VIRY.CZ

Prosím o kontrolu logu,po zapnutí internetového prohližeče se vypnul v avastu poštovní štít,odinstaloval jsem avast pak znovu nainstaloval jenže vůlbec nenainstalovala ikona,ani v oznamovací části nejde vidět,avast nejde vůbec otevřít,zkoušel jsem opravit akzualizovat vůbec nepomohlo,obnovení systému selhalo
Logfile of random's system information tool 1.10 (written by random/random)
Run by pc at 2019-01-23 14:00:36
Microsoft Windows 10 Home
System drive C: has 265 GB (61%) free of 434 GB
Total RAM: 3962 MB (46% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:00:50, on 23. 1. 2019
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.17134.0001)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\OLYMPUS\OLYMPUS Master 2\MMonitor.exe
C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
C:\Users\pc\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files\trend micro\pc.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Dolby Advanced Audio v2] "C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe" -autostart
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
O4 - HKLM\..\Run: [ICQ Lite] "C:\Program Files (x86)\ICQLite\ICQLite.exe" -minimize
O4 - HKLM\..\Run: [331BigDog] "C:\Program Files (x86)\USB Camera\VM331STI.EXE"
O4 - HKLM\..\RunOnce: [AvRepair] "C:\Program Files\AVAST Software\Avast\setup\instup.exe" /instop:repair /wait
O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files (x86)\OLYMPUS\OLYMPUS Master 2\MMonitor.exe"
O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray
O4 - HKCU\..\Run: [OneDrive] "C:\Users\pc\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [CCleaner Smart Cleaning] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files (x86)\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files (x86)\ICQLite\ICQLite.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: aswbIDSAgent - AVAST Software - C:\Program Files\AVAST Software\Avast\aswidsagent.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @oem21.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: COMODO Internet Security Helper Service (CmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @C:\WINDOWS\system32\CxAudMsg64.exe,-100 (CxAudMsg) - Unknown owner - C:\WINDOWS\system32\CxAudMsg64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Conexant SmartAudio service (SAService) - Conexant Systems, Inc. - C:\WINDOWS\system32\SAsrv.exe
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: OpenSSH Authentication Agent (ssh-agent) - Unknown owner - C:\WINDOWS\System32\OpenSSH\ssh-agent.exe (file missing)
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)

--
End of file - 12583 bytes

======Listing Processes======








winlogon.exe


c:\windows\system32\svchost.exe -k dcomlaunch -p -s PlugPlay
"fontdrvhost.exe"
"fontdrvhost.exe"
C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-54540437-b4df-4a19-98b7-86c8a4aa7144 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-65ae892d-c1d9-4296-868f-1d37fae78c31 -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-772bcd7a-6e10-4c80-8509-04613c2d390c -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-ad5311d7-8b02-4c08-b225-ad8a238e202f -LifetimeId:50ee916d-e981-4b11-aad8-dca3c5ee76c5 -DeviceGroupId:WudfDefaultDevicePool
c:\windows\system32\svchost.exe -k rpcss -p
c:\windows\system32\svchost.exe -k dcomlaunch -p -s LSM
"dwm.exe"
c:\windows\system32\svchost.exe -k localservice -p -s bthserv
c:\windows\system32\svchost.exe -k localservice -p -s BthAvctpSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s NcbService
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s EventLog
c:\windows\system32\svchost.exe -k netsvcs -p -s Schedule
c:\windows\system32\svchost.exe -k netsvcs -p -s ProfSvc
c:\windows\system32\svchost.exe -k localservice -p -s nsi
c:\windows\system32\svchost.exe -k netsvcs -p -s UserManager
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s Dhcp
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s TimeBrokerSvc
c:\windows\system32\svchost.exe -k networkservice -p -s NlaSvc
c:\windows\system32\svchost.exe -k localservice -p -s netprofm
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s BTAGService
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s DeviceAssociationService
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s SysMain
c:\windows\system32\svchost.exe -k localservice -p -s EventSystem
c:\windows\system32\svchost.exe -k netsvcs -p -s Themes

c:\windows\system32\svchost.exe -k netsvcs -p -s SENS
C:\WINDOWS\system32\igfxCUIService.exe
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s AudioEndpointBuilder
c:\windows\system32\svchost.exe -k localservice -p -s FontCache
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k appmodel -p -s StateRepository
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\WINDOWS\system32\svchost.exe -k LocalServiceNetworkRestricted -p
c:\windows\system32\svchost.exe -k networkservice -p -s Dnscache
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s WinHttpAutoProxySvc
C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p
c:\windows\system32\svchost.exe -k netsvcs -p -s ShellHWDetection
sihost.exe
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
c:\windows\system32\svchost.exe -k unistacksvcgroup -s WpnUserService
C:\WINDOWS\System32\spoolsv.exe
c:\windows\system32\svchost.exe -k networkservice -p -s LanmanWorkstation
taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}
"C:\Program Files\COMODO\COMODO Internet Security\cistray.exe"
C:\WINDOWS\system32\BtwRSupportService.exe
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
c:\windows\system32\svchost.exe -k networkservice -p -s CryptSvc
C:\WINDOWS\System32\svchost.exe -k utcsvc -p
c:\windows\system32\svchost.exe -k netsvcs -p -s Winmgmt
c:\windows\system32\svchost.exe -k localservicenonetwork -p -s DPS
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s LanmanServer
c:\windows\system32\svchost.exe -k localservice -p -s SstpSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TrkWks
c:\windows\system32\svchost.exe -k netsvcs -p -s WpnService
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s TabletInputService

"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"

c:\windows\system32\svchost.exe -k netsvcs -p -s iphlpsvc
"C:\WINDOWS\system32\CxAudMsg64.exe"
c:\windows\system32\svchost.exe -k localservice -p -s WdiServiceHost
c:\windows\system32\svchost.exe -k netsvcs
"ctfmon.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s WdiSystemHost
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
c:\windows\system32\svchost.exe -k netsvcs -p -s Appinfo
C:\WINDOWS\Explorer.EXE
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s PcaSvc
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
c:\windows\system32\svchost.exe -k netsvcs -p -s TokenBroker
"C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
C:\WINDOWS\system32\SettingSyncHost.exe -Embedding
igfxEM.exe
igfxHK.exe
igfxTray.exe
c:\windows\system32\svchost.exe -k netsvcs -p
"C:\Program Files\COMODO\COMODO Internet Security\cis.exe" --alertsUI

c:\windows\system32\svchost.exe -k unistacksvcgroup
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.36.52.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe" -ServerName:SkypeBackgroundHost
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Defender\MSASCuiL.exe"
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files\BOINC\boinctray.exe"
"C:\Program Files\BOINC\charityengine.exe" /a /s
"C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe"
"C:\Program Files (x86)\OLYMPUS\OLYMPUS Master 2\MMonitor.exe"
"C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe" -tray
"C:\Users\pc\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -s RmSvc
C:\WINDOWS\system32\svchost.exe -k imgsvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s Netman
"C:\Program Files\rempl\sedsvc.exe"

