpNameServer] 192.168.33.5 192.168.33.1

Internet Explorer:
==================
HKU\S-1-5-21-2253141340-2309542035-3164301-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/?clid=12454
SearchScopes: HKU\S-1-5-21-2253141340-2309542035-3164301-1000 -> {071B25C8-C84C-49DE-9F21-26AC9A1B5D23} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-2253141340-2309542035-3164301-1000 -> {29E078CC-69F6-4899-A4BC-358DBCD607DB} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-2253141340-2309542035-3164301-1000 -> {77BDBBE3-6DD7-4B50-8DA5-06386E33E2AF} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_12454
SearchScopes: HKU\S-1-5-21-2253141340-2309542035-3164301-1000 -> {930FE4F2-A462-4F67-825B-5967ABC483AA} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_12454
SearchScopes: HKU\S-1-5-21-2253141340-2309542035-3164301-1000 -> {99515863-29A9-452F-A884-4FEF11925D31} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-2253141340-2309542035-3164301-1000 -> {9974AFBF-C9AA-4A73-A77A-D3CAC6E4C36B} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_12454
SearchScopes: HKU\S-1-5-21-2253141340-2309542035-3164301-1000 -> {A0AC35BE-BBF7-46B3-9B30-0BFD46F82074} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-2253141340-2309542035-3164301-1000 -> {C6E09BC7-DC4E-4C4A-90F2-F58A2170F12B} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_12454
SearchScopes: HKU\S-1-5-21-2253141340-2309542035-3164301-1000 -> {CF3A2A6A-2E9B-458D-BF9F-F3CD5522A865} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_12454
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\ssv.dll [2018-03-25] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\jp2ssv.dll [2018-03-25] (Oracle Corporation)
DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} hxxps://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

FireFox:
========
FF DefaultProfile: fr1uthbk.default
FF ProfilePath: C:\Users\jj\AppData\Roaming\Mozilla\Firefox\Profiles\fr1uthbk.default [2018-06-23]
FF NewTab: Mozilla\Firefox\Profiles\fr1uthbk.default ->
FF Extension: (Seznam lištička) - C:\Users\jj\AppData\Roaming\Mozilla\Firefox\Profiles\fr1uthbk.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2017-10-31] [Legacy]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_30_0_0_113.dll [2018-06-15] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_30_0_0_113.dll [2018-06-15] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1224194.dll [2016-02-19] (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll [2018-03-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.161.2 -> C:\Program Files (x86)\Java\jre1.8.0_161\bin\plugin2\npjp2.dll [2018-03-25] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin HKU\S-1-5-21-2253141340-2309542035-3164301-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\jj\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-02-19] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2253141340-2309542035-3164301-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [No File]