C:\WINDOWS\system32\DllHost.exe /Processid:{973D20D7-562D-44B9-B70B-5A0F49CCDF3F}
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
c:\windows\system32\svchost.exe -k localservice -p -s LicenseManager
c:\windows\system32\svchost.exe -k localserviceandnoimpersonation -p -s SSDPSRV
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
c:\windows\system32\svchost.exe -k localsystemnetworkrestricted -p -s StorSvc
"C:\WINDOWS\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\Windows\System32\SystemSettingsBroker.exe -Embedding
"C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe" -ServerName:WindowsDefaultLockScreen.AppX7y4nbzq37zn4ks9k7amqjywdat7d3j2z.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted -p -s lmhosts
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\ApplicationFrameHost.exe -Embedding
C:\Windows\System32\smartscreen.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-2601864178-3848914015-3132111734-100124_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-2601864178-3848914015-3132111734-100124 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 764 768 776 8192 772
C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s wlidsvc
C:\WINDOWS\system32\AUDIODG.EXE 0x634
"C:\Users\pc\AppData\Local\Microsoft\Windows\INetCache\IE\3F6CLIL4\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\CreateExplorerShellUnelevatedTask.job - C:\WINDOWS\explorer.exe /NOUACCHECK
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements.job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2018-05-25 255088]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2018-11-26 150824]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2018-05-25 193136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2018-05-25 255088]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2018-05-25 193136]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurityHealth"=C:\Program Files\Windows Defender\MSASCuiL.exe [2018-04-12 638872]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2013-12-24 17079376]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2013-12-24 191568]
"boinctray"=C:\Program Files\BOINC\boinctray.exe [2018-01-19 69952]
"boincmgr"=C:\Program Files\BOINC\charityengine.exe [2018-01-19 8662848]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2014-11-25 935104]
"COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}"=C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2018-06-18 1585344]
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SACpl.exe [2014-04-10 1830616]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2015-06-03 3944136]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OM2_Monitor"=C:\Program Files (x86)\OLYMPUS\OLYMPUS Master 2\MMonitor.exe [2007-02-08 95800]
"NokiaSuite.exe"=C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2013-04-19 1090912]
"OneDrive"=C:\Users\pc\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2018-12-15 1543264]
"CCleaner Smart Cleaning"=C:\Program Files\CCleaner\CCleaner64.exe [2018-09-10 18630056]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Dolby Advanced Audio v2"=C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [2019-01-13 508656]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-07-27 136488]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [2012-07-27 167024]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2012-04-19 217088]
"RemoteControl10"=C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [2012-03-29 91432]
"Intel AppUp(SM) center"=C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2012-07-12 155488]
"ICQ Lite"=C:\Program Files (x86)\ICQLite\ICQLite.exe [2006-07-27 3142236]
"331BigDog"=C:\Program Files (x86)\USB Camera\VM331STI.EXE [2015-06-12 561672]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"AvRepair"=C:\Program Files\AVAST Software\Avast\setup\instup.exe [2019-01-22 1870776]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2019-01-23 14:00:37 ----D---- C:\Program Files\trend micro
2019-01-23 14:00:36 ----D---- C:\rsit
2019-01-23 13:27:31 ----D---- C:\FRST
2019-01-23 10:49:06 ----D---- C:\rei
2019-01-23 10:47:59 ----A---- C:\WINDOWS\Reimage.ini
2019-01-23 10:43:47 ----A---- C:\WINDOWS\system32\aswBoot.exe
2019-01-23 10:37:03 ----HD---- C:\OneDriveTemp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswStm.sys
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswRdr2.sys
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswKbd.sys
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswHwid.sys
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswHdsKe.sys
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswf26b7fe2caa3c889.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswElam.sys
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswed8d72991ddf6dc1.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswecefe1daa1ddb19a.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswec4c03e37b100c3e.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\asweb6cb464e066788e.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswe23fcdf2f2671b05.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswde06ad2c0969321e.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswca9036691d83d48b.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswc175e7511c150b04.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswbuniv.sys
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswblog.sys
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswbidsh.sys
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswbidsdriver.sys
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswb03146871f3d82c0.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswArPot.sys
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswArDisk.sys
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswaae08e7e50f06ec1.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswa45ea5c9e505b475.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\aswa2263c3da9ec0331.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\asw9b4f9813b9a7eb6f.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\asw9ad1fedec03a2fb4.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\asw982991e7d79675ce.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\asw958d0d955a748d37.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\asw92ed8f60ca3be56d.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\asw8223a2663c70d7df.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\asw6afa87dd45fb4330.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\asw69558f2112efec82.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\asw5f6be8728d1a966b.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\asw5e04f3da2328df18.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\asw5d164173a8412978.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\asw5bfecd6ff9e466c8.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\asw53538aea6d825d00.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\asw4efbbcff1f8c6d54.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\asw2401e253baba6afd.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\asw226682dcca56acab.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\asw1c9c689df24cff6e.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\asw1bfce03a4cf95f0e.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\asw14f35d2cc4b4ddc5.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\asw115874f8fd54ffe7.tmp
2019-01-22 22:36:56 ----A---- C:\WINDOWS\system32\drivers\asw0e6a9de8e4869943.tmp
2019-01-22 22:35:16 ----D---- C:\Program Files\AVAST Software
2019-01-22 19:11:22 ----A---- C:\WINDOWS\system32\drivers\staport.sys
2019-01-22 17:41:27 ----D---- C:\AdwCleaner
2019-01-16 21:32:15 ----D---- C:\WINDOWS\Minidump
2019-01-13 14:15:50 ----D---- C:\ProgramData\Microsoft OneDrive
2019-01-13 14:12:07 ----SD---- C:\WINDOWS\SYSWOW64\Microsoft
2019-01-13 06:13:18 ----D---- C:\WINDOWS\system32\drivers\wd
2019-01-13 06:03:54 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2019-01-13 05:54:21 ----ASH---- C:\hiberfil.sys
2019-01-13 05:48:55 ----SD---- C:\Users\pc\AppData\Roaming\Microsoft
2019-01-13 05:45:08 ----D---- C:\Program Files\Dolby Digital Plus
2019-01-13 05:44:55 ----D---- C:\ProgramData\USOShared
2019-01-13 05:44:48 ----A---- C:\WINDOWS\SYSWOW64\PrintConfig.dll
2019-01-13 05:43:56 ----A---- C:\WINDOWS\SYSWOW64\OpenCL.DLL
2019-01-13 05:43:56 ----A---- C:\WINDOWS\system32\OpenCL.DLL
2019-01-13 05:42:21 ----D---- C:\WINDOWS\Prefetch
2019-01-13 05:40:37 ----D---- C:\WINDOWS\system32\SleepStudy
2019-01-13 05:40:30 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2019-01-13 05:39:39 ----D---- C:\Windows.old
2019-01-13 05:34:19 ----AS---- C:\WINDOWS\bootstat.dat
2019-01-13 05:33:25 ----D---- C:\WINDOWS\system32\Microsoft
2019-01-13 05:33:25 ----D---- C:\WINDOWS\ServiceProfiles
2019-01-13 05:08:50 ----D---- C:\WINDOWS\SYSWOW64\XPSViewer
2019-01-13 05:08:48 ----D---- C:\Program Files (x86)\Reference Assemblies
2019-01-13 05:08:48 ----D---- C:\Program Files (x86)\MSBuild
2019-01-13 05:08:47 ----D---- C:\Program Files\Reference Assemblies
2019-01-13 05:08:47 ----D---- C:\Program Files\MSBuild
2019-01-13 05:08:24 ----A---- C:\WINDOWS\SYSWOW64\PresentationNative_v0300.dll
2019-01-13 05:08:23 ----A---- C:\WINDOWS\SYSWOW64\TsWpfWrp.exe
2019-01-13 05:08:23 ----A---- C:\WINDOWS\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2019-01-13 05:08:23 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2019-01-13 05:08:22 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2019-01-13 05:08:22 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2019-01-13 05:06:51 ----A---- C:\WINDOWS\SYSWOW64\XPSSHHDR.dll
2019-01-13 05:06:51 ----A---- C:\WINDOWS\SYSWOW64\xpsrchvw.exe
2019-01-13 05:06:51 ----A---- C:\WINDOWS\SYSWOW64\XpsFilt.dll
2019-01-13 05:06:51 ----A---- C:\WINDOWS\system32\XPSSHHDR.dll
2019-01-13 05:06:51 ----A---- C:\WINDOWS\system32\xpsrchvw.exe
2019-01-13 05:06:50 ----A---- C:\WINDOWS\system32\XpsFilt.dll
2018-12-27 18:40:16 ----DC---- C:\WINDOWS\Panther

======List of files/folders modified in the last 1 month======

2019-01-23 14:00:48 ----D---- C:\WINDOWS\system32\drivers\etc
2019-01-23 14:00:44 ----D---- C:\WINDOWS\Temp
2019-01-23 14:00:37 ----RD---- C:\Program Files
2019-01-23 13:45:21 ----D---- C:\WINDOWS\system32\CatRoot
2019-01-23 13:45:19 ----D---- C:\WINDOWS\system32\catroot2
2019-01-23 13:42:08 ----D---- C:\WINDOWS\system32\sru
2019-01-23 13:38:10 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2019-01-23 13:36:38 ----D---- C:\Windows
2019-01-23 13:36:25 ----D---- C:\WINDOWS\CbsTemp
2019-01-23 13:18:49 ----D---- C:\WINDOWS\System32
2019-01-23 13:18:49 ----D---- C:\WINDOWS\INF
2019-01-23 12:38:18 ----D---- C:\WINDOWS\system32\config
2019-01-23 10:45:09 ----D---- C:\WINDOWS\system32\drivers
2019-01-23 10:44:46 ----D---- C:\WINDOWS\system32\Tasks
2019-01-23 10:43:47 ----HD---- C:\WINDOWS\ELAMBKUP
2019-01-22 23:09:13 ----D---- C:\WINDOWS\system32\NDF
2019-01-22 22:34:38 ----D---- C:\ProgramData\AVAST Software
2019-01-22 22:30:40 ----D---- C:\WINDOWS\AppReadiness
2019-01-22 22:30:12 ----RD---- C:\Users
2019-01-22 22:03:18 ----D---- C:\WINDOWS\Tasks
2019-01-22 20:47:52 ----D---- C:\WINDOWS\WinSxS
2019-01-22 19:28:38 ----D---- C:\WINDOWS\Logs
2019-01-22 18:52:27 ----D---- C:\WINDOWS\system32\wbem
2019-01-22 18:27:31 ----D---- C:\WINDOWS\registration
2019-01-22 18:16:34 ----SHD---- C:\System Volume Information
2019-01-22 15:34:03 ----HD---- C:\Program Files\WindowsApps
2019-01-22 15:33:28 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2019-01-21 13:52:11 ----D---- C:\ProgramData\BOINC
2019-01-21 13:43:21 ----D---- C:\Users\pc\AppData\Roaming\Opera Software
2019-01-21 07:30:17 ----SHD---- C:\WINDOWS\Installer
2019-01-21 07:30:10 ----AD---- C:\Program Files\rempl
2019-01-21 07:22:03 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2019-01-17 16:48:10 ----D---- C:\WINDOWS\SysWOW64
2019-01-15 16:08:58 ----SD---- C:\ProgramData\Microsoft
2019-01-15 16:05:23 ----RD---- C:\WINDOWS\Microsoft.NET
2019-01-15 16:03:50 ----RD---- C:\WINDOWS\assembly
2019-01-15 15:38:40 ----D---- C:\WINDOWS\appcompat
2019-01-15 15:31:23 ----D---- C:\WINDOWS\system32\DriverStore
2019-01-15 15:25:52 ----D---- C:\WINDOWS\TextInput
2019-01-15 15:25:52 ----D---- C:\WINDOWS\SYSWOW64\zu-ZA
2019-01-15 15:25:52 ----D---- C:\WINDOWS\SYSWOW64\zh-CN
2019-01-15 15:25:52 ----D---- C:\WINDOWS\SYSWOW64\yo-NG
2019-01-15 15:25:52 ----D---- C:\WINDOWS\SYSWOW64\xh-ZA
2019-01-15 15:25:52 ----D---- C:\WINDOWS\SYSWOW64\wo-SN
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\wbem
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\vi-VN
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\uz-Latn-UZ
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\ur-PK
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\ug-CN
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\tt-RU
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\tn-ZA
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\tk-TM
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\ti-ET
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\tg-Cyrl-TJ
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\te-IN
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\ta-IN
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\sw-KE
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-RS
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\sr-Cyrl-BA
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\sq-AL
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\si-LK
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\setup
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\sd-Arab-PK
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\rw-RW
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\quz-PE
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\quc-Latn-GT
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\prs-AF
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\pa-IN
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\pa-Arab-PK
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\or-IN
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\oobe
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\nso-ZA
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\nn-NO
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\ne-NP
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\mt-MT
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\ms-MY
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\mr-IN
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\mn-MN
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\ml-IN
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\mk-MK
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\mi-NZ
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\migration
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\lo-LA
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\lb-LU
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\ky-KG
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\ku-Arab-IQ
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\kok-IN
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\kn-IN
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\km-KH
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\kk-KZ
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\ka-GE
2019-01-15 15:25:51 ----D---- C:\WINDOWS\SYSWOW64\is-IS
2019-01-15 15:25:50 ----SD---- C:\WINDOWS\SYSWOW64\F12
2019-01-15 15:25:50 ----D---- C:\WINDOWS\SYSWOW64\ig-NG
2019-01-15 15:25:50 ----D---- C:\WINDOWS\SYSWOW64\id-ID
2019-01-15 15:25:50 ----D---- C:\WINDOWS\SYSWOW64\chr-CHER-US
2019-01-15 15:25:50 ----D---- C:\WINDOWS\SYSWOW64\hy-AM
2019-01-15 15:25:50 ----D---- C:\WINDOWS\SYSWOW64\ha-Latn-NG
2019-01-15 15:25:50 ----D---- C:\WINDOWS\SYSWOW64\gu-IN
2019-01-15 15:25:50 ----D---- C:\WINDOWS\SYSWOW64\gd-GB
2019-01-15 15:25:50 ----D---- C:\WINDOWS\SYSWOW64\ga-IE
2019-01-15 15:25:50 ----D---- C:\WINDOWS\SYSWOW64\fil-PH
2019-01-15 15:25:50 ----D---- C:\WINDOWS\SYSWOW64\fa-IR
2019-01-15 15:25:50 ----D---- C:\WINDOWS\SYSWOW64\en-US
2019-01-15 15:25:50 ----D---- C:\WINDOWS\SYSWOW64\Dism
2019-01-15 15:25:50 ----D---- C:\WINDOWS\SYSWOW64\cy-GB
2019-01-15 15:25:50 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2019-01-15 15:25:50 ----D---- C:\WINDOWS\SYSWOW64\ca-ES-valencia
2019-01-15 15:25:50 ----D---- C:\WINDOWS\SYSWOW64\bs-Latn-BA
2019-01-15 15:25:50 ----D---- C:\WINDOWS\SYSWOW64\bn-IN
2019-01-15 15:25:50 ----D---- C:\WINDOWS\SYSWOW64\bn-BD
2019-01-15 15:25:50 ----D---- C:\WINDOWS\SYSWOW64\be-BY
2019-01-15 15:25:50 ----D---- C:\WINDOWS\SYSWOW64\az-Latn-AZ
2019-01-15 15:25:50 ----D---- C:\WINDOWS\SYSWOW64\as-IN
2019-01-15 15:25:50 ----D---- C:\WINDOWS\SYSWOW64\am-ET
2019-01-15 15:25:49 ----D---- C:\WINDOWS\SYSWOW64\af-ZA
2019-01-15 15:25:29 ----D---- C:\WINDOWS\system32\zu-ZA
2019-01-15 15:25:29 ----D---- C:\WINDOWS\system32\zh-CN
2019-01-15 15:25:29 ----D---- C:\WINDOWS\system32\yo-NG
2019-01-15 15:25:29 ----D---- C:\WINDOWS\system32\xh-ZA
2019-01-15 15:25:29 ----D---- C:\WINDOWS\system32\wo-SN
2019-01-15 15:25:28 ----SD---- C:\WINDOWS\system32\UNP
2019-01-15 15:25:28 ----D---- C:\WINDOWS\system32\WinBioPlugIns
2019-01-15 15:25:28 ----D---- C:\WINDOWS\system32\vi-VN
2019-01-15 15:25:28 ----D---- C:\WINDOWS\system32\uz-Latn-UZ
2019-01-15 15:25:28 ----D---- C:\WINDOWS\system32\ur-PK
2019-01-15 15:25:23 ----D---- C:\WINDOWS\system32\ug-CN
2019-01-15 15:25:23 ----D---- C:\WINDOWS\system32\tt-RU
2019-01-15 15:25:23 ----D---- C:\WINDOWS\system32\tn-ZA
2019-01-15 15:25:23 ----D---- C:\WINDOWS\system32\tk-TM
2019-01-15 15:25:23 ----D---- C:\WINDOWS\system32\ti-ET
2019-01-15 15:25:23 ----D---- C:\WINDOWS\system32\tg-Cyrl-TJ
2019-01-15 15:25:23 ----D---- C:\WINDOWS\system32\te-IN
2019-01-15 15:25:23 ----D---- C:\WINDOWS\system32\ta-in
2019-01-15 15:25:23 ----D---- C:\WINDOWS\system32\SystemResetPlatform
2019-01-15 15:25:23 ----D---- C:\WINDOWS\system32\sw-KE
2019-01-15 15:25:23 ----D---- C:\WINDOWS\system32\sr-Cyrl-RS
2019-01-15 15:25:23 ----D---- C:\WINDOWS\system32\sr-Cyrl-BA
2019-01-15 15:25:23 ----D---- C:\WINDOWS\system32\sq-AL
2019-01-15 15:25:22 ----D---- C:\WINDOWS\system32\si-lk
2019-01-15 15:25:22 ----D---- C:\WINDOWS\system32\ShellExperiences
2019-01-15 15:25:22 ----D---- C:\WINDOWS\system32\setup
2019-01-15 15:25:22 ----D---- C:\WINDOWS\system32\sd-Arab-PK
2019-01-15 15:25:22 ----D---- C:\WINDOWS\system32\rw-RW
2019-01-15 15:25:22 ----D---- C:\WINDOWS\system32\quz-PE
2019-01-15 15:25:22 ----D---- C:\WINDOWS\system32\quc-Latn-GT
2019-01-15 15:25:22 ----D---- C:\WINDOWS\system32\prs-AF
2019-01-15 15:25:22 ----D---- C:\WINDOWS\system32\pa-IN
2019-01-15 15:25:22 ----D---- C:\WINDOWS\system32\pa-Arab-PK
2019-01-15 15:25:22 ----D---- C:\WINDOWS\system32\or-IN
2019-01-15 15:25:22 ----D---- C:\WINDOWS\system32\oobe
2019-01-15 15:25:22 ----D---- C:\WINDOWS\system32\nso-ZA
2019-01-15 15:25:22 ----D---- C:\WINDOWS\system32\nn-NO
2019-01-15 15:25:22 ----D---- C:\WINDOWS\system32\ne-NP