Chrome:
=======
CHR NewTab: Default -> Active:"chrome-extension://blmojkbhnkkphngknkmgccmlenfaelkd/speeddial/newTab.html"
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\jj\AppData\Local\Google\Chrome\User Data\Default [2018-07-04]
CHR Extension: (Prezentace) - C:\Users\jj\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Dokumenty) - C:\Users\jj\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Disk Google) - C:\Users\jj\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-06-25]
CHR Extension: (Seznam doplněk - Email) - C:\Users\jj\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2018-05-04]
CHR Extension: (Seznam doplněk - Esko-) - C:\Users\jj\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd [2018-05-04]
CHR Extension: (YouTube) - C:\Users\jj\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-06-25]
CHR Extension: (Online Football Manager) - C:\Users\jj\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpmnhbncebjjpeligahihhphgkkblldl [2016-09-01]
CHR Extension: (My Start - Stunning Scenery Wallpapers) - C:\Users\jj\AppData\Local\Google\Chrome\User Data\Default\Extensions\dogdoihocdkadpalbghcpfafbojcfofa [2017-11-24]
CHR Extension: (Tabulky) - C:\Users\jj\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Dokumenty Google offline) - C:\Users\jj\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-06-25]
CHR Extension: (Penaltovém Rozstřelu 2010) - C:\Users\jj\AppData\Local\Google\Chrome\User Data\Default\Extensions\heglpchjbjmchcmenfopoohbdibnnfap [2016-09-01]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\jj\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-04]
CHR Extension: (Gmail) - C:\Users\jj\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-06-25]
CHR Extension: (Chrome Media Router) - C:\Users\jj\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-06-15]
CHR Profile: C:\Users\jj\AppData\Local\Google\Chrome\User Data\System Profile [2018-04-16]
CHR HKU\S-1-5-21-2253141340-2309542035-3164301-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [blmojkbhnkkphngknkmgccmlenfaelkd] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2253141340-2309542035-3164301-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [olfeabkoenfaoljndfecamgilllcpiak] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [dogdoihocdkadpalbghcpfafbojcfofa] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [776832 2018-05-07] (EasyAntiCheat Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164856 2016-04-05] (NVIDIA Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144 2016-04-05] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2522680 2016-04-05] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2201920 2018-06-20] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3072328 2018-06-20] (Electronic Arts)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4737448 2018-04-12] (Microsoft Corporation)
S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\NisSrv.exe [3925648 2018-06-30] (Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MsMpEng.exe [100080 2018-06-30] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28216 2016-04-05] (NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [56384 2016-03-21] (NVIDIA Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46592 2018-06-30] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [340008 2018-06-30] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [59944 2018-06-30] (Microsoft Corporation)
U3 idsvc; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-07-04 15:32 - 2018-07-04 15:33 - 000015550 _____ C:\Users\jj\Downloads\FRST.txt
2018-07-04 15:32 - 2018-07-04 15:32 - 002412544 _____ (Farbar) C:\Users\jj\Downloads\FRST64.exe
2018-07-04 15:32 - 2018-07-04 15:32 - 000000000 ____D C:\FRST
2018-07-03 20:57 - 2018-07-03 21:01 - 000000000 ____D C:\AdwCleaner
2018-07-03 20:56 - 2018-07-03 20:57 - 007395536 _____ (Malwarebytes) C:\Users\jj\Downloads\adwcleaner_7.2.1 (1).exe
2018-07-03 20:56 - 2018-07-03 20:56 - 007395536 _____ (Malwarebytes) C:\Users\jj\Downloads\adwcleaner_7.2.1.exe
2018-07-02 20:22 - 2018-07-02 20:23 - 000000000 ____D C:\rsit
2018-07-02 20:22 - 2018-07-02 20:22 - 001329152 _____ C:\Users\jj\Downloads\RSITx64.exe
2018-07-02 19:55 - 2018-07-02 19:55 - 000000000 ____D C:\Program Files\Realtek
2018-07-02 19:55 - 2015-04-13 16:25 - 003262184 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE2.dll
2018-07-02 19:55 - 2015-02-04 00:38 - 001413776 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2018-07-02 19:55 - 2015-01-23 18:16 - 000213432 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaemaxapo64.dll
2018-07-02 19:55 - 2014-06-17 19:17 - 000856992 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll
2018-07-02 19:55 - 2014-04-10 12:19 - 002101848 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll
2018-07-02 19:55 - 2014-02-27 20:02 - 002162992 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE.dll
2018-07-02 19:55 - 2013-06-25 12:47 - 000871856 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaeapo64.dll
2018-07-02 19:55 - 2013-06-25 12:47 - 000162224 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\toseaeapo64.dll
2018-07-02 19:55 - 2013-06-25 12:46 - 000582056 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosasfapo64.dll
2018-07-02 19:55 - 2012-01-10 10:20 - 000065944 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll
2018-07-02 19:55 - 2011-03-17 12:17 - 001361336 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll
2018-07-02 19:55 - 2011-03-07 17:11 - 000148416 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll
2018-07-02 19:55 - 2009-11-24 09:55 - 000518896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2018-07-02 19:55 - 2009-11-24 09:55 - 000211184 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2018-07-02 19:55 - 2009-11-24 09:55 - 000198896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2018-07-02 19:55 - 2009-11-24 09:55 - 000155888 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2018-07-02 19:54 - 2015-06-18 18:45 - 004496600 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2018-07-02 19:54 - 2015-06-18 17:59 - 002862488 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2018-07-02 19:54 - 2015-06-17 19:47 - 002930904 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2018-07-02 19:54 - 2015-06-17 19:47 - 002585816 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RltkAPO.dll
2018-07-02 19:54 - 2015-06-17 14:45 - 003234520 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2018-07-02 19:54 - 2015-06-15 17:39 - 001748184 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2018-07-02 19:54 - 2015-06-11 19:40 - 003157796 _____ C:\WINDOWS\system32\Drivers\rtkSSTsetting.dat
2018-07-02 19:54 - 2015-06-10 13:20 - 003129672 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSSTAPO.dll
2018-07-02 19:54 - 2015-06-10 13:20 - 000728392 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSstCApoPropPage.dll
2018-07-02 19:54 - 2015-06-09 11:17 - 005708736 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICV2apo.dll
2018-07-02 19:54 - 2015-05-27 18:51 - 000349528 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2API.dll
2018-07-02 19:54 - 2015-05-26 11:59 - 000166616 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2018-07-02 19:54 - 2015-05-18 14:47 - 002702040 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2018-07-02 19:54 - 2015-05-15 19:27 - 002918104 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2018-07-02 19:54 - 2015-05-15 16:32 - 001316056 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2018-07-02 19:54 - 2015-05-11 18:53 - 012996528 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO3064.dll
2018-07-02 19:54 - 2015-05-11 13:08 - 001374640 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO6064.dll
2018-07-02 19:54 - 2015-05-11 13:08 - 001192368 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO5064.dll
2018-07-02 19:54 - 2015-05-11 13:08 - 001145264 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO4064.dll
2018-07-02 19:54 - 2015-05-11 13:08 - 000980400 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO2064.dll
2018-07-02 19:54 - 2015-04-27 16:09 - 000328816 _____ (ICEpower a/s) C:\WINDOWS\system32\ICEsoundAPO64.dll
2018-07-02 19:54 - 2015-04-24 05:42 - 000858256 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll
2018-07-02 19:54 - 2015-04-24 05:42 - 000684176 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll
2018-07-02 19:54 - 2015-04-24 05:42 - 000435856 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll
2018-07-02 19:54 - 2015-04-24 05:41 - 000555664 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.DLL
2018-07-02 19:54 - 2015-02-05 17:48 - 012834736 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO4064.dll
2018-07-02 19:54 - 2015-02-05 17:48 - 002789808 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO7064.dll
2018-07-02 19:54 - 2015-02-04 00:38 - 000454288 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2018-07-02 19:54 - 2015-02-04 00:38 - 000369296 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2018-07-02 19:54 - 2015-02-04 00:38 - 000329360 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll
2018-07-02 19:54 - 2015-02-04 00:38 - 000329360 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2018-07-02 19:54 - 2015-01-19 18:10 - 072113152 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2018-07-02 19:54 - 2014-12-11 08:10 - 001104040 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\slcnt64.dll
2018-07-02 19:54 - 2014-12-11 08:10 - 000943784 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2018-07-02 19:54 - 2014-12-11 08:10 - 000734376 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2018-07-02 19:54 - 2014-12-11 08:10 - 000250536 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2018-07-02 19:54 - 2014-11-11 13:44 - 000631000 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2018-07-02 19:54 - 2014-10-24 10:12 - 005234952 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOlfx.dll
2018-07-02 19:54 - 2014-10-24 10:12 - 000995120 _____ (Nahimic Inc) C:\WINDOWS\system32\NahimicAPONSControl.dll
2018-07-02 19:54 - 2014-08-14 19:16 - 005804772 _____ C:\WINDOWS\system32\Drivers\rtvienna.dat
2018-07-02 19:54 - 2014-04-10 12:19 - 002041432 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
2018-07-02 19:54 - 2014-01-31 17:27 - 001313904 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxSpeechAPO64.dll
2018-07-02 19:54 - 2013-10-11 11:31 - 000947760 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll
2018-07-02 19:54 - 2013-08-14 15:36 - 000662784 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
2018-07-02 19:54 - 2013-08-14 15:35 - 000663296 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll
2018-07-02 19:54 - 2013-07-23 15:39 - 014048512 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2018-07-02 19:54 - 2013-07-23 15:39 - 000922880 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2018-07-02 19:54 - 2013-04-03 14:13 - 000906800 _____ (Sony Corporation) C:\WINDOWS\system32\MISS_APO.dll
2018-07-02 19:54 - 2012-08-31 19:18 - 007164176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
2018-07-02 19:54 - 2012-08-31 19:17 - 000434960 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
2018-07-02 19:54 - 2012-08-31 19:17 - 000141584 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
2018-07-02 19:54 - 2012-08-31 19:17 - 000124176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
2018-07-02 19:54 - 2012-08-31 19:17 - 000075024 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
2018-07-02 19:54 - 2011-12-20 15:32 - 000331880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2018-07-02 19:54 - 2011-11-22 16:28 - 000014952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2018-07-02 19:54 - 2011-09-02 14:21 - 000221024 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
2018-07-02 19:54 - 2011-09-02 14:21 - 000081248 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
2018-07-02 19:54 - 2011-09-02 14:21 - 000078688 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
2018-07-02 19:54 - 2011-08-23 17:00 - 000603984 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll
2018-07-02 19:54 - 2010-11-08 07:31 - 000375128 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2018-07-02 19:54 - 2010-11-08 07:31 - 000310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2018-07-02 19:54 - 2010-11-08 07:31 - 000310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2018-07-02 19:54 - 2010-11-08 07:31 - 000204120 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2018-07-02 19:54 - 2010-11-08 07:31 - 000101208 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2018-07-02 19:54 - 2010-11-08 07:31 - 000078680 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2018-07-02 19:54 - 2010-09-27 09:34 - 000318808 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll
2018-07-02 19:54 - 2010-07-22 16:48 - 000074064 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
2018-07-02 19:53 - 2015-06-02 19:25 - 001576976 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CX64APO.dll
2018-07-02 19:53 - 2015-05-27 18:51 - 002461016 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv211.dll
2018-07-02 19:53 - 2015-05-27 18:51 - 002393432 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv201.dll
2018-07-02 19:53 - 2015-05-27 18:51 - 000944984 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOProp.dll
2018-07-02 19:53 - 2015-05-25 15:18 - 003195416 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2018-07-02 19:53 - 2014-11-04 13:42 - 006242576 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64AF3.dll
2018-07-02 19:53 - 2014-11-04 13:42 - 001933584 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64AF3.dll
2018-07-02 19:53 - 2014-11-04 13:42 - 000336144 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64AF3.dll
2018-07-02 19:53 - 2014-11-04 13:42 - 000284944 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64F3.dll
2018-07-02 19:53 - 2014-09-24 11:31 - 007087448 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll
2018-07-02 19:53 - 2014-09-24 11:31 - 001939800 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll
2018-07-02 19:53 - 2014-09-24 11:31 - 000315736 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll
2018-07-02 19:53 - 2014-09-24 11:31 - 000261464 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll
2018-07-02 19:53 - 2014-06-09 10:59 - 000560328 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2018-07-02 19:53 - 2014-05-22 16:24 - 000096568 _____ C:\WINDOWS\system32\audioLibVc.dll
2018-07-02 19:53 - 2013-10-11 12:47 - 000113576 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2018-07-02 19:53 - 2013-10-07 00:26 - 000501184 _____ (DTS) C:\WINDOWS\system32\DTSU2PLFX64.dll
2018-07-02 19:53 - 2013-10-07 00:26 - 000487360 _____ (DTS) C:\WINDOWS\system32\DTSU2PGFX64.dll
2018-07-02 19:53 - 2013-10-07 00:26 - 000415680 _____ (DTS) C:\WINDOWS\system32\DTSU2PREC64.dll
2018-07-02 19:53 - 2013-06-21 11:01 - 000109848 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll
2018-07-02 19:53 - 2012-03-08 11:47 - 000108640 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2018-07-02 19:53 - 2011-05-31 09:42 - 001756264 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2018-07-02 19:53 - 2011-05-31 09:42 - 001568360 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2018-07-02 19:53 - 2011-05-31 09:42 - 001486952 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
2018-07-02 19:53 - 2011-05-31 09:42 - 000728680 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2018-07-02 19:53 - 2011-05-31 09:42 - 000712296 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2018-07-02 19:53 - 2011-05-31 09:42 - 000693352 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2018-07-02 19:53 - 2011-05-31 09:42 - 000491112 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2018-07-02 19:53 - 2011-05-31 09:42 - 000432744 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
2018-07-02 19:53 - 2011-05-31 09:42 - 000428648 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2018-07-02 19:53 - 2011-05-31 09:42 - 000242792 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
2018-07-02 19:53 - 2011-05-31 09:42 - 000242792 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
2018-07-02 19:53 - 2011-05-31 09:42 - 000241768 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
2018-07-02 19:39 - 2018-07-02 19:39 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2018-07-02 19:30 - 2018-07-02 19:31 - 066067552 _____ (Realtek Semiconductor Corp.) C:\Users\jj\Downloads\Nepotvrzeno 645529.crdownload
2018-06-15 16:48 - 2018-06-08 21:02 - 004527680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2018-06-15 16:48 - 2018-06-08 20:45 - 012712448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2018-06-15 16:48 - 2018-06-08 20:43 - 002922496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2018-06-15 16:48 - 2018-06-08 19:06 - 001539488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2018-06-15 16:48 - 2018-06-08 18:51 - 011903488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2018-06-15 16:48 - 2018-06-08 12:31 - 007900984 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2018-06-15 16:48 - 2018-06-08 11:30 - 009148320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2018-06-15 16:48 - 2018-06-08 11:30 - 001017080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
2018-06-15 16:48 - 2018-06-08 11:29 - 007520000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-06-15 16:48 - 2018-06-08 11:29 - 002371392 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2018-06-15 16:48 - 2018-06-08 11:13 - 025846784 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2018-06-15 16:48 - 2018-06-08 11:12 - 000861616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
2018-06-15 16:48 - 2018-06-08 11:10 - 002331584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2018-06-15 16:48 - 2018-06-08 11:09 - 006569960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-06-15 16:48 - 2018-06-08 11:09 - 001380200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2018-06-15 16:48 - 2018-06-08 11:04 - 004706816 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2018-06-15 16:48 - 2018-06-08 11:03 - 022005760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2018-06-15 16:48 - 2018-06-08 11:02 - 022713856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2018-06-15 16:48 - 2018-06-08 11:00 - 019404288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2018-06-15 16:48 - 2018-06-08 11:00 - 004372992 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2018-06-15 16:48 - 2018-06-08 10:59 - 004867072 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2018-06-15 16:48 - 2018-06-08 10:59 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-06-15 16:48 - 2018-06-08 10:58 - 007581696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2018-06-15 16:48 - 2018-05-20 21:43 - 021389360 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2018-06-15 16:48 - 2018-05-20 20:14 - 020383712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2018-06-15 16:48 - 2018-05-20 18:59 - 023862784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2018-06-15 16:48 - 2018-05-20 13:52 - 007436632 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2018-06-15 16:48 - 2018-05-20 13:34 - 016592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2018-06-15 16:48 - 2018-05-20 13:33 - 001665920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2018-06-15 16:48 - 2018-05-20 13:30 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-06-15 16:48 - 2018-05-20 13:26 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2018-06-15 16:48 - 2018-05-20 13:23 - 013873152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2018-06-15 16:48 - 2018-05-20 13:23 - 002366976 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2018-06-15 16:48 - 2018-05-20 13:16 - 006661120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2018-06-15 16:47 - 2018-06-08 21:07 - 002266520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2018-06-15 16:47 - 2018-06-08 21:07 - 000506184 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2018-06-15 16:47 - 2018-06-08 21:02 - 001634808 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2018-06-15 16:47 - 2018-06-08 21:02 - 000661160 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe
2018-06-15 16:47 - 2018-06-08 21:01 - 002395056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2018-06-15 16:47 - 2018-06-08 21:01 - 001046944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2018-06-15 16:47 - 2018-06-08 20:45 - 004392448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2018-06-15 16:47 - 2018-06-08 20:44 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2018-06-15 16:47 - 2018-06-08 20:44 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2018-06-15 16:47 - 2018-06-08 20:43 - 003640832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2018-06-15 16:47 - 2018-06-08 20:43 - 001719808 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2018-06-15 16:47 - 2018-06-08 20:43 - 001659904 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2018-06-15 16:47 - 2018-06-08 20:43 - 001543680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2018-06-15 16:47 - 2018-06-08 20:43 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2018-06-15 16:47 - 2018-06-08 20:42 - 003999232 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2018-06-15 16:47 - 2018-06-08 20:42 - 003653120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2018-06-15 16:47 - 2018-06-08 20:42 - 001605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2018-06-15 16:47 - 2018-06-08 20:42 - 000800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwcreator.exe
2018-06-15 16:47 - 2018-06-08 20:41 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2018-06-15 16:47 - 2018-06-08 20:41 - 000878080 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2018-06-15 16:47 - 2018-06-08 20:41 - 000758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2018-06-15 16:47 - 2018-06-08 20:41 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2018-06-15 16:47 - 2018-06-08 20:40 - 000465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXP.dll
2018-06-15 16:47 - 2018-06-08 19:04 - 001454024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2018-06-15 16:47 - 2018-06-08 18:58 - 002206544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL
2018-06-15 16:47 - 2018-06-08 18:58 - 000917408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2018-06-15 16:47 - 2018-06-08 18:47 - 003492864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2018-06-15 16:47 - 2018-06-08 18:47 - 002895872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2018-06-15 16:47 - 2018-06-08 18:47 - 001462784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dui70.dll
2018-06-15 16:47 - 2018-06-08 18:47 - 001032704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2018-06-15 16:47 - 2018-06-08 18:47 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2018-06-15 16:47 - 2018-06-08 18:46 - 003444224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2018-06-15 16:47 - 2018-06-08 18:45 - 002401280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2018-06-15 16:47 - 2018-06-08 18:06 - 000976384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2018-06-15 16:47 - 2018-06-08 18:05 - 000944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2018-06-15 16:47 - 2018-06-08 16:00 - 000658432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2018-06-15 16:47 - 2018-06-08 12:38 - 005821544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2018-06-15 16:47 - 2018-06-08 12:37 - 002417840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2018-06-15 16:47 - 2018-06-08 12:35 - 001613200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2018-06-15 16:47 - 2018-06-08 12:35 - 000613144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2018-06-15 16:47 - 2018-06-08 12:34 - 001299056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2018-06-15 16:47 - 2018-06-08 12:34 - 000748512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2018-06-15 16:47 - 2018-06-08 12:31 - 003180176 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2018-06-15 16:47 - 2018-06-08 12:31 - 000029600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\uefi.sys
2018-06-15 16:47 - 2018-06-08 12:30 - 000705440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2018-06-15 16:47 - 2018-06-08 11:34 - 001140576 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2018-06-15 16:47 - 2018-06-08 11:34 - 000983016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2018-06-15 16:47 - 2018-06-08 11:33 - 001034632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-06-15 16:47 - 2018-06-08 11:33 - 000272296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2018-06-15 16:47 - 2018-06-08 11:33 - 000269224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-06-15 16:47 - 2018-06-08 11:31 - 001174432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2018-06-15 16:47 - 2018-06-08 11:31 - 001012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2018-06-15 16:47 - 2018-06-08 11:30 - 003296896 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2018-06-15 16:47 - 2018-06-08 11:30 - 001798552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2018-06-15 16:47 - 2018-06-08 11:30 - 001363632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2018-06-15 16:47 - 2018-06-08 11:30 - 001063328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2018-06-15 16:47 - 2018-06-08 11:30 - 000723360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2018-06-15 16:47 - 2018-06-08 11:30 - 000722808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2018-06-15 16:47 - 2018-06-08 11:30 - 000709824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2018-06-15 16:47 - 2018-06-08 11:30 - 000567184 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2018-06-15 16:47 - 2018-06-08 11:30 - 000565152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2018-06-15 16:47 - 2018-06-08 11:30 - 000527264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2018-06-15 16:47 - 2018-06-08 11:30 - 000491328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2018-06-15 16:47 - 2018-06-08 11:30 - 000194456 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2018-06-15 16:47 - 2018-06-08 11:30 - 000134584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 006817384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 004970360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 004403280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 003283408 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 002836384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2018-06-15 16:47 - 2018-06-08 11:29 - 002753048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 002590400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2018-06-15 16:47 - 2018-06-08 11:29 - 002570712 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 002564984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 002546592 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 002462272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 002422688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2018-06-15 16:47 - 2018-06-08 11:29 - 001946328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 001934400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 001921952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2018-06-15 16:47 - 2018-06-08 11:29 - 001792808 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 001784584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 001611592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 001457136 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2018-06-15 16:47 - 2018-06-08 11:29 - 001364184 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 001288816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 001258288 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2018-06-15 16:47 - 2018-06-08 11:29 - 001209800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 001190152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 001150416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 001148808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 001112608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 001097648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 001026976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2018-06-15 16:47 - 2018-06-08 11:29 - 000945568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2018-06-15 16:47 - 2018-06-08 11:29 - 000885880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 000678840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 000659096 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 000594128 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2018-06-15 16:47 - 2018-06-08 11:29 - 000416144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 000413824 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 000375712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2018-06-15 16:47 - 2018-06-08 11:29 - 000313592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 000266656 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 000260896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 000164768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2018-06-15 16:47 - 2018-06-08 11:29 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 000084288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageOverlayUtil.dll
2018-06-15 16:47 - 2018-06-08 11:29 - 000057960 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel.appcore.dll
2018-06-15 16:47 - 2018-06-08 11:12 - 000786176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2018-06-15 16:47 - 2018-06-08 11:11 - 001461744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2018-06-15 16:47 - 2018-06-08 11:11 - 000550616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2018-06-15 16:47 - 2018-06-08 11:10 - 002479272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2018-06-15 16:47 - 2018-06-08 11:10 - 002307336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2018-06-15 16:47 - 2018-06-08 11:10 - 001988072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2018-06-15 16:47 - 2018-06-08 11:10 - 001397200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2018-06-15 16:47 - 2018-06-08 11:10 - 001011992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2018-06-15 16:47 - 2018-06-08 11:10 - 000880152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2018-06-15 16:47 - 2018-06-08 11:10 - 000457152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