2019-01-15 15:25:22 ----D---- C:\WINDOWS\system32\mt-MT
2019-01-15 15:25:22 ----D---- C:\WINDOWS\system32\ms-MY
2019-01-15 15:25:22 ----D---- C:\WINDOWS\system32\mr-IN
2019-01-15 15:25:22 ----D---- C:\WINDOWS\system32\mn-MN
2019-01-15 15:25:22 ----D---- C:\WINDOWS\system32\ml-IN
2019-01-15 15:25:22 ----D---- C:\WINDOWS\system32\mk-MK
2019-01-15 15:25:21 ----D---- C:\WINDOWS\system32\mi-NZ
2019-01-15 15:25:21 ----D---- C:\WINDOWS\system32\migration
2019-01-15 15:25:21 ----D---- C:\WINDOWS\system32\lo-LA
2019-01-15 15:25:21 ----D---- C:\WINDOWS\system32\lb-LU
2019-01-15 15:25:21 ----D---- C:\WINDOWS\system32\ky-KG
2019-01-15 15:25:21 ----D---- C:\WINDOWS\system32\ku-Arab-IQ
2019-01-15 15:25:21 ----D---- C:\WINDOWS\system32\kok-IN
2019-01-15 15:25:21 ----D---- C:\WINDOWS\system32\kn-IN
2019-01-15 15:25:21 ----D---- C:\WINDOWS\system32\km-KH
2019-01-15 15:25:21 ----D---- C:\WINDOWS\system32\kk-KZ
2019-01-15 15:25:21 ----D---- C:\WINDOWS\system32\ka-GE
2019-01-15 15:25:21 ----D---- C:\WINDOWS\system32\is-IS
2019-01-15 15:25:21 ----D---- C:\WINDOWS\system32\ig-NG
2019-01-15 15:25:21 ----D---- C:\WINDOWS\system32\id-ID
2019-01-15 15:25:21 ----D---- C:\WINDOWS\system32\hy-AM
2019-01-15 15:25:21 ----D---- C:\WINDOWS\system32\ha-Latn-NG
2019-01-15 15:25:21 ----D---- C:\WINDOWS\system32\gu-IN
2019-01-15 15:25:21 ----D---- C:\WINDOWS\system32\gd-GB
2019-01-15 15:25:21 ----D---- C:\WINDOWS\system32\ga-IE
2019-01-15 15:25:21 ----D---- C:\WINDOWS\system32\fil-PH
2019-01-15 15:25:21 ----D---- C:\WINDOWS\system32\fa-IR
2019-01-15 15:25:20 ----SD---- C:\WINDOWS\system32\F12
2019-01-15 15:25:20 ----D---- C:\WINDOWS\system32\en-US
2019-01-15 15:25:20 ----D---- C:\WINDOWS\system32\drivers\UMDF
2019-01-15 15:25:20 ----D---- C:\WINDOWS\system32\drivers\en-US
2019-01-15 15:25:20 ----D---- C:\WINDOWS\system32\Dism
2019-01-15 15:25:19 ----SD---- C:\WINDOWS\system32\DiagSvcs
2019-01-15 15:25:19 ----D---- C:\WINDOWS\system32\chr-CHER-US
2019-01-15 15:25:19 ----D---- C:\WINDOWS\system32\cy-GB
2019-01-15 15:25:19 ----D---- C:\WINDOWS\system32\cs-CZ
2019-01-15 15:25:19 ----D---- C:\WINDOWS\system32\ca-ES-valencia
2019-01-15 15:25:19 ----D---- C:\WINDOWS\system32\bs-Latn-BA
2019-01-15 15:25:19 ----D---- C:\WINDOWS\system32\Boot
2019-01-15 15:25:19 ----D---- C:\WINDOWS\system32\bn-IN
2019-01-15 15:25:19 ----D---- C:\WINDOWS\system32\bn-BD
2019-01-15 15:25:19 ----D---- C:\WINDOWS\system32\be-BY
2019-01-15 15:25:19 ----D---- C:\WINDOWS\system32\az-Latn-AZ
2019-01-15 15:25:19 ----D---- C:\WINDOWS\system32\as-IN
2019-01-15 15:25:19 ----D---- C:\WINDOWS\system32\appraiser
2019-01-15 15:25:19 ----D---- C:\WINDOWS\system32\am-et
2019-01-15 15:25:19 ----D---- C:\WINDOWS\system32\af-ZA
2019-01-15 15:24:52 ----D---- C:\WINDOWS\ShellExperiences
2019-01-15 15:24:52 ----D---- C:\WINDOWS\ShellComponents
2019-01-15 15:24:51 ----RD---- C:\WINDOWS\PrintDialog
2019-01-15 15:24:51 ----D---- C:\WINDOWS\Provisioning
2019-01-15 15:24:41 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2019-01-15 15:24:40 ----RSD---- C:\WINDOWS\Fonts
2019-01-15 15:24:39 ----D---- C:\WINDOWS\bcastdvr
2019-01-15 15:24:39 ----D---- C:\WINDOWS\apppatch
2019-01-15 15:24:39 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2019-01-15 15:24:39 ----D---- C:\Program Files (x86)\Windows Media Player
2019-01-15 15:24:39 ----D---- C:\Program Files (x86)\Windows Defender
2019-01-15 15:24:38 ----D---- C:\Program Files\Windows Photo Viewer
2019-01-15 15:24:38 ----D---- C:\Program Files\Windows Media Player
2019-01-15 15:24:38 ----D---- C:\Program Files\Windows Defender
2019-01-15 15:24:38 ----D---- C:\Program Files (x86)\Internet Explorer
2019-01-15 15:24:37 ----D---- C:\Program Files\internet explorer
2019-01-14 23:00:35 ----D---- C:\WINDOWS\SoftwareDistribution
2019-01-13 14:51:03 ----D---- C:\WINDOWS\system32\WDI
2019-01-13 14:29:02 ----D---- C:\WINDOWS\system32\restore
2019-01-13 14:21:27 ----D---- C:\ProgramData\Packages
2019-01-13 14:15:50 ----HD---- C:\ProgramData
2019-01-13 14:10:12 ----D---- C:\WINDOWS\system32\LogFiles
2019-01-13 08:43:31 ----A---- C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2019-01-13 06:13:48 ----D---- C:\Program Files\windows nt
2019-01-13 05:51:11 ----D---- C:\WINDOWS\system32\CodeIntegrity
2019-01-13 05:47:57 ----D---- C:\WINDOWS\System
2019-01-13 05:47:57 ----D---- C:\Program Files (x86)\USB Camera
2019-01-13 05:47:56 ----D---- C:\WINDOWS\debug
2019-01-13 05:44:59 ----D---- C:\ProgramData\USOPrivate
2019-01-13 05:41:37 ----SHD---- C:\Recovery
2019-01-13 05:39:44 ----D---- C:\WINDOWS\system32\Tasks_Migrated
2019-01-13 05:39:43 ----D---- C:\WINDOWS\system32\WinBioDatabase
2019-01-13 05:39:42 ----DC---- C:\WINDOWS\system32\DRVSTORE
2019-01-13 05:39:42 ----D---- C:\WINDOWS\twain_32
2019-01-13 05:39:42 ----D---- C:\WINDOWS\SYSWOW64\WCN
2019-01-13 05:39:42 ----D---- C:\WINDOWS\SYSWOW64\sk-SK
2019-01-13 05:39:42 ----D---- C:\WINDOWS\SYSWOW64\sda
2019-01-13 05:39:42 ----D---- C:\WINDOWS\SYSWOW64\drivers
2019-01-13 05:39:42 ----D---- C:\WINDOWS\SYSWOW64\Atheros_L1e
2019-01-13 05:39:42 ----D---- C:\WINDOWS\system32\WCN
2019-01-13 05:39:42 ----D---- C:\WINDOWS\system32\spool
2019-01-13 05:39:42 ----D---- C:\WINDOWS\system32\sk-SK
2019-01-13 05:39:42 ----D---- C:\WINDOWS\system32\MRT
2019-01-13 05:39:42 ----D---- C:\WINDOWS\LiveKernelReports
2019-01-13 05:39:41 ----RD---- C:\Program Files (x86)
2019-01-13 05:39:41 ----D---- C:\WINDOWS\system32\Recovery
2019-01-13 05:39:41 ----D---- C:\Program Files\Intel
2019-01-13 05:39:41 ----D---- C:\Program Files\CONEXANT
2019-01-13 05:39:41 ----D---- C:\Program Files\Common Files\microsoft shared
2019-01-13 05:39:41 ----D---- C:\Program Files\Common Files
2019-01-13 05:39:41 ----D---- C:\Program Files (x86)\Microsoft.NET
2019-01-13 05:39:41 ----D---- C:\Program Files (x86)\Common Files
2019-01-13 05:39:32 ----D---- C:\WINDOWS\Setup
2019-01-13 05:36:28 ----D---- C:\WINDOWS\SYSWOW64\winrm
2019-01-13 05:36:26 ----D---- C:\WINDOWS\SYSWOW64\slmgr
2019-01-13 05:36:26 ----D---- C:\WINDOWS\SYSWOW64\Printing_Admin_Scripts
2019-01-13 05:36:26 ----D---- C:\WINDOWS\SYSWOW64\IME
2019-01-13 05:36:20 ----D---- C:\WINDOWS\system32\winrm
2019-01-13 05:36:17 ----D---- C:\WINDOWS\system32\slmgr
2019-01-13 05:36:17 ----D---- C:\WINDOWS\system32\Printing_Admin_Scripts
2019-01-13 05:36:16 ----D---- C:\WINDOWS\system32\IME
2019-01-13 05:35:43 ----D---- C:\WINDOWS\PolicyDefinitions
2019-01-13 05:35:28 ----D---- C:\Program Files (x86)\Windows Mail
2019-01-13 05:35:26 ----D---- C:\Program Files\Windows Mail
2019-01-13 05:35:25 ----D---- C:\Program Files\Synaptics
2019-01-13 05:35:25 ----D---- C:\Program Files\Common Files\system
2019-01-13 05:08:50 ----D---- C:\WINDOWS\SYSWOW64\MUI
2019-01-13 05:08:50 ----D---- C:\WINDOWS\system32\MUI
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\zh-TW
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\uk-UA
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\tr-TR
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\th-TH
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\sv-SE
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\sr-Latn-RS
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\sl-SI
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\ru-RU
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\ro-RO
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\pt-PT
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\pt-BR
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\pl-PL
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\nb-NO
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\lv-LV
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\lt-LT
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\ko-KR
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\ja-JP
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\it-IT
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\hu-HU
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\hr-HR
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\he-IL
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\fr-FR
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\fr-CA
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\fi-FI
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\et-EE
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\es-MX
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\es-ES
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\en-GB
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\el-GR
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\de-DE
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\da-DK
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\bg-BG
2019-01-13 05:06:56 ----D---- C:\WINDOWS\SYSWOW64\ar-SA
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\zh-TW
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\uk-UA
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\tr-TR
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\th-TH
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\sv-SE
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\sr-Latn-RS
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\sl-SI
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\ru-RU
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\ro-RO
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\pt-PT
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\pt-BR
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\pl-PL
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\nl-NL
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\nb-NO
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\lv-LV
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\lt-LT
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\ko-KR
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\ja-jp
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\it-IT
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\hu-HU
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\hr-HR
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\he-IL
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\fr-FR
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\fr-CA
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\fi-FI
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\et-EE
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\es-MX
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\es-ES
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\en-GB
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\el-GR
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\de-DE
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\da-DK
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\bg-BG
2019-01-13 05:06:56 ----D---- C:\WINDOWS\system32\ar-SA
2019-01-09 09:29:10 ----AC---- C:\WINDOWS\system32\MRT.exe
2019-01-07 10:37:20 ----D---- C:\Windows10Upgrade
2019-01-02 20:41:40 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswArDisk;aswArDisk; C:\WINDOWS\system32\drivers\aswArDisk.sys [2019-01-22 37304]
R0 aswbidsh;aswbidsh; C:\WINDOWS\system32\drivers\aswbidsh.sys [2019-01-22 196264]
R0 aswblog;aswblog; C:\WINDOWS\system32\drivers\aswblog.sys [2019-01-22 320888]
R0 aswbuniv;aswbuniv; C:\WINDOWS\system32\drivers\aswbuniv.sys [2019-01-22 58160]
R0 aswElam;aswElam; C:\WINDOWS\system32\drivers\aswElam.sys [2019-01-22 15488]
R0 aswRvrt;aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [2019-01-22 88144]
R0 aswVmm;aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [2019-01-22 380144]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-09-02 647736]
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys [2018-04-12 58272]
R0 LHDmgr;LHDmgr; C:\WINDOWS\System32\DRIVERS\LhdX64.sys [2013-12-24 39008]
R0 SgrmAgent;@%SystemRoot%\System32\Drivers\SgrmAgent.sys,-1001; C:\WINDOWS\system32\drivers\SgrmAgent.sys [2018-04-12 63896]
R1 afunix;afunix; C:\WINDOWS\system32\drivers\afunix.sys [2018-04-12 39424]
R1 aswArPot;aswArPot; C:\WINDOWS\system32\drivers\aswArPot.sys [2019-01-22 203488]
R1 aswbidsdriver;aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdriver.sys [2019-01-23 220688]
R1 aswHdsKe;aswHdsKe; C:\WINDOWS\system32\drivers\aswHdsKe.sys [2019-01-22 239808]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2019-01-22 42488]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2019-01-22 111992]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2019-01-22 1034056]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2019-01-22 474648]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys [2018-04-12 60320]
R1 CFRMD;CFRMD; C:\WINDOWS\system32\DRIVERS\CFRMD.sys [2014-12-25 40224]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\WINDOWS\System32\DRIVERS\cmderd.sys [2018-05-23 44056]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\system32\DRIVERS\cmdguard.sys [2018-05-23 832032]
R1 cmdhlp;COMODO Internet Security Helper Driver; C:\WINDOWS\system32\DRIVERS\cmdhlp.sys [2018-05-23 50768]
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys [2018-04-12 55808]
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [2018-04-12 8192]
R1 inspect;@oem9.inf,%inspect_Desc%;COMODO Internet Security Firewall Driver; C:\WINDOWS\system32\DRIVERS\inspect.sys [2018-05-23 134400]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2019-01-23 166792]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2019-01-22 218056]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys [2018-04-12 414208]
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys [2018-04-12 43520]
R3 ACPIVPC;@oem23.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2013-12-24 33560]
R3 bcbtums;@oem21.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2015-10-12 227144]
R3 BCM43XX;@netbc64.inf,%BCM43XX_Service_DispName%;Broadcom 802.11 – ovladač síťového adaptéru; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys [2018-04-12 7585280]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2018-04-12 106496]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Ovladač úspory energie technologie Bluetooth; C:\WINDOWS\system32\DRIVERS\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [2018-04-12 86528]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2018-04-12 129536]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\drivers\BTHUSB.sys [2018-04-12 85504]
R3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\WINDOWS\System32\drivers\CAD.sys [2018-04-12 60320]
R3 CnxtHdAudService;@oem7.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Conexant UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDRT64.sys [2015-08-05 1317096]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2016-05-03 3811288]
R3 IntcDAud;@oem32.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2015-08-21 463112]
R3 iwdbus;@oem14.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2015-12-01 38896]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller; C:\WINDOWS\System32\drivers\L1C63x64.sys [2018-04-12 121344]
R3 MEIx64;@oem19.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-03 62784]
R3 Microsoft_Bluetooth_AvrcpTransport;@microsoft_bluetooth_avrcptransport.inf,%Microsoft_Bluetooth_AvrcpTransport.ServiceDescription%;Ovladač přenosů Avrcp protokolu Microsoft Bluetooth; C:\WINDOWS\system32\DRIVERS\Microsoft.Bluetooth.AvrcpTransport.sys [2018-04-12 46592]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2018-04-12 193536]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2015-06-03 42696]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys [2018-04-12 38304]
S0 cmdboot;COMODO Early Launch Driver; C:\WINDOWS\System32\DRIVERS\cmdboot.sys [2018-05-23 17944]
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys [2018-04-12 321432]
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\WINDOWS\System32\drivers\iaStorAVC.sys [2018-04-12 885144]
S0 ItSas35i;ItSas35i; C:\WINDOWS\System32\drivers\ItSas35i.sys [2018-04-12 145816]
S0 LSI_SAS2i;LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [2018-04-12 124312]
S0 LSI_SAS3i;LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [2018-04-12 128408]
S0 megasas2i;megasas2i; C:\WINDOWS\System32\drivers\MegaSas2i.sys [2018-04-12 75160]
S0 megasas35i;megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys [2018-04-12 82328]
S0 percsas2i;percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [2018-04-12 58776]
S0 percsas3i;percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [2018-04-12 61848]
S0 Ramdisk;Windows RAM Disk Driver; C:\WINDOWS\system32\DRIVERS\ramdisk.sys [2018-04-12 39840]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\WINDOWS\System32\drivers\scmbus.sys [2018-04-12 128416]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\WINDOWS\System32\drivers\AcpiDev.sys [2018-04-12 20480]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\WINDOWS\system32\drivers\applockerfltr.sys [2018-04-12 18432]
S3 aswHwid;aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [2019-01-22 46584]
S3 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\WINDOWS\system32\drivers\bindflt.sys [2018-04-12 92056]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\drivers\BTHport.sys [2018-04-12 1069056]
S3 btwampfl;@oem21.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2015-10-12 234800]
S3 buttonconverter;@buttonconverter.inf,%btnconv.SvcDesc%;Service for Portable Device Control devices; C:\WINDOWS\System32\drivers\buttonconverter.sys [2018-04-12 39936]
S3 CapImg;@capimg.inf,%CapImgHid_Service%;HID driver for CapImg touch screen; C:\WINDOWS\System32\drivers\capimg.sys [2018-04-12 123392]
S3 genericusbfn;@genericusbfn.inf,%genericusbfn.ServiceName%;Generic USB Function Class; C:\WINDOWS\System32\drivers\genericusbfn.sys [2018-04-12 20992]
S3 hidinterrupt;@hidinterrupt.inf,%HID_Interrupt.SvcDesc%;Common Driver for HID Buttons implemented with interrupts; C:\WINDOWS\System32\drivers\hidinterrupt.sys [2018-04-12 50592]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\WINDOWS\system32\drivers\hvservice.sys [2018-04-12 73632]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\WINDOWS\System32\Drivers\mshwnclx.sys [2018-04-12 27136]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\WINDOWS\System32\drivers\cht4vx64.sys [2018-04-12 1836952]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\WINDOWS\System32\drivers\iagpio.sys [2018-04-12 36864]