2018-06-15 16:47 - 2018-06-08 11:09 - 006527064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2018-06-15 16:47 - 2018-06-08 11:09 - 004788512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2018-06-15 16:47 - 2018-06-08 11:09 - 004469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2018-06-15 16:47 - 2018-06-08 11:09 - 002535552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2018-06-15 16:47 - 2018-06-08 11:09 - 002486992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2018-06-15 16:47 - 2018-06-08 11:09 - 002242216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2018-06-15 16:47 - 2018-06-08 11:09 - 001980872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2018-06-15 16:47 - 2018-06-08 11:09 - 001805776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2018-06-15 16:47 - 2018-06-08 11:09 - 001709720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2018-06-15 16:47 - 2018-06-08 11:09 - 001620880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2018-06-15 16:47 - 2018-06-08 11:09 - 001584128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2018-06-15 16:47 - 2018-06-08 11:09 - 001129648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2018-06-15 16:47 - 2018-06-08 11:09 - 001077504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll
2018-06-15 16:47 - 2018-06-08 11:09 - 001020168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2018-06-15 16:47 - 2018-06-08 11:09 - 000988136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2018-06-15 16:47 - 2018-06-08 11:09 - 000770160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2018-06-15 16:47 - 2018-06-08 11:09 - 000607648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2018-06-15 16:47 - 2018-06-08 11:09 - 000568720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2018-06-15 16:47 - 2018-06-08 11:09 - 000567144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2018-06-15 16:47 - 2018-06-08 11:09 - 000553248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2018-06-15 16:47 - 2018-06-08 11:09 - 000356960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2018-06-15 16:47 - 2018-06-08 11:09 - 000064648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LanguageOverlayUtil.dll
2018-06-15 16:47 - 2018-06-08 11:09 - 000050208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel.appcore.dll
2018-06-15 16:47 - 2018-06-08 11:01 - 004563456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2018-06-15 16:47 - 2018-06-08 11:01 - 002961408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2018-06-15 16:47 - 2018-06-08 11:00 - 003320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2018-06-15 16:47 - 2018-06-08 11:00 - 001285120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2018-06-15 16:47 - 2018-06-08 11:00 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
2018-06-15 16:47 - 2018-06-08 10:59 - 006032384 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2018-06-15 16:47 - 2018-06-08 10:59 - 001767936 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2018-06-15 16:47 - 2018-06-08 10:59 - 001318400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2018-06-15 16:47 - 2018-06-08 10:59 - 000673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2018-06-15 16:47 - 2018-06-08 10:59 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2018-06-15 16:47 - 2018-06-08 10:58 - 003712512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2018-06-15 16:47 - 2018-06-08 10:58 - 001676800 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll
2018-06-15 16:47 - 2018-06-08 10:58 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2018-06-15 16:47 - 2018-06-08 10:58 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2018-06-15 16:47 - 2018-06-08 10:58 - 000813568 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2018-06-15 16:47 - 2018-06-08 10:57 - 003348992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2018-06-15 16:47 - 2018-06-08 10:57 - 002172416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-06-15 16:47 - 2018-06-08 10:57 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
2018-06-15 16:47 - 2018-06-08 10:57 - 001485312 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2018-06-15 16:47 - 2018-06-08 10:57 - 000483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2018-06-15 16:47 - 2018-06-08 10:56 - 005780992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2018-06-15 16:47 - 2018-06-08 10:56 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2018-06-15 16:47 - 2018-06-08 10:56 - 004336128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2018-06-15 16:47 - 2018-06-08 10:56 - 003293696 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2018-06-15 16:47 - 2018-06-08 10:56 - 002902016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2018-06-15 16:47 - 2018-06-08 10:56 - 002900480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2018-06-15 16:47 - 2018-06-08 10:56 - 002364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2018-06-15 16:47 - 2018-06-08 10:56 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2018-06-15 16:47 - 2018-06-08 10:56 - 001550848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-06-15 16:47 - 2018-06-08 10:56 - 001395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2018-06-15 16:47 - 2018-06-08 10:56 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-06-15 16:47 - 2018-06-08 10:56 - 000908800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2018-06-15 16:47 - 2018-06-08 10:56 - 000871424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2018-06-15 16:47 - 2018-06-08 10:56 - 000869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-06-15 16:47 - 2018-06-08 10:56 - 000858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2018-06-15 16:47 - 2018-06-08 10:56 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-06-15 16:47 - 2018-06-08 10:56 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2018-06-15 16:47 - 2018-06-08 10:56 - 000389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2018-06-15 16:47 - 2018-06-08 10:56 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2018-06-15 16:47 - 2018-06-08 10:56 - 000264704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll
2018-06-15 16:47 - 2018-06-08 10:55 - 003441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2018-06-15 16:47 - 2018-06-08 10:55 - 002248192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2018-06-15 16:47 - 2018-06-08 10:55 - 002236928 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2018-06-15 16:47 - 2018-06-08 10:55 - 002061824 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2018-06-15 16:47 - 2018-06-08 10:55 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2018-06-15 16:47 - 2018-06-08 10:55 - 001371648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2018-06-15 16:47 - 2018-06-08 10:55 - 001242112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2018-06-15 16:47 - 2018-06-08 10:55 - 001192448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
2018-06-15 16:47 - 2018-06-08 10:55 - 001171968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2018-06-15 16:47 - 2018-06-08 10:55 - 001160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2018-06-15 16:47 - 2018-06-08 10:55 - 001070080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2018-06-15 16:47 - 2018-06-08 10:55 - 001033728 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2018-06-15 16:47 - 2018-06-08 10:55 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2018-06-15 16:47 - 2018-06-08 10:55 - 000667648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2018-06-15 16:47 - 2018-06-08 10:55 - 000652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2018-06-15 16:47 - 2018-06-08 10:55 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2018-06-15 16:47 - 2018-06-08 10:54 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2018-06-15 16:47 - 2018-06-08 10:54 - 002789376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2018-06-15 16:47 - 2018-06-08 10:54 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2018-06-15 16:47 - 2018-06-08 10:54 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2018-06-15 16:47 - 2018-06-08 10:54 - 001128448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2018-06-15 16:47 - 2018-06-08 10:54 - 000999936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2018-06-15 16:47 - 2018-06-08 10:54 - 000950272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2018-06-15 16:47 - 2018-06-08 10:54 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-06-15 16:47 - 2018-06-08 10:54 - 000619520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2018-06-15 16:47 - 2018-06-08 10:54 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2018-06-15 16:47 - 2018-06-08 10:54 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2018-06-15 16:47 - 2018-06-08 10:54 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2018-06-15 16:47 - 2018-06-08 10:53 - 001675264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2018-06-15 16:47 - 2018-06-08 10:53 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2018-06-15 16:47 - 2018-06-08 10:53 - 001108992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2018-06-15 16:47 - 2018-06-08 10:53 - 000873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2018-06-15 16:47 - 2018-06-08 10:53 - 000669696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2018-06-15 16:47 - 2018-06-08 10:53 - 000528384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2018-06-15 16:47 - 2018-06-06 20:57 - 003733320 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2018-06-15 16:47 - 2018-06-06 06:20 - 002841312 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2018-06-15 16:47 - 2018-05-20 21:45 - 000308408 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2018-06-15 16:47 - 2018-05-20 21:42 - 001649760 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2018-06-15 16:47 - 2018-05-20 21:42 - 000759192 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2018-06-15 16:47 - 2018-05-20 21:26 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll
2018-06-15 16:47 - 2018-05-20 21:23 - 000947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2018-06-15 16:47 - 2018-05-20 21:23 - 000899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2018-06-15 16:47 - 2018-05-20 21:22 - 001665024 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2018-06-15 16:47 - 2018-05-20 21:22 - 000804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2018-06-15 16:47 - 2018-05-20 20:15 - 000653208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2018-06-15 16:47 - 2018-05-20 20:14 - 001490144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2018-06-15 16:47 - 2018-05-20 20:00 - 000864768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2018-06-15 16:47 - 2018-05-20 19:59 - 000747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2018-06-15 16:47 - 2018-05-20 18:45 - 001271296 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloSI.PCShell.dll
2018-06-15 16:47 - 2018-05-20 18:35 - 000677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HeadTrackerStorage.dll
2018-06-15 16:47 - 2018-05-20 18:34 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloShellRuntime.dll
2018-06-15 16:47 - 2018-05-20 14:33 - 000105368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2018-06-15 16:47 - 2018-05-20 13:53 - 002178136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2018-06-15 16:47 - 2018-05-20 13:53 - 001947808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2018-06-15 16:47 - 2018-05-20 13:53 - 001017088 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2018-06-15 16:47 - 2018-05-20 13:53 - 001012408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2018-06-15 16:47 - 2018-05-20 13:53 - 000088472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
2018-06-15 16:47 - 2018-05-20 13:52 - 000735560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-06-15 16:47 - 2018-05-20 13:52 - 000347704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2018-06-15 16:47 - 2018-05-20 13:52 - 000130456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys
2018-06-15 16:47 - 2018-05-20 13:34 - 000861096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2018-06-15 16:47 - 2018-05-20 13:32 - 006044104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2018-06-15 16:47 - 2018-05-20 13:32 - 001559368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2018-06-15 16:47 - 2018-05-20 13:32 - 001034096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2018-06-15 16:47 - 2018-05-20 13:32 - 000560488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2018-06-15 16:47 - 2018-05-20 13:32 - 000286200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2018-06-15 16:47 - 2018-05-20 13:31 - 001456640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll
2018-06-15 16:47 - 2018-05-20 13:28 - 000111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppHostRegistrationVerifier.exe
2018-06-15 16:47 - 2018-05-20 13:26 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2018-06-15 16:47 - 2018-05-20 13:26 - 000356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2018-06-15 16:47 - 2018-05-20 13:26 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2018-06-15 16:47 - 2018-05-20 13:26 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe
2018-06-15 16:47 - 2018-05-20 13:26 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUser.dll
2018-06-15 16:47 - 2018-05-20 13:25 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll
2018-06-15 16:47 - 2018-05-20 13:24 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-06-15 16:47 - 2018-05-20 13:24 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2018-06-15 16:47 - 2018-05-20 13:23 - 000933376 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2018-06-15 16:47 - 2018-05-20 13:23 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2018-06-15 16:47 - 2018-05-20 13:21 - 001303040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2018-06-15 16:47 - 2018-05-20 13:21 - 001210880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2018-06-15 16:47 - 2018-05-20 13:21 - 000960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2018-06-15 16:47 - 2018-05-20 13:21 - 000783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2018-06-15 16:47 - 2018-05-20 13:17 - 002699776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2018-06-15 16:47 - 2018-05-20 13:16 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2018-06-15 16:47 - 2018-05-20 13:14 - 001295360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2018-06-15 16:47 - 2018-05-20 13:12 - 000992768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2018-06-15 16:47 - 2018-05-20 13:12 - 000860160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2018-06-15 16:47 - 2018-05-20 13:11 - 001005568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2018-06-15 16:46 - 2018-06-08 21:07 - 000183712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mavinject.exe
2018-06-15 16:46 - 2018-06-08 21:07 - 000040864 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClientPS.dll
2018-06-15 16:46 - 2018-06-08 21:07 - 000019872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVTerminator.dll
2018-06-15 16:46 - 2018-06-08 21:05 - 000094112 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2018-06-15 16:46 - 2018-06-08 20:48 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2018-06-15 16:46 - 2018-06-08 20:47 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2018-06-15 16:46 - 2018-06-08 20:46 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2018-06-15 16:46 - 2018-06-08 20:45 - 001560576 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdt.exe
2018-06-15 16:46 - 2018-06-08 20:45 - 000808960 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2018-06-15 16:46 - 2018-06-08 20:44 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2018-06-15 16:46 - 2018-06-08 20:44 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2018-06-15 16:46 - 2018-06-08 20:44 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
2018-06-15 16:46 - 2018-06-08 20:43 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2018-06-15 16:46 - 2018-06-08 20:42 - 002084864 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2018-06-15 16:46 - 2018-06-08 20:42 - 000503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2018-06-15 16:46 - 2018-06-08 20:42 - 000463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpshell.exe
2018-06-15 16:46 - 2018-06-08 20:42 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinit.exe
2018-06-15 16:46 - 2018-06-08 20:41 - 002019840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2018-06-15 16:46 - 2018-06-08 20:41 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2018-06-15 16:46 - 2018-06-08 19:07 - 000148896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mavinject.exe
2018-06-15 16:46 - 2018-06-08 18:50 - 001508352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdt.exe
2018-06-15 16:46 - 2018-06-08 18:48 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2018-06-15 16:46 - 2018-06-08 18:48 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2018-06-15 16:46 - 2018-06-08 18:47 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll
2018-06-15 16:46 - 2018-06-08 18:46 - 002016256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2018-06-15 16:46 - 2018-06-08 18:46 - 000908288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2018-06-15 16:46 - 2018-06-08 18:05 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2018-06-15 16:46 - 2018-06-08 16:00 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2018-06-15 16:46 - 2018-06-08 11:33 - 001213368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2018-06-15 16:46 - 2018-06-08 11:31 - 000226720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ucx01000.sys
2018-06-15 16:46 - 2018-06-08 11:30 - 000170912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2018-06-15 16:46 - 2018-06-08 11:30 - 000137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2018-06-15 16:46 - 2018-06-08 11:29 - 000792992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2018-06-15 16:46 - 2018-06-08 11:29 - 000413088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2018-06-15 16:46 - 2018-06-08 11:10 - 000097176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2018-06-15 16:46 - 2018-06-08 11:03 - 000906752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.PhoneNumberFormatting.dll
2018-06-15 16:46 - 2018-06-08 11:03 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
2018-06-15 16:46 - 2018-06-08 11:03 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2018-06-15 16:46 - 2018-06-08 11:03 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
2018-06-15 16:46 - 2018-06-08 11:02 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2018-06-15 16:46 - 2018-06-08 11:02 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edpnotify.exe
2018-06-15 16:46 - 2018-06-08 11:02 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
2018-06-15 16:46 - 2018-06-08 11:01 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
2018-06-15 16:46 - 2018-06-08 11:01 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2018-06-15 16:46 - 2018-06-08 11:01 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
2018-06-15 16:46 - 2018-06-08 11:01 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2018-06-15 16:46 - 2018-06-08 11:01 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll
2018-06-15 16:46 - 2018-06-08 11:01 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
2018-06-15 16:46 - 2018-06-08 11:01 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2018-06-15 16:46 - 2018-06-08 11:00 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2018-06-15 16:46 - 2018-06-08 11:00 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2018-06-15 16:46 - 2018-06-08 11:00 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2018-06-15 16:46 - 2018-06-08 11:00 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys
2018-06-15 16:46 - 2018-06-08 10:59 - 000983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2018-06-15 16:46 - 2018-06-08 10:59 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2018-06-15 16:46 - 2018-06-08 10:59 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2018-06-15 16:46 - 2018-06-08 10:59 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2018-06-15 16:46 - 2018-06-08 10:58 - 000781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2018-06-15 16:46 - 2018-06-08 10:58 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2018-06-15 16:46 - 2018-06-08 10:58 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2018-06-15 16:46 - 2018-06-08 10:58 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
2018-06-15 16:46 - 2018-06-08 10:57 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2018-06-15 16:46 - 2018-06-08 10:57 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2018-06-15 16:46 - 2018-06-08 10:57 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2018-06-15 16:46 - 2018-06-08 10:57 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
2018-06-15 16:46 - 2018-06-08 10:56 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll
2018-06-15 16:46 - 2018-06-08 10:56 - 000715776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2018-06-15 16:46 - 2018-06-08 10:56 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2018-06-15 16:46 - 2018-06-08 10:55 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2018-06-15 16:46 - 2018-06-08 10:55 - 000849408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2018-06-15 16:46 - 2018-06-08 10:55 - 000778752 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2018-06-15 16:46 - 2018-06-08 10:55 - 000630784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2018-06-15 16:46 - 2018-06-08 10:55 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2018-06-15 16:46 - 2018-06-08 10:54 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2018-06-15 16:46 - 2018-06-08 10:54 - 000857088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2018-06-15 16:46 - 2018-06-08 10:54 - 000842240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2018-06-15 16:46 - 2018-06-08 10:54 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll
2018-06-15 16:46 - 2018-06-08 10:54 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2018-06-15 16:46 - 2018-06-08 10:54 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL
2018-06-15 16:46 - 2018-06-08 10:53 - 000677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2018-06-15 16:46 - 2018-06-08 10:53 - 000648192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2018-06-15 16:46 - 2018-06-08 09:41 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim
2018-06-15 16:46 - 2018-06-02 01:24 - 000713376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2018-06-15 16:46 - 2018-06-02 00:54 - 001825792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2018-06-15 16:46 - 2018-05-25 05:24 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2018-06-15 16:46 - 2018-05-20 21:23 - 004070400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2018-06-15 16:46 - 2018-05-20 21:22 - 001292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2018-06-15 16:46 - 2018-05-20 21:22 - 000941056 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2018-06-15 16:46 - 2018-05-20 20:20 - 000022936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hvsicontainerservice.dll
2018-06-15 16:46 - 2018-05-20 20:02 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll
2018-06-15 16:46 - 2018-05-20 19:59 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2018-06-15 16:46 - 2018-05-20 18:39 - 000788480 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
2018-06-15 16:46 - 2018-05-20 16:54 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HoloShellRuntime.dll
2018-06-15 16:46 - 2018-05-20 13:53 - 000131232 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll
2018-06-15 16:46 - 2018-05-20 13:52 - 000089984 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll
2018-06-15 16:46 - 2018-05-20 13:33 - 000101288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll
2018-06-15 16:46 - 2018-05-20 13:32 - 000077040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CompPkgSup.dll
2018-06-15 16:46 - 2018-05-20 13:28 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2018-06-15 16:46 - 2018-05-20 13:28 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2018-06-15 16:46 - 2018-05-20 13:27 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll
2018-06-15 16:46 - 2018-05-20 13:27 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApiSetHost.AppExecutionAlias.dll
2018-06-15 16:46 - 2018-05-20 13:26 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2018-06-15 16:46 - 2018-05-20 13:26 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSHEIF.dll
2018-06-15 16:46 - 2018-05-20 13:25 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2018-06-15 16:46 - 2018-05-20 13:24 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2018-06-15 16:46 - 2018-05-20 13:23 - 005951488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2018-06-15 16:46 - 2018-05-20 13:21 - 001371136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2018-06-15 16:46 - 2018-05-20 13:16 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ApiSetHost.AppExecutionAlias.dll
2018-06-15 16:46 - 2018-05-20 13:16 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2018-06-15 16:46 - 2018-05-20 13:15 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll
2018-06-15 16:46 - 2018-05-20 13:15 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSHEIF.dll
2018-06-15 16:46 - 2018-05-20 13:14 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe
2018-06-15 16:46 - 2018-05-20 13:13 - 004929024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2018-06-15 16:46 - 2018-05-20 13:13 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll
2018-06-15 16:46 - 2018-05-20 13:11 - 001036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2018-06-15 16:46 - 2018-05-20 10:26 - 000018716 _____ C:\WINDOWS\system32\srms-apr.dat
2018-06-15 16:46 - 2018-05-18 19:08 - 000018716 _____ C:\WINDOWS\SysWOW64\srms-apr.dat
2018-06-15 14:27 - 2018-06-15 14:27 - 021339648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-07-04 15:27 - 2018-04-12 01:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-07-04 15:26 - 2016-02-12 19:34 - 000000000 ____D C:\Users\jj\AppData\Roaming\Seznam.cz
2018-07-04 15:23 - 2016-12-24 21:50 - 000000000 ____D C:\ProgramData\Origin
2018-07-03 21:08 - 2018-05-30 01:12 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-07-03 21:07 - 2018-04-11 23:04 - 000262144 _____ C:\WINDOWS\system32\config\BBI
2018-07-03 21:01 - 2018-05-30 00:48 - 000000000 ____D C:\Users\jj
2018-07-03 20:49 - 2018-05-30 00:36 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-07-02 20:22 - 2016-12-04 07:24 - 000000000 ____D C:\Program Files\trend micro
2018-07-02 20:16 - 2018-05-30 01:12 - 000004180 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{7E34E83C-E88E-40EE-A69A-B74A0FA3F2FA}
2018-07-02 19:56 - 2016-02-16 19:58 - 000000000 ___HD C:\Program Files (x86)\Temp
2018-07-02 19:55 - 2018-04-12 01:36 - 000000000 ____D C:\WINDOWS\INF
2018-07-02 19:55 - 2017-08-29 16:40 - 000000000 ____D C:\WINDOWS\system32\DAX2
2018-07-02 19:55 - 2017-08-29 16:39 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2018-07-02 19:44 - 2017-08-29 16:40 - 000000000 ____D C:\WINDOWS\system32\DAX3
2018-07-02 19:44 - 2017-08-29 16:40 - 000000000 ____D C:\ProgramData\Audyssey Labs
2018-07-02 18:44 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-06-30 08:16 - 2018-04-12 01:38 - 000000000 ___HD C:\Program Files\WindowsApps
2018-06-30 07:53 - 2018-02-15 22:56 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2018-06-27 12:29 - 2016-01-25 22:55 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-06-27 12:29 - 2016-01-25 22:55 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-06-20 21:03 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2018-06-20 21:03 - 2018-04-12 01:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-06-20 20:39 - 2018-05-30 01:12 - 000003346 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2253141340-2309542035-3164301-1000
2018-06-20 20:38 - 2018-05-30 00:48 - 000002409 _____ C:\Users\jj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-06-20 20:38 - 2016-03-01 17:42 - 000000000 ___RD C:\Users\jj\OneDrive
2018-06-20 20:37 - 2016-12-24 21:49 - 000000000 ____D C:\Program Files (x86)\Origin
2018-06-15 22:59 - 2018-05-30 00:43 - 001956628 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-06-15 22:59 - 2018-04-12 17:51 - 000808346 _____ C:\WINDOWS\system32\perfh005.dat
2018-06-15 22:59 - 2018-04-12 17:51 - 000186590 _____ C:\WINDOWS\system32\perfc005.dat
2018-06-15 22:56 - 2018-01-28 13:38 - 000000000 ___RD C:\Users\jj\3D Objects
2018-06-15 22:56 - 2016-03-01 17:35 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-06-15 22:51 - 2018-05-30 00:36 - 000242448 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\yo-NG
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\wo-SN
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\ti-ET
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\rw-RW
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\ig-NG
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
2018-06-15 22:47 - 2018-04-12 17:52 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
2018-06-15 22:47 - 2018-04-12 01:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2018-06-15 22:47 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\TextInput
2018-06-15 22:47 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2018-06-15 22:47 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2018-06-15 22:47 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2018-06-15 22:47 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2018-06-15 22:47 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\setup
2018-06-15 22:47 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\oobe
2018-06-15 22:47 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\appraiser
2018-06-15 22:47 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\ShellExperiences
2018-06-15 22:47 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2018-06-15 22:47 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2018-06-15 22:47 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2018-06-15 22:47 - 2018-04-11 23:04 - 000000000 ____D C:\WINDOWS\system32\Dism
2018-06-15 20:22 - 2016-03-04 20:49 - 000000000 ____D C:\WINDOWS\system32\MRT
2018-06-15 20:19 - 2017-10-10 23:50 - 133315992 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2018-06-15 20:18 - 2016-03-04 20:49 - 133315992 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2018-06-15 14:27 - 2018-05-30 01:12 - 000004628 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-06-15 14:27 - 2018-05-30 01:12 - 000004458 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2018-06-15 14:27 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2018-06-15 14:27 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\Macromed
2018-06-12 20:39 - 2018-03-09 11:19 - 000000000 ____D C:\Users\jj\AppData\Local\PlaceholderTileLogoFolder
2018-06-06 01:29 - 2018-04-12 01:41 - 000835056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-06-06 01:29 - 2018-04-12 01:41 - 000179704 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======