S3 iai2c;@iai2c.inf,%iai2c.SVCDESC%;Intel(R) Serial IO I2C Host Controller; C:\WINDOWS\System32\drivers\iai2c.sys [2018-04-12 91648]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [2018-04-12 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2018-04-12 88576]
S3 iaLPSS2i_I2C;@iaLPSS2i_I2C_SKL.inf,%iaLPSS2i_I2C.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [2018-04-12 171520]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2018-04-12 174592]
S3 ibbus;@mlx4_bus.inf,%Ibbus.ServiceDesc%;Mellanox InfiniBand Bus/AL (Filter Driver); C:\WINDOWS\System32\drivers\ibbus.sys [2018-04-12 526232]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\WINDOWS\System32\drivers\IndirectKmd.sys [2018-04-12 38912]
S3 IPT;IPT; C:\WINDOWS\System32\drivers\ipt.sys [2018-04-12 32256]
S3 irda;IrDA; C:\WINDOWS\system32\drivers\irda.sys [2018-04-12 119808]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\WINDOWS\System32\drivers\mausbhost.sys [2018-04-12 505240]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\WINDOWS\System32\drivers\mausbip.sys [2018-04-12 56736]
S3 MBAMSwissArmy;MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [2018-07-12 253664]
S3 mlx4_bus;@mlx4_bus.inf,%MLX4BUS.ServiceDesc%;Mellanox ConnectX Bus Enumerator; C:\WINDOWS\System32\drivers\mlx4_bus.sys [2018-04-12 842648]
S3 ndfltr;@mlx4_bus.inf,%ndfltr.ServiceDesc%;NetworkDirect Service; C:\WINDOWS\System32\drivers\ndfltr.sys [2018-04-12 108952]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\WINDOWS\system32\drivers\NetAdapterCx.sys [2018-04-12 175104]
S3 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\WINDOWS\System32\drivers\nvdimm.sys [2018-04-12 104448]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\WINDOWS\System32\drivers\pmem.sys [2018-04-12 105984]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\WINDOWS\System32\drivers\pnpmem.sys [2018-04-12 16896]
S3 ReFSv1;ReFSv1; C:\WINDOWS\system32\drivers\ReFSv1.sys [2018-04-12 945560]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\WINDOWS\System32\drivers\rhproxy.sys [2018-04-12 104448]
S3 RSUSBVSTOR;@oem13.inf,%RSUSBVSTOR.SvcDesc%;RtsUVStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUVStor.sys [2012-06-15 315536]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\WINDOWS\System32\drivers\SDFRd.sys [2018-04-12 33176]
S3 SpatialGraphFilter;Holographic Spatial Graph Filter; C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys [2018-04-12 57752]
S4 hvcrash;hvcrash; C:\WINDOWS\System32\drivers\hvcrash.sys [2018-04-12 33184]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 BcmBtRSupport;@oem21.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2015-10-12 2297104]
R2 CDPSvc;@%SystemRoot%\system32\cdpsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 CDPUserSvc_3239b;CDPUserSvc_3239b; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 ClickToRunSvc;Služba Microsoft Office Klikni a spusť; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2018-11-02 9669920]
R2 CmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2018-06-18 10815296]
R2 CoreMessagingRegistrar;@%SystemRoot%\system32\coremessaging.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 CxAudMsg;@C:\WINDOWS\system32\CxAudMsg64.exe,-100; C:\WINDOWS\system32\CxAudMsg64.exe [2013-07-25 206552]
R2 DiagTrack;@%SystemRoot%\system32\diagtrack.dll,-3001; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2016-05-03 337888]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
R2 OneSyncSvc_3239b;OneSyncSvc_3239b; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R2 SecurityHealthService;@%systemroot%\system32\SecurityHealthAgent.dll,-1002; C:\WINDOWS\system32\SecurityHealthService.exe [2018-04-12 761440]
R2 sedsvc;Windows Remediation Service; C:\Program Files\rempl\sedsvc.exe [2019-01-11 325432]
R2 SgrmBroker;@%SystemRoot%\System32\SgrmBroker.exe,-100; C:\WINDOWS\system32\SgrmBroker.exe [2018-04-12 163336]
R3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
R3 DoSvc;@%systemroot%\system32\dosvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R3 LicenseManager;@%SystemRoot%\system32\licensemanagersvc.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
R3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2019-01-22 357816]
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-05-24 153168]
S2 MapsBroker;@%SystemRoot%\System32\moshost.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S2 OneSyncSvc;@%SystemRoot%\system32\APHostRes.dll,-10002; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S2 SAService;Conexant SmartAudio service; C:\WINDOWS\system32\SAsrv.exe []
S3 AJRouter;@%SystemRoot%\system32\AJRouter.dll,-2; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 aswbIDSAgent;aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [2019-01-22 7834368]
S3 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BcastDVRUserService_3239b;BcastDVRUserService_3239b; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 BluetoothUserService_3239b;BluetoothUserService_3239b; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 ClipSVC;@%SystemRoot%\system32\ClipSVC.dll,-103; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 cmdvirth;COMODO Virtual Service Manager; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2018-06-18 2876096]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2016-05-03 299488]
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicePickerUserSvc_3239b;DevicePickerUserSvc_3239b; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevicesFlowUserSvc_3239b;DevicesFlowUserSvc_3239b; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DevQueryBroker;@%SystemRoot%\system32\DevQueryBroker.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 diagnosticshub.standardcollector.service;@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [2018-04-12 90624]
S3 diagsvc;@%systemroot%\system32\DiagSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 DmEnrollmentSvc;@%systemroot%\system32\Windows.Internal.Management.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 dmwappushservice;@%SystemRoot%\system32\dmwappushsvc.dll,-200; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 DsSvc;@%SystemRoot%\system32\dssvc.dll,-10003; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 embeddedmode;@%SystemRoot%\system32\embeddedmodesvc.dll,-201; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 EntAppSvc;@EnterpriseAppMgmtSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2019-01-13 43648]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-05-24 153168]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2018-05-24 194032]
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 icssvc;@%SystemRoot%\System32\tetheringservice.dll,-4097; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 InstallService;@%SystemRoot%\system32\InstallService.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MessagingService;@%SystemRoot%\system32\MessagingService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 MessagingService_3239b;MessagingService_3239b; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 NetSetupSvc;@%SystemRoot%\system32\NetSetupSvc.dll,-3; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 NgcCtnrSvc;@%SystemRoot%\System32\NgcCtnrSvc.dll,-1; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 NgcSvc;@%SystemRoot%\System32\ngcsvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 ose64;Office 64 Source Engine; c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2018-10-24 259368]
S3 PhoneSvc;@%SystemRoot%\system32\PhoneserviceRes.dll,-10000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PimIndexMaintenanceSvc;@%SystemRoot%\system32\UserDataAccessRes.dll,-15001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PimIndexMaintenanceSvc_3239b;PimIndexMaintenanceSvc_3239b; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PrintWorkflowUserSvc_3239b;PrintWorkflowUserSvc_3239b; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 RetailDemo;@%SystemRoot%\System32\RDXService.dll,-256; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]
S3 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 SensorDataService;@%SystemRoot%\system32\SensorDataService.exe,-101; C:\WINDOWS\System32\SensorDataService.exe [2018-04-12 1273344]
S3 SensorService;@%SystemRoot%\System32\sensorservice.dll,-1000; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 SharedRealitySvc;@%SystemRoot%\system32\SharedRealitySvc.dll,-100; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S3 SmsRouter;@%SystemRoot%\System32\SmsRouterSvc.dll,-10001; C:\WINDOWS\system32\svchost.exe [2018-04-12 51288]
S4 shpamsvc;@%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100; C:\WINDOWS\System32\svchost.exe [2018-04-12 51288]

-----------------EOF-----------------

Zdravím!
Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

# -------------------------------
# Malwarebytes AdwCleaner 7.2.6.0
# -------------------------------
# Build: 12-18-2018
# Database: 2019-01-21.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 01-23-2019
# Duration: 00:00:08
# OS: Windows 10 Home
# Cleaned: 5
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\rei

***** [ Files ] *****

Deleted C:\Users\pc\AppData\Local\Temp\ReimagePackage.exe
Deleted C:\Windows\Reimage.ini

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKLM\Software\Reimage
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Reimage Repair

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************


AdwCleaner[S02].txt - [1739 octets] - [23/01/2019 14:39:13]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C02].txt ##########

OK. Teď dejte logy FRST a Addition: https://forum.viry.cz/viewtopic.php?f=13&t=154679 .

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20.01.2019
Ran by pc (23-01-2019 16:25:56)
Running from C:\Users\pc\AppData\Local\Microsoft\Windows\INetCache\IE\N9057YJ9
Windows 10 Home Version 1803 17134.523 (X64) (2019-01-13 05:14:58)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2601864178-3848914015-3132111734-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2601864178-3848914015-3132111734-503 - Limited - Disabled)
Guest (S-1-5-21-2601864178-3848914015-3132111734-501 - Limited - Disabled)
pc (S-1-5-21-2601864178-3848914015-3132111734-1001 - Administrator - Enabled) => C:\Users\pc
WDAGUtilityAccount (S-1-5-21-2601864178-3848914015-3132111734-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: COMODO Firewall (Enabled) {3083CA8D-8618-5BD3-8A5F-9667D5C8267D}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent CZ 1.8.5 (build 17091) (HKLM-x32\...\µTorrent CZ_is1) (Version: - emc)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 30.0.0.107 - Adobe Systems Incorporated)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.7 - Atheros Communications Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 19.1.2360 - AVAST Software)
Balíček ovladače systému Windows - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia)
CCleaner (HKLM\...\CCleaner) (Version: 5.46 - Piriform)
COMODO Firewall (HKLM\...\{C10F36A6-C6A4-4027-9219-25E273B751E1}) (Version: 11.0.0.6606 - COMODO Security Solutions Inc.) Hidden
COMODO Firewall (HKLM\...\COMODO Internet Security) (Version: 11.0.0.6606 - COMODO Security Solutions Inc.)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.66.16.50 - Conexant)
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.8000.16 - Dolby Laboratories Inc)
Dolby Digital Plus Advanced Audio (HKLM\...\{B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}) (Version: 7.6.5.1 - Dolby Laboratories Inc)
Energy Management (HKLM-x32\...\{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 8.0.2.5 - Lenovo) Hidden
Energy Management (HKLM-x32\...\InstallShield_{D0956C11-0F60-43FE-99AD-524E833471BB}) (Version: 8.0.2.5 - Lenovo)
GetDataBack Simple version 5.00 (HKLM-x32\...\{D06B8000-52B4-4D0B-A003-DA83ED982B51}_is1) (Version: 5.00 - Runtime Software, LLC)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.107 - Google Inc.) Hidden
Charity Engine (HKLM\...\{A7D31CBC-80AF-4E68-83D7-20D01917C034}) (Version: 7.6.33 - Charity Engine)
ICQ (verze 10.0.12341) (HKU\S-1-5-21-2601864178-3848914015-3132111734-1001\...\icq.desktop) (Version: 10.0.12341 - ICQ)
ICQ 5.1 (HKLM-x32\...\ICQLite) (Version: - )
Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33057) (Version: 3.6.1.33057.10 - Intel)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2828 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.6.0.1030 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Lenovo Bluetooth with Enhanced Data Rate Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.4300 - Broadcom Corporation)
Lenovo EasyCamera (HKLM-x32\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0332}) (Version: 3.15.0414.1 - Vimicro)
Lenovo OneKey Recovery (HKLM\...\{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.1219 - CyberLink Corp.) Hidden
Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.1219 - CyberLink Corp.)
Lenovo PowerDVD10 (HKLM-x32\...\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4310.52 - CyberLink Corp.) Hidden
Lenovo PowerDVD10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4310.52 - CyberLink Corp.)
Lenovo Solution Center (HKLM\...\{1E939186-B443-4262-A278-3C82949EA7AC}) (Version: 1.1.009.00 - Lenovo Group Limited)
Lenovo YouCam (HKLM-x32\...\{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3127 - CyberLink Corp.) Hidden
Lenovo YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 4.1.3127 - CyberLink Corp.)
Lenovo_Wireless_Driver (HKLM-x32\...\{5D642A72-8194-4A22-80DA-11FE610CCA8E}) (Version: 6.30.5926 - Lenovo)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2601864178-3848914015-3132111734-1001\...\OneDriveSetup.exe) (Version: 18.240.1202.0004 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MSVC80_x64_v2 (HKLM\...\{4D668D4F-FAA2-4726-834C-31F4614F312E}) (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (HKLM-x32\...\{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}) (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (HKLM\...\{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}) (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (HKLM-x32\...\{AF111648-99A1-453E-81DD-80DBBF6DAD0D}) (Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Nokia Connectivity Cable Driver (HKLM-x32\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia)
Nokia Suite (HKLM-x32\...\{0C808377-8C23-44ED-9016-05F42E6D4900}) (Version: 3.8.30.0 - Nokia) Hidden
Nokia Suite (HKLM-x32\...\Nokia Suite) (Version: 3.8.30.0 - Nokia)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.11001.20108 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.11001.20108 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0405-1000-0000000FF1CE}) (Version: 16.0.11001.20108 - Microsoft Corporation) Hidden
OLYMPUS Master 2 (HKLM-x32\...\{CB49B376-1136-44B4-83FA-036334B59937}) (Version: 1.0.2 - OLYMPUS IMAGING CORP.)
Opera 9.10 (HKLM-x32\...\{750B9AD1-4C63-4143-94C5-6FB304199BAD}) (Version: 9.10 - Opera Software ASA)
Oracle VM VirtualBox 5.2.6 (HKLM\...\{EA9602E3-0184-45B9-9E15-028776CD7A6E}) (Version: 5.2.6 - Oracle Corporation)
osrss (HKLM-x32\...\{1BA1133B-1C7A-41A0-8CBF-9B993E63D296}) (Version: 1.0.0 - Microsoft Corporation) Hidden
PC Connectivity Solution (HKLM-x32\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia)
Pomocník s aktualizací Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22617 - Microsoft Corporation)
Power2Go (HKLM-x32\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 5.6.0.9109 - CyberLink Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.61.90905 - SugarSync, Inc.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.9.5 - Synaptics Incorporated)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{F814D094-197F-43C8-87FA-3210BB780486}) (Version: 2.53.0.0 - Microsoft Corporation)
UpdateAssistant (HKLM\...\{EC4F72E8-52FE-454E-B70F-DBE5C0FA44C5}) (Version: 1.20.0.0 - Microsoft Corporation) Hidden
UserGuide (HKLM-x32\...\{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.9 - Lenovo) Hidden
UserGuide (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 1.0.0.9 - Lenovo)
VueScan (HKLM-x32\...\VueScan) (Version: - )
WiFi Channel Scanner (HKLM-x32\...\{276ABF19-EB0A-49DA-9C17-72A99384596C}_is1) (Version: - wifichannelscanner.com)
Windows Driver Package - Lenovo (ACPIVPC) System (06/15/2012 8.1.0.1) (HKLM\...\71BC3FD63F450BA0A957AAECBDB4A000C4F2BE42) (Version: 06/15/2012 8.1.0.1 - Lenovo)
Windows Driver Package - Lenovo (WUDFRd) LenovoVhid (06/19/2012 10.13.29.733) (HKLM\...\8A223E56FB1ED4F697B54E5BF96F1EB63B512684) (Version: 06/19/2012 10.13.29.733 - Lenovo)
Windows Setup Remediations (x64) (KB4023057) (HKLM\...\{5534e02f-0f5d-40dd-ba92-bea38d22384d}.sdb) (Version: - )

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2601864178-3848914015-3132111734-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-01-22] (AVAST Software)
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-01-22] (AVAST Software)
ContextMenuHandlers1: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2018-06-18] (COMODO)
ContextMenuHandlers1-x32: [ICQLiteMenu] -> {73B24247-042E-4EF5-ADC2-42F62E6FD654} => C:\Program Files (x86)\ICQLite\ICQLiteShell.dll [2006-07-27] ()
ContextMenuHandlers1-x32: [SugarSync] -> {305BC11B-5175-492B-B569-866547FCDA40} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)
ContextMenuHandlers2: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2018-06-18] (COMODO)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-01-22] (AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => -> No File
ContextMenuHandlers4-x32: [ICQLiteMenu] -> {73B24247-042E-4EF5-ADC2-42F62E6FD654} => C:\Program Files (x86)\ICQLite\ICQLiteShell.dll [2006-07-27] ()
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2016-05-03] (Intel Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-01-22] (AVAST Software)
ContextMenuHandlers6: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2018-06-18] (COMODO)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => -> No File
ContextMenuHandlers6: [SugarSync] -> {305BC11B-5175-492B-B569-866547FCDA40} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-05-14] (SugarSync, Inc.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {05271C34-8390-45CE-AC41-99000A1B283A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-05-24] (Google Inc.)
Task: {0596C22C-769F-4D57-9DC1-B4B64043CB61} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1812.3-0\MpCmdRun.exe [2019-01-23] (Microsoft Corporation)
Task: {0DA1B43D-B7F1-4ADD-92F9-8C0D2FA97AE4} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\WINDOWS\system32\NotificationUI.exe
Task: {14B58674-2CEB-4387-93DF-F46973D7E00F} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2018-06-18] (COMODO)
Task: {1BAB753C-B00F-4648-A353-BE08BC30A95E} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2012-08-09] ()
Task: {2971C7ED-B532-426A-8C00-6B9D53B485CD} - System32\Tasks\S-1-5-21-2601864178-3848914015-3132111734-1001\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe [2019-01-13] (Microsoft Corporation)
Task: {29A95657-B796-43EA-8903-8770D95246F5} - System32\Tasks\Opera scheduled Autoupdate 1540403141 => C:\Users\pc\AppData\Local\Programs\Opera\launcher.exe
Task: {3DC1EBCC-5156-4991-82EA-A7645BA65540} - System32\Tasks\COMODO\COMODO Maintenance {947247B5-026A-4437-9371-770782BE839D} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2018-06-18] (COMODO)
Task: {471F3691-AD02-41F1-AD0E-521EEAE9CFA8} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-09-10] (Piriform Ltd)
Task: {49C26A9B-E81E-4EFF-BDCE-C2E04963CE80} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-05-24] (Google Inc.)
Task: {510C9AAE-4396-4C5A-8497-899B859379BB} - System32\Tasks\McAfee Remediation (Prepare) => C:\Program Files\Common Files\AV\McAfee VirusScan\upgrade.exe [2018-03-13] (McAfee, Inc.)
Task: {51A52C36-12A3-4FE9-A57D-75D41E23EEEE} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-11-26] (Microsoft Corporation)
Task: {55DF8387-2277-4D5E-BF1B-CA3A0609EFA9} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-11-26] (Microsoft Corporation)
Task: {568BD4F8-9F88-4AB3-B43D-EBCEB27E958F} - System32\Tasks\Opera scheduled Autoupdate 1527710218 => C:\Program Files\Opera\launcher.exe
Task: {5D15A0C1-F937-42C9-AFBA-60F7DCB35851} - System32\Tasks\Lenovo\LSC\Time72Task => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2012-08-09] ()
Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] ()
Task: {71F59E17-8DDC-4C6E-ABB8-0233250DB17E} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [2018-11-26] (Microsoft Corporation)
Task: {81231EBE-4AE1-46E5-88B8-6A20776B0A9C} - System32\Tasks\Lenovo\LSC\RebootCountTask => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2012-08-09] ()
Task: {88233459-9705-43A2-BB36-C5770CC980D3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1812.3-0\MpCmdRun.exe [2019-01-23] (Microsoft Corporation)
Task: {88F76229-E0EE-46F1-BBFB-2B9023CC155D} - System32\Tasks\COMODO\COMODO CMC {06A09C0F-DD9C-4191-A670-71115CD78627} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2018-06-18] (COMODO)
Task: {8D63DB06-CDED-44A9-A6DA-8AFD42F5726D} - System32\Tasks\MirageAgent => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-07-27] (CyberLink)
Task: {90FDCBE4-E6E2-4C65-B8F8-89281E820064} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [2019-01-22] (AVAST Software)
Task: {9324EB5C-B7F8-4973-BCFE-F4FC9DFDBF9D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1812.3-0\MpCmdRun.exe [2019-01-23] (Microsoft Corporation)
Task: {AA463E37-A6DC-41F0-82CE-7365C845B587} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [2018-06-18] (COMODO)
Task: {B08E2D9A-AC03-4FEE-9882-EF5EF2FF966B} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-11-02] (Microsoft Corporation)
Task: {B1DC1B0F-6D50-4DEA-896C-1562A828BECD} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\lsc.exe [2012-08-09] ()
Task: {B22BFDB5-9DA7-4875-BEF7-A948030FDDFA} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2012-08-09] (Lenovo)
Task: {B2447BD9-9AC5-4477-918E-E4179E28EFEA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-09-10] (Piriform Ltd)
Task: {B4767ACC-6BD7-4290-BFC3-A2BEA56FFE8B} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2018-06-18] (COMODO)
Task: {C99A9767-64E7-44E7-8EE4-4A6898504A28} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK
Task: {CFE219FA-0DA3-4DF4-95E8-F1B94E262973} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2019-01-22] (AVAST Software)
Task: {DFC41491-7B62-4073-B1D7-0995E6F7E716} - System32\Tasks\Synaptics TouchPad Enhancements => Program Files\Synaptics\SynTP\SynTPEnh.exe
Task: {ECFEF69F-1009-4C62-95E6-14DCD984F751} - System32\Tasks\COMODO\COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe [2018-06-18] (COMODO)
Task: {EFE40FE8-344A-40DD-B194-9D99C6B68BEE} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [2018-11-26] (Microsoft Corporation)
Task: {F14FCB78-091C-4F64-B810-7B52153B53C2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1812.3-0\MpCmdRun.exe [2019-01-23] (Microsoft Corporation)
Task: {F6F1F4B0-714B-4E9E-8608-D6BAD0A36E6B} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-11-02] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2018-04-12 00:34 - 2018-04-12 00:34 - 000491744 _____ () C:\Windows\System32\InputHost.dll
2018-06-18 22:45 - 2018-06-18 22:45 - 000158912 _____ () C:\Program Files\COMODO\COMODO Internet Security\cmdwrhlp.dll
2018-06-18 22:43 - 2018-06-18 22:43 - 000107200 _____ () C:\Program Files\COMODO\COMODO Internet Security\cavwpps.dll
2018-06-18 22:44 - 2018-06-18 22:44 - 000245952 _____ () C:\Program Files\COMODO\COMODO Internet Security\cmdcomps.dll
2018-04-12 00:34 - 2018-04-12 00:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 002759680 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll
2019-01-13 18:57 - 2019-01-01 07:42 - 002185728 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2019-01-13 14:51 - 2019-01-13 14:51 - 000182272 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.36.52.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
2019-01-13 14:51 - 2019-01-13 14:51 - 000019456 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.36.52.0_x64__kzf8qxf38zg5c\SkypeProxiesAndStubs.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 008507232 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtGui4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 002354016 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtCore4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 001014624 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtNetwork4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 000364384 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtXml4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 002480992 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtDeclarative4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 001346912 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtScript4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 000206176 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtSql4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 002653024 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtXmlPatterns4.dll
2013-04-19 00:45 - 2013-04-19 00:45 - 000033120 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\imageformats\qgif4.dll
2013-04-19 00:45 - 2013-04-19 00:45 - 000035680 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\imageformats\qico4.dll
2013-04-19 00:45 - 2013-04-19 00:45 - 000207200 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\imageformats\qjpeg4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 011166560 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtWebKit4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 000276832 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\phonon4.dll
2013-04-15 12:26 - 2013-04-15 12:26 - 000391600 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\ssoengine.dll
2013-04-15 12:26 - 2013-04-15 12:26 - 000059280 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\securestorage.dll
2013-04-19 00:45 - 2013-04-19 00:45 - 000438624 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\NService.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 000446304 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\sqldrivers\qsqlite4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 000520544 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtMultimediaKit1.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 000720736 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtOpenGL4.dll
2013-04-19 00:44 - 2013-04-19 00:44 - 000606560 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\CommonUpdateChecker.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 000093024 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\qjson.dll
2013-12-24 01:11 - 2012-06-25 19:41 - 001198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