2010-06-02 05:21 - 2010-06-02 05:21 - 001347354 _____ () C:\Program Files\Apr2005_d3dx9_25_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 001078962 _____ () C:\Program Files\Apr2005_d3dx9_25_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 001397830 _____ () C:\Program Files\Apr2006_d3dx9_30_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 001115221 _____ () C:\Program Files\Apr2006_d3dx9_30_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000916430 _____ () C:\Program Files\Apr2006_MDX1_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 004162630 _____ () C:\Program Files\Apr2006_MDX1_x86_Archive.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000179133 _____ () C:\Program Files\Apr2006_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000133103 _____ () C:\Program Files\Apr2006_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000087101 _____ () C:\Program Files\Apr2006_xinput_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000046010 _____ () C:\Program Files\Apr2006_xinput_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000698612 _____ () C:\Program Files\APR2007_d3dx10_33_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000695865 _____ () C:\Program Files\APR2007_d3dx10_33_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 001607358 _____ () C:\Program Files\APR2007_d3dx9_33_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 001606039 _____ () C:\Program Files\APR2007_d3dx9_33_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000195766 _____ () C:\Program Files\APR2007_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000151225 _____ () C:\Program Files\APR2007_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000096817 _____ () C:\Program Files\APR2007_xinput_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000053302 _____ () C:\Program Files\APR2007_xinput_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 001350542 _____ () C:\Program Files\Aug2005_d3dx9_27_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 001077644 _____ () C:\Program Files\Aug2005_d3dx9_27_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000182903 _____ () C:\Program Files\AUG2006_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000137235 _____ () C:\Program Files\AUG2006_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000087142 _____ () C:\Program Files\AUG2006_xinput_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000046058 _____ () C:\Program Files\AUG2006_xinput_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000852286 _____ () C:\Program Files\AUG2007_d3dx10_35_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000796867 _____ () C:\Program Files\AUG2007_d3dx10_35_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 001800160 _____ () C:\Program Files\AUG2007_d3dx9_35_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 001708152 _____ () C:\Program Files\AUG2007_d3dx9_35_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000198096 _____ () C:\Program Files\AUG2007_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000153012 _____ () C:\Program Files\AUG2007_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000867612 _____ () C:\Program Files\Aug2008_d3dx10_39_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000849167 _____ () C:\Program Files\Aug2008_d3dx10_39_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 001794084 _____ () C:\Program Files\Aug2008_d3dx9_39_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 001464672 _____ () C:\Program Files\Aug2008_d3dx9_39_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000121772 _____ () C:\Program Files\Aug2008_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000092996 _____ () C:\Program Files\Aug2008_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000271412 _____ () C:\Program Files\Aug2008_XAudio_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000271038 _____ () C:\Program Files\Aug2008_XAudio_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000919044 _____ () C:\Program Files\Aug2009_D3DCompiler_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000900598 _____ () C:\Program Files\Aug2009_D3DCompiler_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 003112111 _____ () C:\Program Files\Aug2009_d3dcsx_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 003319740 _____ () C:\Program Files\Aug2009_d3dcsx_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000232635 _____ () C:\Program Files\Aug2009_d3dx10_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000192131 _____ () C:\Program Files\Aug2009_d3dx10_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000136301 _____ () C:\Program Files\Aug2009_d3dx11_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000105044 _____ () C:\Program Files\Aug2009_d3dx11_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000930116 _____ () C:\Program Files\Aug2009_d3dx9_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 000728456 _____ () C:\Program Files\Aug2009_d3dx9_42_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000122408 _____ () C:\Program Files\Aug2009_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000093106 _____ () C:\Program Files\Aug2009_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000273264 _____ () C:\Program Files\Aug2009_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000272642 _____ () C:\Program Files\Aug2009_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001357976 _____ () C:\Program Files\Dec2005_d3dx9_28_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001079456 _____ () C:\Program Files\Dec2005_d3dx9_28_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000212807 _____ () C:\Program Files\DEC2006_d3dx10_00_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000191720 _____ () C:\Program Files\DEC2006_d3dx10_00_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001571154 _____ () C:\Program Files\DEC2006_d3dx9_32_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001574376 _____ () C:\Program Files\DEC2006_d3dx9_32_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000192475 _____ () C:\Program Files\DEC2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000145599 _____ () C:\Program Files\DEC2006_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000089944 _____ (Microsoft Corporation) C:\Program Files\DSETUP.dll
2010-06-02 05:22 - 2010-06-02 05:22 - 001801048 _____ () C:\Program Files\dsetup32.dll
2010-06-02 05:22 - 2010-06-02 05:22 - 000042410 _____ () C:\Program Files\dxdllreg_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000537432 _____ () C:\Program Files\DXSETUP.exe
2010-06-02 05:22 - 2010-06-02 05:22 - 000094011 _____ () C:\Program Files\dxupdate.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001247499 _____ () C:\Program Files\Feb2005_d3dx9_24_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001013225 _____ () C:\Program Files\Feb2005_d3dx9_24_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001362796 _____ () C:\Program Files\Feb2006_d3dx9_29_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001084720 _____ () C:\Program Files\Feb2006_d3dx9_29_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000178359 _____ () C:\Program Files\Feb2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000132409 _____ () C:\Program Files\Feb2006_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000194675 _____ () C:\Program Files\FEB2007_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000147983 _____ () C:\Program Files\FEB2007_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000054678 _____ () C:\Program Files\Feb2010_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000020713 _____ () C:\Program Files\Feb2010_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000122446 _____ () C:\Program Files\Feb2010_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000093180 _____ () C:\Program Files\Feb2010_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000276960 _____ () C:\Program Files\Feb2010_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000277191 _____ () C:\Program Files\Feb2010_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001336002 _____ () C:\Program Files\Jun2005_d3dx9_26_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001064925 _____ () C:\Program Files\Jun2005_d3dx9_26_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000180785 _____ () C:\Program Files\JUN2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000133671 _____ () C:\Program Files\JUN2006_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000699044 _____ () C:\Program Files\JUN2007_d3dx10_34_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000698472 _____ () C:\Program Files\JUN2007_d3dx10_34_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001607774 _____ () C:\Program Files\JUN2007_d3dx9_34_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001607286 _____ () C:\Program Files\JUN2007_d3dx9_34_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000197122 _____ () C:\Program Files\JUN2007_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000152909 _____ () C:\Program Files\JUN2007_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000867828 _____ () C:\Program Files\JUN2008_d3dx10_38_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000849919 _____ () C:\Program Files\JUN2008_d3dx10_38_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001792608 _____ () C:\Program Files\JUN2008_d3dx9_38_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001463878 _____ () C:\Program Files\JUN2008_d3dx9_38_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000055154 _____ () C:\Program Files\JUN2008_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000021905 _____ () C:\Program Files\JUN2008_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000121054 _____ () C:\Program Files\JUN2008_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000093128 _____ () C:\Program Files\JUN2008_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000269628 _____ () C:\Program Files\JUN2008_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000269024 _____ () C:\Program Files\JUN2008_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000944460 _____ () C:\Program Files\Jun2010_D3DCompiler_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000931471 _____ () C:\Program Files\Jun2010_D3DCompiler_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000752783 _____ () C:\Program Files\Jun2010_d3dcsx_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000762188 _____ () C:\Program Files\Jun2010_d3dcsx_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000235955 _____ () C:\Program Files\Jun2010_d3dx10_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000197283 _____ () C:\Program Files\Jun2010_d3dx10_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000138205 _____ () C:\Program Files\Jun2010_d3dx11_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000109445 _____ () C:\Program Files\Jun2010_d3dx11_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000937246 _____ () C:\Program Files\Jun2010_d3dx9_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000768036 _____ () C:\Program Files\Jun2010_d3dx9_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000124596 _____ () C:\Program Files\Jun2010_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000093686 _____ () C:\Program Files\Jun2010_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000277338 _____ () C:\Program Files\Jun2010_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000278060 _____ () C:\Program Files\Jun2010_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000844884 _____ () C:\Program Files\Mar2008_d3dx10_37_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000818260 _____ () C:\Program Files\Mar2008_d3dx10_37_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001769862 _____ () C:\Program Files\Mar2008_d3dx9_37_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001443282 _____ () C:\Program Files\Mar2008_d3dx9_37_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000055058 _____ () C:\Program Files\Mar2008_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000021867 _____ () C:\Program Files\Mar2008_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000122336 _____ () C:\Program Files\Mar2008_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000093734 _____ () C:\Program Files\Mar2008_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000251194 _____ () C:\Program Files\Mar2008_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000226250 _____ () C:\Program Files\Mar2008_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001067160 _____ () C:\Program Files\Mar2009_d3dx10_41_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001040745 _____ () C:\Program Files\Mar2009_d3dx10_41_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001973702 _____ () C:\Program Files\Mar2009_d3dx9_41_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001612446 _____ () C:\Program Files\Mar2009_d3dx9_41_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000054600 _____ () C:\Program Files\Mar2009_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000021298 _____ () C:\Program Files\Mar2009_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000121506 _____ () C:\Program Files\Mar2009_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000092740 _____ () C:\Program Files\Mar2009_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000275044 _____ () C:\Program Files\Mar2009_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000273018 _____ () C:\Program Files\Mar2009_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000864600 _____ () C:\Program Files\Nov2007_d3dx10_36_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000803884 _____ () C:\Program Files\Nov2007_d3dx10_36_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001802058 _____ () C:\Program Files\Nov2007_d3dx9_36_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001709360 _____ () C:\Program Files\Nov2007_d3dx9_36_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000046144 _____ () C:\Program Files\NOV2007_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000018496 _____ () C:\Program Files\NOV2007_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000196762 _____ () C:\Program Files\NOV2007_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000148264 _____ () C:\Program Files\NOV2007_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000994154 _____ () C:\Program Files\Nov2008_d3dx10_40_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000965421 _____ () C:\Program Files\Nov2008_d3dx10_40_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001906878 _____ () C:\Program Files\Nov2008_d3dx9_40_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001550796 _____ () C:\Program Files\Nov2008_d3dx9_40_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000054522 _____ () C:\Program Files\Nov2008_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000021851 _____ () C:\Program Files\Nov2008_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000121794 _____ () C:\Program Files\Nov2008_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000092684 _____ () C:\Program Files\Nov2008_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000273960 _____ () C:\Program Files\Nov2008_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000272611 _____ () C:\Program Files\Nov2008_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000086037 _____ () C:\Program Files\Oct2005_xinput_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000045359 _____ () C:\Program Files\Oct2005_xinput_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001412902 _____ () C:\Program Files\OCT2006_d3dx9_31_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 001127217 _____ () C:\Program Files\OCT2006_d3dx9_31_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000182361 _____ () C:\Program Files\OCT2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 000138017 _____ () C:\Program Files\OCT2006_XACT_x86.cab

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-05-30 00:36

==================== End of FRST.txt ============================

jeste jsem se chtel zeptat na ten zvuk, zda-li s tim muze mit nejakou spojitost popr. kde stahnout spravny ovladac Diky

To zatial neviem povedat, uvidime potom. Ak nie, tak potom vyskusame nainstalovat driver.

Potrebujem aj log Addition.txt.

ok, tady je

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20.06.2018
Ran by jj (04-07-2018 15:35:27)
Running from C:\Users\jj\Downloads
Windows 10 Pro Version 1803 17134.112 (X64) (2018-05-29 23:14:35)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2253141340-2309542035-3164301-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2253141340-2309542035-3164301-503 - Limited - Disabled)
Guest (S-1-5-21-2253141340-2309542035-3164301-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2253141340-2309542035-3164301-1002 - Limited - Enabled)
jj (S-1-5-21-2253141340-2309542035-3164301-1000 - Administrator - Enabled) => C:\Users\jj
WDAGUtilityAccount (S-1-5-21-2253141340-2309542035-3164301-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 30 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 30.0.0.113 - Adobe Systems Incorporated)
Adobe Shockwave Player (HKLM-x32\...\Adobe Shockwave Player) (Version: 10.2.0.22 - Adobe Systems, Inc.)
Aktualizace NVIDIA 2.11.2.66 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 2.11.2.66 - NVIDIA Corporation) Hidden
Colin McRae Rally 3 Demo (HKLM-x32\...\{E3B2546C-4953-40E6-9285-873E3C07962D}) (Version: 1.00.000 - )
Defraggler (HKLM\...\Defraggler) (Version: 2.21 - Piriform)
EA SPORTS online 2008 (HKLM-x32\...\82A44D22-9452-49FB-00FB-CEC7DCAF7E23) (Version: - )
Epic Games Launcher (HKLM-x32\...\{553CD836-D438-469B-B268-700638DFF184}) (Version: 1.1.151.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
EVEREST Ultimate Edition v5.50 (HKLM-x32\...\EVEREST Ultimate Edition_is1) (Version: 5.50 - Lavalys, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 67.0.3396.99 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
Java 8 Update 161 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180161F0}) (Version: 8.0.1610.12 - Oracle Corporation)
K-Lite Codec Pack 11.5.5 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 11.5.5 - )
KMPlayer (HKLM-x32\...\The KMPlayer) (Version: 4.1.4.7 - PandoraTV)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Microsoft OneDrive (HKU\S-1-5-21-2253141340-2309542035-3164301-1000\...\OneDriveSetup.exe) (Version: 18.091.0506.0007 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Mozilla Firefox 47.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 47.0 (x86 en-US)) (Version: 47.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0 - Mozilla)
Neighbours from Hell 2 Demo XS (HKLM-x32\...\{84CADE55-53E2-4CB5-B8CF-75DE379D5D0B}) (Version: 1.0.0 - JoWooD)
Neighbours From Hell Online Demo (HKLM-x32\...\{5945A4B9-CB8F-4960-9C66-690780BEF4D4}) (Version: 1.0 - JoWooD Studio Vienna)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.57.35 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.11.2.66 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.2.66 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 10.5.21.179 - Electronic Arts, Inc.)
Ovládací panel NVIDIA 342.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 342.01 - NVIDIA Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
Seznam Software (HKU\S-1-5-21-2253141340-2309542035-3164301-1000\...\SeznamInstall) (Version: 2.1.32 - Seznam.cz)
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 2.11.2.66 - NVIDIA Corporation) Hidden
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Tasty Planet (HKLM-x32\...\Tasty Planet_is1) (Version: - )
Tasty Planet Back for Seconds (HKLM-x32\...\Tasty Planet Back for Seconds1.1.0.0) (Version: 1.1.0.0 - Dingo Games)
Táta hrdina (HKLM-x32\...\Táta hrdina) (Version: - )
Unity Web Player (HKU\S-1-5-21-2253141340-2309542035-3164301-1000\...\UnityWebPlayer) (Version: 5.3.3f1 - Unity Technologies ApS)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{AC0D130B-8809-4125-811F-667893B90644}) (Version: 2.11.0.0 - Microsoft Corporation)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ContextMenuHandlers1: [DefragglerShellExtension] -> {4380C993-0C43-4E02-9A7A-0D40B6EA7590} => C:\Program Files\Defraggler\DefragglerShell64.dll [2016-03-08] (Piriform Ltd)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2013-08-22] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2013-08-22] (Alexander Roshal)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> No File
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-11-14] (NVIDIA Corporation)
ContextMenuHandlers6: [DefragglerShellExtension] -> {4380C993-0C43-4E02-9A7A-0D40B6EA7590} => C:\Program Files\Defraggler\DefragglerShell64.dll [2016-03-08] (Piriform Ltd)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2013-08-22] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2013-08-22] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {004F7FAB-9D51-4E82-9458-81868BE5B950} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {009FC872-79FD-4FFA-8406-8E35F0FEF408} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {01072F39-D3FC-41E1-9F8D-BC64FCCEA573} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {0F2C5A8B-E009-4812-ACAE-E0B5BD3C114C} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {0F71835C-EEC6-4074-A8EA-818A8D9C2712} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1ADD9C83-8E4F-4597-B066-466433120D07} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {1F4016CC-C2AB-4505-BC84-2B79762F988A} - System32\Tasks\{063790F2-F46E-4B93-A9DB-A9D514FCC90E} => C:\WINDOWS\system32\pcalua.exe -a C:\Users\jj\Downloads\neighbours-from-hell-2_1.0.exe -d C:\Users\jj\Downloads
Task: {2413CE5A-835E-4D10-9D0B-CC9297C5E063} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-25] (Google Inc.)
Task: {29DAF8D6-E61E-4488-BC82-D5580E468BC9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-06-30] (Microsoft Corporation)
Task: {33FF9EAE-D999-40DF-96A9-B1DED35E3841} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-06-15] (Adobe Systems Incorporated)
Task: {357BE4A4-C7B0-44FC-9EF3-B902E447338D} - System32\Tasks\Microsoft\Windows\Setup\Notifier => C:\WINDOWS\system32\Notifier.exe
Task: {36E38C8E-A798-4CCF-BF93-104CAB939F68} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {3D877B5C-BE93-4C98-B77E-6D164C3E1EFC} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {434479EC-53C9-41F3-A452-65CF85A9C938} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {54AD4979-A489-4ADA-820A-A34FF5BF36BD} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {5EE180C6-455F-4972-B133-868C64497975} - \CCleanerSkipUAC -> No File <==== ATTENTION
Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] ()
Task: {676585F1-D348-472A-85E8-6B34BC6643A2} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {67CBBC71-8581-4800-AECE-19F7A9AB5886} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {74F16E73-266C-4911-91E3-E797842FBB20} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {74F41E65-B7C6-4BFE-9074-3808AEAC1EF2} - System32\Tasks\{9A8BE5DB-2D20-5270-88C9-E129F84F8DAB} => C:\ProgramData\{8A7D27FC-3DD6-9057-66EA-3E13133766C1}\B2EB7318-0540-C4B3-E205-4116B224E677.exe <==== ATTENTION
Task: {7C0E35EE-828A-40E5-9802-640F1D9C2DBF} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {7EAAFFE0-00EE-4750-BE23-BFBCF2210767} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {866296DD-70EF-4CC0-98F4-0025ABAB36FF} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {9262D28D-1F40-4D6D-B1D7-7D4E49745DDA} - System32\Tasks\{7E757880-165B-FC72-3BEF-A1052CEAE97A} => C:\WINDOWS\system32\regsvr32.exe /s /n /i:"/rt" "C:\PROGRA~3\98700878\9a99cebb.dll" <==== ATTENTION
Task: {98DFB077-CB71-46A3-8560-47CF802863D9} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {A02C7ED2-BE15-4628-97B3-08F10BCBFE6D} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {A056007D-E805-4389-895B-05EBBA500B0F} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {A0B36B2F-84EF-4B0E-B6E3-3A27E63BDC5E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-25] (Google Inc.)
Task: {B26DD29D-0FEC-42E8-9348-C0EF6913FD8C} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B2811755-F4E3-4D73-9D14-154AF565C67B} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_30_0_0_113_Plugin.exe [2018-06-15] (Adobe Systems Incorporated)
Task: {B8360B3E-360F-4603-A3DD-EB8B3D58B762} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {BA56E006-0CFD-412B-B943-BE9B1D94F36A} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {BE852EAD-C6D4-4211-98D8-714474AD2952} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {BEA65B63-995F-4932-BE22-F7E821A44826} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-06-30] (Microsoft Corporation)
Task: {BFC59C4E-AEEF-4C93-BF26-2C08472B0588} - System32\Tasks\{9E805134-292B-E69F-CC2A-908C2D2FFCFE} => C:\ProgramData\{08FB37C7-BF50-806C-C05E-998D3F3239BC}\981493FF-2FBF-2454-F45D-FCEFF5285E1D.exe <==== ATTENTION
Task: {C192715C-A3EE-4D05-8E4F-28E69EBDC1AA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-06-30] (Microsoft Corporation)
Task: {C2A417FA-7395-4672-9540-E284C72931CB} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {C4C0E803-F383-4C88-BC43-722639A522E4} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C771CF83-F2F3-4645-A7C3-9BD427D71032} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {C93BE235-30E2-4FF0-9B63-AF0B8407D18E} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D0B69CD4-4FC5-48A2-92CD-F94C629E8C8A} - System32\Tasks\{529B748B-617D-4F21-83D2-0C5F05B94C29} => C:\WINDOWS\system32\pcalua.exe -a C:\Users\jj\Desktop\DirectX\dxsetup.exe -d C:\Users\jj\Desktop\DirectX
Task: {D1384BCB-5E00-4445-AE87-D0FED84FB9B2} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {DC2CD2A3-9185-4C3D-92F2-C4FAEBD1CB11} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E1D9AC3E-811E-46C4-A790-5D9178E8196E} - System32\Tasks\{DA6B8569-6DC0-32C2-2A9A-FEB7AF81CD21} => C:\ProgramData\{36181486-81B3-A32D-30CC-CF02D1321DAD}\10545AD4-A7FF-ED7F-F746-0E315A445738.exe <==== ATTENTION
Task: {E462B3DC-41EB-4840-B499-F0056C5CCD80} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {E5A22699-666D-4B68-9DAD-E6C6D73449D1} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {EF4F506D-BE18-4A4D-94F5-1EA1517734AB} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F7296CEB-F09C-4606-8506-55DC2B1AB762} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {FA5E8079-B1B3-4868-950D-26D8C95B0873} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FB1112B7-6482-46BC-8773-BC4912AB3140} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1806.18062-0\MpCmdRun.exe [2018-06-30] (Microsoft Corporation)
Task: {FEF42B5A-5538-4EBB-9D0A-CC73024F3D49} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {FF8F1C8B-B8FF-409E-9201-DA6C9813EC55} - System32\Tasks\{29E47BE9-AA52-4C25-A73A-26E35F6D21B6} => C:\WINDOWS\system32\pcalua.exe -a C:\Users\jj\Downloads\DX81NTcze.exe -d C:\Users\jj\Downloads
Task: {FFE59411-31A4-4D5A-8485-B93CE51A3F99} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


ShortcutWithArgument: C:\Users\jj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JoWooD\Neighbours from Hell 2 Demo XS\Visit JoWooD Homepage.lnk -> C:\Users\jj\AppData\Roaming\Microsoft\Installer\{84CADE55-53E2-4CB5-B8CF-75DE379D5D0B}\_69525f90.exe () -> hxxp://www.jowood.com
ShortcutWithArgument: C:\Users\jj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JoWooD\Neighbours from Hell 2 Demo XS\Visit Neighbors from Hell Homepage.lnk -> C:\Users\jj\AppData\Roaming\Microsoft\Installer\{84CADE55-53E2-4CB5-B8CF-75DE379D5D0B}\_4ae13d6c.exe () -> hxxp://www.neighbours-from-hell.com/?lang=en

==================== Loaded Modules (Whitelisted) ==============

2017-08-29 16:41 - 2016-11-14 13:15 - 000135224 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2018-04-12 01:34 - 2018-04-12 01:34 - 000491744 _____ () C:\Windows\System32\InputHost.dll
2018-04-12 01:34 - 2018-04-12 01:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll
2018-04-12 01:34 - 2018-04-12 01:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll
2018-04-06 14:53 - 2017-11-13 16:46 - 000092368 _____ () C:\Users\jj\AppData\Roaming\Seznam.cz\bin\12796libfoxloader-x64.dll
2018-06-15 16:47 - 2018-06-08 10:56 - 002185216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-06-14 21:00 - 2017-11-13 16:38 - 000506064 _____ () C:\Users\jj\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
2018-06-27 12:29 - 2018-06-22 21:15 - 004608856 _____ () C:\Program Files (x86)\Google\Chrome\Application\67.0.3396.99\libglesv2.dll
2018-06-27 12:29 - 2018-06-22 21:15 - 000099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\67.0.3396.99\libegl.dll
2017-06-14 21:00 - 2017-02-08 13:39 - 000080576 _____ () C:\Users\jj\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
2018-06-15 23:04 - 2018-06-20 20:36 - 000021824 _____ () C:\Program Files (x86)\Origin\QtWebEngineProcess.exe
2018-06-15 14:27 - 2018-06-15 14:41 - 000478720 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2018-06-15 14:27 - 2018-06-15 14:41 - 067232256 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2017-10-05 15:06 - 2017-10-05 15:11 - 002523136 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\UnityEngineDelegates.dll
2018-05-30 01:36 - 2018-05-30 01:38 - 000010752 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\RenderingPlugin.dll
2018-05-03 20:27 - 2018-05-03 20:29 - 000009216 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\ImagePipelineNative.dll
2018-05-30 01:36 - 2018-05-30 01:38 - 004214784 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll
2018-05-30 01:36 - 2018-05-30 01:38 - 000035840 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\WinMLWrapper.UWP.dll
2018-04-03 21:28 - 2018-04-03 21:32 - 002283008 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\TrackingDLLUWP.dll
2018-06-15 14:27 - 2018-06-15 14:41 - 014851072 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll
2018-05-30 01:36 - 2018-05-30 01:38 - 004058624 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\MediaEngine.dll
2018-06-15 14:27 - 2018-06-15 14:41 - 003266048 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll
2018-05-30 01:36 - 2018-05-30 01:38 - 001393664 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll
2018-05-30 01:36 - 2018-05-30 01:38 - 004218080 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2018-05-30 01:36 - 2018-05-30 01:38 - 000872448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll
2018-06-22 19:15 - 2018-06-22 19:15 - 000093696 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11805.1001.42.0_x64__8wekyb3d8bbwe\WinStore.Preview.dll
2018-06-22 19:15 - 2018-06-22 19:15 - 002447072 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11805.1001.42.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2018-06-22 19:15 - 2018-06-22 19:15 - 007813632 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11805.1001.42.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2016-04-27 17:52 - 2016-04-05 10:11 - 000020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2017-11-22 22:36 - 2017-11-13 16:49 - 000085200 _____ () C:\Users\jj\AppData\Roaming\Seznam.cz\bin\24825libfoxloader.dll
2018-05-31 23:04 - 2018-06-20 20:36 - 000015360 _____ () C:\Program Files (x86)\Origin\libEGL.DLL
2018-05-31 23:04 - 2018-06-20 20:36 - 003090944 _____ () C:\Program Files (x86)\Origin\libGLESv2.dll
2016-12-24 21:51 - 2016-12-24 21:55 - 000266240 _____ () C:\Program Files (x86)\Origin\imageformats\qmng.dll
2017-06-14 21:00 - 2018-02-21 11:36 - 000869584 _____ () C:\Users\jj\AppData\Roaming\Seznam.cz\bin\lightspeed.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Public\AppData:CSM [436]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2016-12-12 18:36 - 000000027 _____ C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2253141340-2309542035-3164301-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\jj\Pictures\Fotky\SDC14544.JPG
DNS Servers: 192.168.33.5 - 192.168.33.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{950E1B14-DE15-44EF-8D48-FABBDAC96023}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [TCP Query User{4CA94915-9427-474A-84FA-BA54D87F1784}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [UDP Query User{7C6FA300-6A6D-4F05-8F85-3E8FFB29E933}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [TCP Query User{B1D56A6C-FE4A-4C36-B6BE-F12C00343CE6}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [UDP Query User{8758B934-77E6-474A-AECA-5FBC99EAD0D3}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
FirewallRules: [TCP Query User{1FD39577-0650-414E-8DB9-78836F3B9F4A}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
FirewallRules: [UDP Query User{720637AA-D20E-453A-BB70-27CADFEFBCF5}C:\program files (x86)\java\jre1.8.0_161\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_161\bin\javaw.exe
FirewallRules: [TCP Query User{CF0AD98C-44B7-45E0-893D-9DB6FC98683B}C:\program files (x86)\java\jre1.8.0_161\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_161\bin\javaw.exe
FirewallRules: [{AC06BE49-E80B-4B80-A76E-E34FDFCD9C77}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp_server.exe
FirewallRules: [{45157DE3-64C3-4A67-944D-649E7D619E6A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp_server.exe
FirewallRules: [{3435BF9C-DA96-4C17-872D-003D0EB3F055}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{C10DE70E-C1E5-4A56-9C69-A6091C4F1B95}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{9986A587-FB60-41DF-AED9-315D9A571A45}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 17 DEMO\FIFASetup\fifaconfig.exe
FirewallRules: [{94D9B994-73F9-4752-9453-FC6655782E63}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 17 DEMO\FIFASetup\fifaconfig.exe
FirewallRules: [{610ACC7F-C401-4087-B61F-FAD934D2D865}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{1E2890BB-61F8-4C2B-954C-6CAEF4F7AD53}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{F5FB0BB0-99C9-4354-AFD3-096D3FA42F41}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{EEE58BAF-DC47-4656-B1C1-451E266BAAC3}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{0D971D83-3084-4249-AD35-2A6FAB6B1084}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{A09A736E-DBB3-4FB6-8BC2-6133FFD74128}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [UDP Query User{E513502A-B51A-4103-B2AA-79A7B66FBF90}C:\program files (x86)\ea sports\nhl08\nhl2008pal.exe] => (Block) C:\program files (x86)\ea sports\nhl08\nhl2008pal.exe
FirewallRules: [TCP Query User{67CA65AA-A9F2-4C6D-A2D4-AFF9F5F07096}C:\program files (x86)\ea sports\nhl08\nhl2008pal.exe] => (Block) C:\program files (x86)\ea sports\nhl08\nhl2008pal.exe
FirewallRules: [{E15D1117-A74A-40ED-A255-22A8566057E4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{A4062659-F181-4EE6-B03D-4D4F2A5E6867}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{75D36933-3D82-435C-A9CC-4C14FC14A0CC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{54B50D81-CF7F-4299-9DDD-FB03D403F9E1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{CBD9792A-9A44-40CD-8A0D-0C669F909799}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{3CE408EC-13FC-46CE-AEBE-8C92C33AA3EF}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{9AF47FF5-71DF-4699-B081-7CAE3BE72031}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [UDP Query User{FDE6DA7B-B088-4C24-A0B6-C459C91D609F}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Block) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [TCP Query User{493557A3-EC2D-48AC-A244-A58E7590D9F6}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Block) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [UDP Query User{E3608C18-2FD8-412A-9017-9AE5E8D25C95}C:\users\jj\downloads\slendytubbies-horor\slendytubbies 32bit.exe] => (Block) C:\users\jj\downloads\slendytubbies-horor\slendytubbies 32bit.exe
FirewallRules: [TCP Query User{01E15EA2-A54D-4E4F-8A31-E073EAAED4DB}C:\users\jj\downloads\slendytubbies-horor\slendytubbies 32bit.exe] => (Block) C:\users\jj\downloads\slendytubbies-horor\slendytubbies 32bit.exe
FirewallRules: [{2E6CDF7C-C2CA-4458-AF13-E002A2158636}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{14DAC030-BABF-4667-AB46-1B86E159FF51}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{5CB36B89-76EA-4A31-ADE8-27633F01E8B6}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{95C82BDC-BE68-4F51-9F61-560F21A56CCB}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{93FCFAAA-D400-45E1-9C05-21B5AF1FFDFA}] => (Allow) C:\Games\WoTLauncher.exe
FirewallRules: [{06014F90-3D79-4DB6-9AE1-DBA394918A07}] => (Allow) C:\Games\WoTLauncher.exe
FirewallRules: [{7D880C69-24AB-46D5-B556-703D224D603E}] => (Allow) C:\Games\worldoftanks.exe
FirewallRules: [{E790A77A-381E-4CD3-8AE7-93DE32A3C49E}] => (Allow) C:\Games\worldoftanks.exe
FirewallRules: [{01F2BDD2-E826-4741-A564-C6CDF8CF0F83}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{BD828EEF-60C9-4112-B4A4-3DEB900CEC13}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [TCP Query User{819B349C-6D0A-40B6-ABA3-A352FA9DC38D}C:\users\jj\appdata\local\temp\rar$exa0.533\witchit\witchit\binaries\win64\propwitchhuntmodule-win64-shipping.exe] => (Allow) C:\users\jj\appdata\local\temp\rar$exa0.533\witchit\witchit\binaries\win64\propwitchhuntmodule-win64-shipping.exe
FirewallRules: [UDP Query User{C1860CBF-0531-4F8D-981A-AD5F39FC103C}C:\users\jj\appdata\local\temp\rar$exa0.533\witchit\witchit\binaries\win64\propwitchhuntmodule-win64-shipping.exe] => (Allow) C:\users\jj\appdata\local\temp\rar$exa0.533\witchit\witchit\binaries\win64\propwitchhuntmodule-win64-shipping.exe
FirewallRules: [TCP Query User{CD2D5999-05B9-4255-BB92-A5EE47DA5E50}C:\users\jj\desktop\witchit\witchit\witchit\binaries\win64\propwitchhuntmodule-win64-shipping.exe] => (Allow) C:\users\jj\desktop\witchit\witchit\witchit\binaries\win64\propwitchhuntmodule-win64-shipping.exe
FirewallRules: [UDP Query User{C91A7653-922E-4BE9-B736-8DD299ACDF6B}C:\users\jj\desktop\witchit\witchit\witchit\binaries\win64\propwitchhuntmodule-win64-shipping.exe] => (Allow) C:\users\jj\desktop\witchit\witchit\witchit\binaries\win64\propwitchhuntmodule-win64-shipping.exe
FirewallRules: [{5A599B09-EE66-4B17-9484-B1ADC2092693}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Restore Points =========================

15-06-2018 16:31:26 Naplánovaný kontrolní bod
22-06-2018 19:26:42 Naplánovaný kontrolní bod
30-06-2018 19:41:46 Naplánovaný kontrolní bod

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (07/02/2018 07:54:23 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Chyba služby Stínová kopie svazků: Při volání rutiny QueryFullProcessImageNameW došlo k neočekávané chybě. hr= 0x80070006, Neplatný popisovač.
.


Operace:
Spouštění asynchronní operace

Kontext:
Aktuální stav: DoSnapshotSet

Error: (07/02/2018 07:52:48 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Protokol Microsoft LLDP (Link-Layer Discovery Protocol).

System Error:
Přístup byl odepřen.
.

Error: (07/02/2018 07:19:55 PM) (Source: Microsoft-Windows-SpellChecker) (EventID: 33) (User: jj-PC)
Description: httphttp-2147467263

Error: (07/01/2018 11:32:55 AM) (Source: COM) (EventID: 10031) (User: )
Description: Při zrušení zařazení vlastního zařazeného objektu byla provedena kontrola zásad zrušení zařazení a třída {41FD88F7-F295-4D39-91AC-A85F3149A05B} byla odmítnuta.

Error: (07/01/2018 11:32:55 AM) (Source: COM) (EventID: 10031) (User: )
Description: Při zrušení zařazení vlastního zařazeného objektu byla provedena kontrola zásad zrušení zařazení a třída {41FD88F7-F295-4D39-91AC-A85F3149A05B} byla odmítnuta.

Error: (06/30/2018 07:42:02 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Protokol Microsoft LLDP (Link-Layer Discovery Protocol).

System Error:
Přístup byl odepřen.
.

Error: (06/22/2018 07:27:04 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Protokol Microsoft LLDP (Link-Layer Discovery Protocol).

System Error:
Přístup byl odepřen.
.

Error: (06/15/2018 08:21:28 PM) (Source: Perflib) (EventID: 1017) (User: )
Description: Sběr dat čítače výkonu od služby ASP.NET_2.0.50727 byl vypnut z důvodu jedné nebo více chyb generovaných knihovnou čítače výkonu pro tuto službu. Chyby, které vyvolaly tuto akci, byly zapsány do protokolu událostí aplikace. Opravte tyto chyby před novým zapnutím čítačů výkonu pro tuto službu.


System errors:
=============
Error: (07/04/2018 03:23:19 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Spuštění pro serverovou aplikaci COM s identifikátorem CLSID
Windows.SecurityCenter.WscBrokerManager
a APPID
Není k dispozici
uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (07/04/2018 03:23:19 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Spuštění pro serverovou aplikaci COM s identifikátorem CLSID
Windows.SecurityCenter.WscBrokerManager
a APPID
Není k dispozici
uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (07/04/2018 03:23:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Origin Web Helper Service neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (07/04/2018 03:23:13 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Origin Web Helper Service bylo dosaženo časového limitu (30000 ms).

Error: (07/04/2018 03:22:00 PM) (Source: DCOM) (EventID: 10016) (User: jj-PC)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli jj-PC\jj (SID: S-1-5-21-2253141340-2309542035-3164301-1000) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (07/03/2018 09:08:32 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Origin Web Helper Service neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (07/03/2018 09:08:32 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Origin Web Helper Service bylo dosaženo časového limitu (30000 ms).

Error: (07/03/2018 09:06:12 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Spuštění pro serverovou aplikaci COM s identifikátorem CLSID
Windows.SecurityCenter.WscDataProtection
a APPID
Není k dispozici
uživateli NT AUTHORITY\SYSTEM (SID: S-1-5-18) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.


Windows Defender:
===================================
Date: 2018-06-17 21:58:07.448
Description:
Prohledávání Antivirová ochrana v programu Windows Defender bylo zastaveno před dokončením.
ID prohledávání: {1E9921CF-116F-43E4-9E19-C9DA2EB57E47}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2018-06-12 21:42:56.818
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo chybu při pokusu o aktualizaci podpisů.
Nová verze podpisu:
Předchozí verze podpisu: 1.269.564.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ podpisu: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.14901.4
Kód chyby: 0x80072ee7
Popis chyby :Nelze rozpoznat název nebo adresu serveru.

Date: 2018-06-12 21:42:56.818
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo chybu při pokusu o aktualizaci podpisů.
Nová verze podpisu:
Předchozí verze podpisu: 1.269.564.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ podpisu: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.14901.4
Kód chyby: 0x80072ee7
Popis chyby :Nelze rozpoznat název nebo adresu serveru.

Date: 2018-06-12 21:42:56.818
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo chybu při pokusu o aktualizaci podpisů.
Nová verze podpisu:
Předchozí verze podpisu: 1.269.564.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ podpisu: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.14901.4
Kód chyby: 0x80072ee7
Popis chyby :Nelze rozpoznat název nebo adresu serveru.

Date: 2018-06-12 21:42:56.803
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo chybu při pokusu o aktualizaci podpisů.
Nová verze podpisu:
Předchozí verze podpisu: 1.269.564.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ podpisu: Antivirový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.14901.4
Kód chyby: 0x80072ee7
Popis chyby :Nelze rozpoznat název nebo adresu serveru.

Date: 2018-06-12 21:42:56.803
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo chybu při pokusu o aktualizaci podpisů.
Nová verze podpisu:
Předchozí verze podpisu: 1.269.564.0
Zdroj aktualizace: Centrum společnosti Microsoft pro ochranu před škodlivým softwarem
Typ podpisu: Antispywarový program
Typ aktualizace: Úplné
Uživatel: NT AUTHORITY\NETWORK SERVICE
Aktuální verze modulu:
Předchozí verze modulu: 1.1.14901.4
Kód chyby: 0x80072ee7
Popis chyby :Nelze rozpoznat název nebo adresu serveru.

==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 CPU 6600 @ 2.40GHz
Percentage of memory in use: 52%
Total physical RAM: 3071.24 MB
Available physical RAM: 1452.99 MB
Total Virtual: 6143.24 MB
Available Virtual: 4308.71 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:231.95 GB) (Free:76.85 GB) NTFS

\\?\Volume{92dd8a83-8a89-11dd-a789-806e6f6e6963}\ (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS
\\?\Volume{69b369b3-0000-0000-0000-70033a000000}\ () (Fixed) (Total:0.83 GB) (Free:0.45 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 232.9 GB) (Disk ID: 69B369B3)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=232 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=850 MB) - (Type=27)

==================== End of Addition.txt ============================

Otvor poznamkovy blok (Win+R -> notepad -> enter)

• Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

  Kód: Vybrat vše

  Start
  CloseProcesses:
  CreateRestorePoint:
  
  Folder: C:\ProgramData\{8A7D27FC-3DD6-9057-66EA-3E13133766C1}
  Folder: C:\PROGRA~3\98700878
  Folder: C:\ProgramData\{08FB37C7-BF50-806C-C05E-998D3F3239BC}
  Folder: C:\ProgramData\{36181486-81B3-A32D-30CC-CF02D1321DAD}
  Folder: C:\Users\jj\AppData\Roaming\Microsoft\Installer\{84CADE55-53E2-4CB5-B8CF-75DE379D5D0B}
  File: C:\Users\jj\AppData\Roaming\Microsoft\Installer\{84CADE55-53E2-4CB5-B8CF-75DE379D5D0B}\_69525f90.exe
  File: C:\Users\jj\AppData\Roaming\Microsoft\Installer\{84CADE55-53E2-4CB5-B8CF-75DE379D5D0B}\_4ae13d6c.exe
  
  HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
  HKU\S-1-5-21-2253141340-2309542035-3164301-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\jj\AppData\Roaming\Seznam.cz\szninstall.exe [1069296 2018-03-27] ()
  HKU\S-1-5-21-2253141340-2309542035-3164301-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\jj\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [109808 2018-03-27] ()
  ProxyServer: [S-1-5-21-2253141340-2309542035-3164301-1000] => 127.0.0.1:8013
  DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} hxxps://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab
  FF NewTab: Mozilla\Firefox\Profiles\fr1uthbk.default -> 
  CHR NewTab: Default ->  Active:"chrome-extension://blmojkbhnkkphngknkmgccmlenfaelkd/speeddial/newTab.html"
  U3 idsvc; no ImagePath
  2018-07-02 20:22 - 2018-07-02 20:23 - 000000000 ____D C:\rsit
  2018-07-02 20:22 - 2018-07-02 20:22 - 001329152 _____ C:\Users\jj\Downloads\RSITx64.exe
  C:\Users\jj\Downloads\*.crdownload
  ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} =>  -> No File
  Task: {009FC872-79FD-4FFA-8406-8E35F0FEF408} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
  Task: {1ADD9C83-8E4F-4597-B066-466433120D07} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
  Task: {1F4016CC-C2AB-4505-BC84-2B79762F988A} - System32\Tasks\{063790F2-F46E-4B93-A9DB-A9D514FCC90E} => C:\WINDOWS\system32\pcalua.exe -a C:\Users\jj\Downloads\neighbours-from-hell-2_1.0.exe -d C:\Users\jj\Downloads
  Task: {36E38C8E-A798-4CCF-BF93-104CAB939F68} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
  Task: {434479EC-53C9-41F3-A452-65CF85A9C938} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
  Task: {54AD4979-A489-4ADA-820A-A34FF5BF36BD} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
  Task: {5EE180C6-455F-4972-B133-868C64497975} - \CCleanerSkipUAC -> No File <==== ATTENTION
  Task: {74F16E73-266C-4911-91E3-E797842FBB20} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
  Task: {74F41E65-B7C6-4BFE-9074-3808AEAC1EF2} - System32\Tasks\{9A8BE5DB-2D20-5270-88C9-E129F84F8DAB} => C:\ProgramData\{8A7D27FC-3DD6-9057-66EA-3E13133766C1}\B2EB7318-0540-C4B3-E205-4116B224E677.exe <==== ATTENTION
  Task: {7C0E35EE-828A-40E5-9802-640F1D9C2DBF} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
  Task: {866296DD-70EF-4CC0-98F4-0025ABAB36FF} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
  Task: {9262D28D-1F40-4D6D-B1D7-7D4E49745DDA} - System32\Tasks\{7E757880-165B-FC72-3BEF-A1052CEAE97A} => C:\WINDOWS\system32\regsvr32.exe /s /n /i:"/rt" "C:\PROGRA~3\98700878\9a99cebb.dll" <==== ATTENTION
  Task: {BA56E006-0CFD-412B-B943-BE9B1D94F36A} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
  Task: {BFC59C4E-AEEF-4C93-BF26-2C08472B0588} - System32\Tasks\{9E805134-292B-E69F-CC2A-908C2D2FFCFE} => C:\ProgramData\{08FB37C7-BF50-806C-C05E-998D3F3239BC}\981493FF-2FBF-2454-F45D-FCEFF5285E1D.exe <==== ATTENTION
  Task: {C771CF83-F2F3-4645-A7C3-9BD427D71032} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
  Task: {D0B69CD4-4FC5-48A2-92CD-F94C629E8C8A} - System32\Tasks\{529B748B-617D-4F21-83D2-0C5F05B94C29} => C:\WINDOWS\system32\pcalua.exe -a C:\Users\jj\Desktop\DirectX\dxsetup.exe -d C:\Users\jj\Desktop\DirectX
  Task: {D1384BCB-5E00-4445-AE87-D0FED84FB9B2} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
  Task: {E1D9AC3E-811E-46C4-A790-5D9178E8196E} - System32\Tasks\{DA6B8569-6DC0-32C2-2A9A-FEB7AF81CD21} => C:\ProgramData\{36181486-81B3-A32D-30CC-CF02D1321DAD}\10545AD4-A7FF-ED7F-F746-0E315A445738.exe <==== ATTENTION
  Task: {E462B3DC-41EB-4840-B499-F0056C5CCD80} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
  Task: {F7296CEB-F09C-4606-8506-55DC2B1AB762} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
  Task: {FF8F1C8B-B8FF-409E-9201-DA6C9813EC55} - System32\Tasks\{29E47BE9-AA52-4C25-A73A-26E35F6D21B6} => C:\WINDOWS\system32\pcalua.exe -a C:\Users\jj\Downloads\DX81NTcze.exe -d C:\Users\jj\Downloads
  AlternateDataStreams: C:\Users\Public\AppData:CSM [436]
  
  C:\ProgramData\{8A7D27FC-3DD6-9057-66EA-3E13133766C1}
  C:\PROGRA~3\98700878
  C:\ProgramData\{08FB37C7-BF50-806C-C05E-998D3F3239BC}
  C:\ProgramData\{36181486-81B3-A32D-30CC-CF02D1321DAD}
  
  RemoveProxy:
  
  Hosts:
  EmptyTemp:
  End

• Uloz na plochu s nazvom fixlist.txt
• Spusti znovu FRST a klikni na Fix
• Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
• Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj

nevim cim to, ale FRST hlasi ze ho nemuze najit ? Pritom je na plose s nazvem fixlist ?

FRST aj fixlist.txt musia byt na ploche respektive v tej istej zlozke.

ok

Fix result of Farbar Recovery Scan Tool (x64) Version: 20.06.2018
Ran by jj (05-07-2018 07:58:12) Run:1
Running from C:\Users\jj\Desktop
Loaded Profiles: jj (Available Profiles: jj & DefaultAppPool)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

Folder: C:\ProgramData\{8A7D27FC-3DD6-9057-66EA-3E13133766C1}
Folder: C:\PROGRA~3\98700878
Folder: C:\ProgramData\{08FB37C7-BF50-806C-C05E-998D3F3239BC}
Folder: C:\ProgramData\{36181486-81B3-A32D-30CC-CF02D1321DAD}
Folder: C:\Users\jj\AppData\Roaming\Microsoft\Installer\{84CADE55-53E2-4CB5-B8CF-75DE379D5D0B}
File: C:\Users\jj\AppData\Roaming\Microsoft\Installer\{84CADE55-53E2-4CB5-B8CF-75DE379D5D0B}\_69525f90.exe
File: C:\Users\jj\AppData\Roaming\Microsoft\Installer\{84CADE55-53E2-4CB5-B8CF-75DE379D5D0B}\_4ae13d6c.exe

HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-2253141340-2309542035-3164301-1000\...\Run: [cz.seznam.software.autoupdate] => C:\Users\jj\AppData\Roaming\Seznam.cz\szninstall.exe [1069296 2018-03-27] ()
HKU\S-1-5-21-2253141340-2309542035-3164301-1000\...\Run: [cz.seznam.software.szndesktop] => C:\Users\jj\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [109808 2018-03-27] ()
ProxyServer: [S-1-5-21-2253141340-2309542035-3164301-1000] => 127.0.0.1:8013
DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} hxxps://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab
FF NewTab: Mozilla\Firefox\Profiles\fr1uthbk.default ->
CHR NewTab: Default -> Active:"chrome-extension://blmojkbhnkkphngknkmgccmlenfaelkd/speeddial/newTab.html"
U3 idsvc; no ImagePath
2018-07-02 20:22 - 2018-07-02 20:23 - 000000000 ____D C:\rsit
2018-07-02 20:22 - 2018-07-02 20:22 - 001329152 _____ C:\Users\jj\Downloads\RSITx64.exe
C:\Users\jj\Downloads\*.crdownload
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> No File
Task: {009FC872-79FD-4FFA-8406-8E35F0FEF408} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {1ADD9C83-8E4F-4597-B066-466433120D07} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {1F4016CC-C2AB-4505-BC84-2B79762F988A} - System32\Tasks\{063790F2-F46E-4B93-A9DB-A9D514FCC90E} => C:\WINDOWS\system32\pcalua.exe -a C:\Users\jj\Downloads\neighbours-from-hell-2_1.0.exe -d C:\Users\jj\Downloads
Task: {36E38C8E-A798-4CCF-BF93-104CAB939F68} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {434479EC-53C9-41F3-A452-65CF85A9C938} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {54AD4979-A489-4ADA-820A-A34FF5BF36BD} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {5EE180C6-455F-4972-B133-868C64497975} - \CCleanerSkipUAC -> No File <==== ATTENTION
Task: {74F16E73-266C-4911-91E3-E797842FBB20} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {74F41E65-B7C6-4BFE-9074-3808AEAC1EF2} - System32\Tasks\{9A8BE5DB-2D20-5270-88C9-E129F84F8DAB} => C:\ProgramData\{8A7D27FC-3DD6-9057-66EA-3E13133766C1}\B2EB7318-0540-C4B3-E205-4116B224E677.exe <==== ATTENTION
Task: {7C0E35EE-828A-40E5-9802-640F1D9C2DBF} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {866296DD-70EF-4CC0-98F4-0025ABAB36FF} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {9262D28D-1F40-4D6D-B1D7-7D4E49745DDA} - System32\Tasks\{7E757880-165B-FC72-3BEF-A1052CEAE97A} => C:\WINDOWS\system32\regsvr32.exe /s /n /i:"/rt" "C:\PROGRA~3\98700878\9a99cebb.dll" <==== ATTENTION
Task: {BA56E006-0CFD-412B-B943-BE9B1D94F36A} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {BFC59C4E-AEEF-4C93-BF26-2C08472B0588} - System32\Tasks\{9E805134-292B-E69F-CC2A-908C2D2FFCFE} => C:\ProgramData\{08FB37C7-BF50-806C-C05E-998D3F3239BC}\981493FF-2FBF-2454-F45D-FCEFF5285E1D.exe <==== ATTENTION
Task: {C771CF83-F2F3-4645-A7C3-9BD427D71032} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {D0B69CD4-4FC5-48A2-92CD-F94C629E8C8A} - System32\Tasks\{529B748B-617D-4F21-83D2-0C5F05B94C29} => C:\WINDOWS\system32\pcalua.exe -a C:\Users\jj\Desktop\DirectX\dxsetup.exe -d C:\Users\jj\Desktop\DirectX
Task: {D1384BCB-5E00-4445-AE87-D0FED84FB9B2} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {E1D9AC3E-811E-46C4-A790-5D9178E8196E} - System32\Tasks\{DA6B8569-6DC0-32C2-2A9A-FEB7AF81CD21} => C:\ProgramData\{36181486-81B3-A32D-30CC-CF02D1321DAD}\10545AD4-A7FF-ED7F-F746-0E315A445738.exe <==== ATTENTION
Task: {E462B3DC-41EB-4840-B499-F0056C5CCD80} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {F7296CEB-F09C-4606-8506-55DC2B1AB762} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {FF8F1C8B-B8FF-409E-9201-DA6C9813EC55} - System32\Tasks\{29E47BE9-AA52-4C25-A73A-26E35F6D21B6} => C:\WINDOWS\system32\pcalua.exe -a C:\Users\jj\Downloads\DX81NTcze.exe -d C:\Users\jj\Downloads
AlternateDataStreams: C:\Users\Public\AppData:CSM [436]

C:\ProgramData\{8A7D27FC-3DD6-9057-66EA-3E13133766C1}
C:\PROGRA~3\98700878
C:\ProgramData\{08FB37C7-BF50-806C-C05E-998D3F3239BC}
C:\ProgramData\{36181486-81B3-A32D-30CC-CF02D1321DAD}

RemoveProxy:

Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Restore point was successfully created.

========================= Folder: C:\ProgramData\{8A7D27FC-3DD6-9057-66EA-3E13133766C1} ========================


====== End of Folder: ======


========================= Folder: C:\PROGRA~3\98700878 ========================

not found.

====== End of Folder: ======


========================= Folder: C:\ProgramData\{08FB37C7-BF50-806C-C05E-998D3F3239BC} ========================


====== End of Folder: ======


========================= Folder: C:\ProgramData\{36181486-81B3-A32D-30CC-CF02D1321DAD} ========================


====== End of Folder: ======


========================= Folder: C:\Users\jj\AppData\Roaming\Microsoft\Installer\{84CADE55-53E2-4CB5-B8CF-75DE379D5D0B} ========================

2017-08-07 23:03 - 2017-08-07 23:03 - 000007358 ___RA [1EC1870B59559B2F31C684E4008BEF47] () C:\Users\jj\AppData\Roaming\Microsoft\Installer\{84CADE55-53E2-4CB5-B8CF-75DE379D5D0B}\_16496df1.exe
2017-08-07 23:03 - 2017-08-07 23:03 - 000004710 ___RA [06B43FF8E0F2F0225F80F957E8BDF1A2] () C:\Users\jj\AppData\Roaming\Microsoft\Installer\{84CADE55-53E2-4CB5-B8CF-75DE379D5D0B}\_18be6784.exe
2017-08-07 23:03 - 2017-08-07 23:03 - 000007358 ___RA [1EC1870B59559B2F31C684E4008BEF47] () C:\Users\jj\AppData\Roaming\Microsoft\Installer\{84CADE55-53E2-4CB5-B8CF-75DE379D5D0B}\_294823.exe
2017-08-07 23:03 - 2017-08-07 23:03 - 000007358 ___RA [1EC1870B59559B2F31C684E4008BEF47] () C:\Users\jj\AppData\Roaming\Microsoft\Installer\{84CADE55-53E2-4CB5-B8CF-75DE379D5D0B}\_2cd672ae.exe
2017-08-07 23:03 - 2017-08-07 23:03 - 000024190 ___RA [75B93A326CC4FC6BFEB02EFD2341E1BE] () C:\Users\jj\AppData\Roaming\Microsoft\Installer\{84CADE55-53E2-4CB5-B8CF-75DE379D5D0B}\_4ae13d6c.exe
2017-08-07 23:03 - 2017-08-07 23:03 - 000024190 ___RA [75B93A326CC4FC6BFEB02EFD2341E1BE] () C:\Users\jj\AppData\Roaming\Microsoft\Installer\{84CADE55-53E2-4CB5-B8CF-75DE379D5D0B}\_69525f90.exe

====== End of Folder: ======


========================= File: C:\Users\jj\AppData\Roaming\Microsoft\Installer\{84CADE55-53E2-4CB5-B8CF-75DE379D5D0B}\_69525f90.exe ========================

C:\Users\jj\AppData\Roaming\Microsoft\Installer\{84CADE55-53E2-4CB5-B8CF-75DE379D5D0B}\_69525f90.exe
File not signed
MD5: 75B93A326CC4FC6BFEB02EFD2341E1BE
Creation and modification date: 2017-08-07 23:03 - 2017-08-07 23:03
Size: 000024190
Attributes: ---RA
Company Name:
Internal Name:
Original Name:
Product:
Description:
File Version:
Product Version:
Copyright:
VirusTotal: https://www.virustotal.com/file/ae4cbd1 ... 398134685/

====== End of File: ======


========================= File: C:\Users\jj\AppData\Roaming\Microsoft\Installer\{84CADE55-53E2-4CB5-B8CF-75DE379D5D0B}\_4ae13d6c.exe ========================

C:\Users\jj\AppData\Roaming\Microsoft\Installer\{84CADE55-53E2-4CB5-B8CF-75DE379D5D0B}\_4ae13d6c.exe
File not signed
MD5: 75B93A326CC4FC6BFEB02EFD2341E1BE
Creation and modification date: 2017-08-07 23:03 - 2017-08-07 23:03
Size: 000024190
Attributes: ---RA
Company Name:
Internal Name:
Original Name:
Product:
Description:
File Version:
Product Version:
Copyright:
VirusTotal: https://www.virustotal.com/file/ae4cbd1 ... 398134685/

====== End of File: ======

"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\seznam-listicka-distribuce" => removed successfully
"HKU\S-1-5-21-2253141340-2309542035-3164301-1000\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.autoupdate" => removed successfully
"HKU\S-1-5-21-2253141340-2309542035-3164301-1000\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.szndesktop" => removed successfully
"HKU\S-1-5-21-2253141340-2309542035-3164301-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer" => removed successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Code Store Database\Distribution Units\{233C1507-6A77-46A4-9443-F871F945D258}" => removed successfully
"HKLM\Software\Wow6432Node\Classes\CLSID\{233C1507-6A77-46A4-9443-F871F945D258}" => removed successfully
"Firefox newtab" => removed successfully
"Chrome NewTab" => removed successfully
"HKLM\System\CurrentControlSet\Services\idsvc" => removed successfully
idsvc => service removed successfully
C:\rsit => moved successfully
C:\Users\jj\Downloads\RSITx64.exe => moved successfully

=========== "C:\Users\jj\Downloads\*.crdownload" ==========

C:\Users\jj\Downloads\Nepotvrzeno 645529.crdownload => moved successfully

========= End -> "C:\Users\jj\Downloads\*.crdownload" ========

"HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\Gadgets" => removed successfully
HKLM\Software\Classes\CLSID\{6B9228DA-9C15-419e-856C-19E768A13BDC} => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{009FC872-79FD-4FFA-8406-8E35F0FEF408}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{009FC872-79FD-4FFA-8406-8E35F0FEF408}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1ADD9C83-8E4F-4597-B066-466433120D07}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1ADD9C83-8E4F-4597-B066-466433120D07}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1F4016CC-C2AB-4505-BC84-2B79762F988A}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1F4016CC-C2AB-4505-BC84-2B79762F988A}" => removed successfully
C:\WINDOWS\System32\Tasks\{063790F2-F46E-4B93-A9DB-A9D514FCC90E} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{063790F2-F46E-4B93-A9DB-A9D514FCC90E}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{36E38C8E-A798-4CCF-BF93-104CAB939F68}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{36E38C8E-A798-4CCF-BF93-104CAB939F68}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{434479EC-53C9-41F3-A452-65CF85A9C938}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{434479EC-53C9-41F3-A452-65CF85A9C938}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{54AD4979-A489-4ADA-820A-A34FF5BF36BD}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{54AD4979-A489-4ADA-820A-A34FF5BF36BD}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5EE180C6-455F-4972-B133-868C64497975}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5EE180C6-455F-4972-B133-868C64497975}" => removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CCleanerSkipUAC => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{74F16E73-266C-4911-91E3-E797842FBB20}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{74F16E73-266C-4911-91E3-E797842FBB20}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{74F41E65-B7C6-4BFE-9074-3808AEAC1EF2}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{74F41E65-B7C6-4BFE-9074-3808AEAC1EF2}" => removed successfully
C:\WINDOWS\System32\Tasks\{9A8BE5DB-2D20-5270-88C9-E129F84F8DAB} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{9A8BE5DB-2D20-5270-88C9-E129F84F8DAB}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7C0E35EE-828A-40E5-9802-640F1D9C2DBF}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7C0E35EE-828A-40E5-9802-640F1D9C2DBF}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{866296DD-70EF-4CC0-98F4-0025ABAB36FF}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{866296DD-70EF-4CC0-98F4-0025ABAB36FF}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9262D28D-1F40-4D6D-B1D7-7D4E49745DDA}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9262D28D-1F40-4D6D-B1D7-7D4E49745DDA}" => removed successfully
C:\WINDOWS\System32\Tasks\{7E757880-165B-FC72-3BEF-A1052CEAE97A} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{7E757880-165B-FC72-3BEF-A1052CEAE97A}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BA56E006-0CFD-412B-B943-BE9B1D94F36A}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BA56E006-0CFD-412B-B943-BE9B1D94F36A}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BFC59C4E-AEEF-4C93-BF26-2C08472B0588}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BFC59C4E-AEEF-4C93-BF26-2C08472B0588}" => removed successfully
C:\WINDOWS\System32\Tasks\{9E805134-292B-E69F-CC2A-908C2D2FFCFE} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{9E805134-292B-E69F-CC2A-908C2D2FFCFE}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C771CF83-F2F3-4645-A7C3-9BD427D71032}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C771CF83-F2F3-4645-A7C3-9BD427D71032}" => removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D0B69CD4-4FC5-48A2-92CD-F94C629E8C8A}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D0B69CD4-4FC5-48A2-92CD-F94C629E8C8A}" => removed successfully
C:\WINDOWS\System32\Tasks\{529B748B-617D-4F21-83D2-0C5F05B94C29} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{529B748B-617D-4F21-83D2-0C5F05B94C29}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D1384BCB-5E00-4445-AE87-D0FED84FB9B2}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1384BCB-5E00-4445-AE87-D0FED84FB9B2}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E1D9AC3E-811E-46C4-A790-5D9178E8196E}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E1D9AC3E-811E-46C4-A790-5D9178E8196E}" => removed successfully
C:\WINDOWS\System32\Tasks\{DA6B8569-6DC0-32C2-2A9A-FEB7AF81CD21} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{DA6B8569-6DC0-32C2-2A9A-FEB7AF81CD21}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E462B3DC-41EB-4840-B499-F0056C5CCD80}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E462B3DC-41EB-4840-B499-F0056C5CCD80}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F7296CEB-F09C-4606-8506-55DC2B1AB762}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F7296CEB-F09C-4606-8506-55DC2B1AB762}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FF8F1C8B-B8FF-409E-9201-DA6C9813EC55}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FF8F1C8B-B8FF-409E-9201-DA6C9813EC55}" => removed successfully
C:\WINDOWS\System32\Tasks\{29E47BE9-AA52-4C25-A73A-26E35F6D21B6} => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{29E47BE9-AA52-4C25-A73A-26E35F6D21B6}" => removed successfully
C:\Users\Public\AppData => ":CSM" ADS removed successfully
C:\ProgramData\{8A7D27FC-3DD6-9057-66EA-3E13133766C1} => moved successfully
"C:\PROGRA~3\98700878" => not found
C:\ProgramData\{08FB37C7-BF50-806C-C05E-998D3F3239BC} => moved successfully
C:\ProgramData\{36181486-81B3-A32D-30CC-CF02D1321DAD} => moved successfully

========= RemoveProxy: =========

"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => removed successfully
"HKU\S-1-5-21-2253141340-2309542035-3164301-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully
"HKU\S-1-5-21-2253141340-2309542035-3164301-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => removed successfully


========= End of RemoveProxy: =========

C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 8151040 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 16163944 B
Java, Flash, Steam htmlcache => 374332962 B
Windows/system/drivers => 1213245 B
Edge => 7012011 B
Chrome => 82433850 B
Firefox => 72486695 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 874 B
LocalService => 0 B
NetworkService => 63624 B
NetworkService => 0 B
jj => 407406045 B
DefaultAppPool => 0 B

RecycleBin => 13466073593 B
EmptyTemp: => 13.4 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 08:03:05 ====

Poprosim o nove logy z FRST (obidva).

Nastala nejaka zmena?