AlternateDataStreams: C:\Users\pc\Downloads\HomeTicket.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\pc\Downloads\HomeTicket.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\pc\Downloads\IE10-Setup-Seven32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\pc\Downloads\IE10-Setup-Seven32.exe:$CmdZnID [29]
AlternateDataStreams: C:\Users\pc\Downloads\podklady_zadost_Konrad.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\pc\Downloads\Windows10Upgrade28084.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\pc\Downloads\Windows10Upgrade28084.exe:$CmdZnID [26]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2012-07-26 06:26 - 2019-01-23 14:00 - 000000830 _____ C:\WINDOWS\system32\drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files (x86)\PC Connectivity Solution\;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Lenovo\Bluetooth Software\;C:\Program Files\Lenovo\Bluetooth Software\syswow64;C:\Program Files\RogueKiller;;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-2601864178-3848914015-3132111734-1001\Control Panel\Desktop\\Wallpaper -> C:\windows\Web\Wallpaper\Lenovo\LenovoWallPaper.jpg
DNS Servers: 62.129.50.20 - 85.135.32.100
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

HKLM\...\StartupApproved\Run32: => "mcui_exe"
HKLM\...\StartupApproved\Run32: => "ICQ Lite"
HKLM\...\StartupApproved\Run32: => "mcpltui_exe"
HKU\S-1-5-21-2601864178-3848914015-3132111734-1001\...\StartupApproved\Run: => "CCleaner Monitoring"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{35A7D861-57D3-4665-B9CB-51CA2A3DAA9B}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation)
FirewallRules: [UDP Query User{565F9CD6-D9A7-45D9-80AE-302367C57056}C:\program files\openshot video editor\launch.exe] => (Allow) C:\program files\openshot video editor\launch.exe No File
FirewallRules: [TCP Query User{4FAEAE9F-AD16-4EBE-AE1C-81D14AF3E974}C:\program files\openshot video editor\launch.exe] => (Allow) C:\program files\openshot video editor\launch.exe No File
FirewallRules: [UDP Query User{99C65F59-0A9C-49F2-8235-CCE4CBA90581}C:\program files (x86)\utorrent\utorrent.exe] => (Block) C:\program files (x86)\utorrent\utorrent.exe (BitTorrent, Inc.)
FirewallRules: [TCP Query User{F037A6EB-C98D-4399-97D8-6E195CB94A76}C:\program files (x86)\utorrent\utorrent.exe] => (Block) C:\program files (x86)\utorrent\utorrent.exe (BitTorrent, Inc.)
FirewallRules: [{E693824E-46A1-423A-8947-C338DBC1B298}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Ltd)
FirewallRules: [{E22BF124-CFD3-4ABF-98EA-18CAF4F36D58}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Ltd)
FirewallRules: [{5706FF27-F658-425C-B467-43522FE05C7A}] => (Allow) C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe (CyberLink Corp.)
FirewallRules: [{82D56001-0AD4-4F04-BE4C-2181A91ECD92}] => (Allow) C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD10.EXE (CyberLink Corp.)
FirewallRules: [{A3968A22-9F51-4277-B997-F666D36D98A9}] => (Allow) C:\Program Files (x86)\nokia\nokia suite\nokiasuite.exe (Nokia)
FirewallRules: [{421E010D-9208-48EF-A80E-1163AEE71321}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software)
FirewallRules: [{F5A485F8-366B-4C4B-93DD-A54BC3EC10CC}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software)

==================== Restore Points =========================

13-01-2019 14:29:02 Instalační služba modulů systému Windows
14-01-2019 23:20:48 Instalační služba modulů systému Windows
14-01-2019 23:22:51 Instalační služba modulů systému Windows
18-01-2019 17:43:15 Windows Update
22-01-2019 18:15:48 Operace obnovení

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/23/2019 03:46:02 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3002) (User: NT AUTHORITY)
Description: The performance counter explain text string value in the registry is not formatted correctly. The malformed string is 12241. The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.

Error: (01/23/2019 03:46:02 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.

Error: (01/23/2019 03:27:37 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program iexplore.exe verze 11.0.17134.1 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Zabezpečení a údržba.

ID procesu: 113c

Čas spuštění: 01d4b327bb0c55d0

Čas ukončení: 70

Cesta k aplikaci: C:\Program Files\internet explorer\iexplore.exe

ID hlášení: 379eeed8-0f18-47d5-bf8b-23177a1773e3

Úplný název balíčku s chybou:

ID aplikace související s balíčkem s chybou:

Error: (01/23/2019 03:22:23 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3002) (User: NT AUTHORITY)
Description: The performance counter explain text string value in the registry is not formatted correctly. The malformed string is 12241. The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.

Error: (01/23/2019 03:22:23 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.

Error: (01/23/2019 02:58:04 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.

Error: (01/23/2019 02:29:12 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program iexplore.exe verze 11.0.17134.1 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Zabezpečení a údržba.

ID procesu: b1c

Čas spuštění: 01d4b31f98d0bfa4

Čas ukončení: 75

Cesta k aplikaci: C:\Program Files\internet explorer\iexplore.exe

ID hlášení: 5f85b504-bda2-4957-bb40-85b2c90ae121

Úplný název balíčku s chybou:

ID aplikace související s balíčkem s chybou:

Error: (01/23/2019 02:18:03 PM) (Source: ESENT) (EventID: 490) (User: )
Description: taskhostw (2620,R,98) WebCacheLocal: Pokus o otevření souboru C:\Users\pc\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat pro čtení nebo zápis selhal. Došlo k systémové chybě 32 (0x00000020): Proces nemá přístup k souboru, neboť jej právě využívá jiný proces. . Operace otevření souboru selže a dojde k chybě -1032 (0xfffffbf8).


System errors:
=============
Error: (01/23/2019 03:45:07 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli NT AUTHORITY\LOCAL SERVICE (SID: S-1-5-19) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (01/23/2019 03:42:54 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli NT AUTHORITY\LOCAL SERVICE (SID: S-1-5-19) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (01/23/2019 03:27:42 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Avast Antivirus byla neočekávaně ukončena. Tento stav nastal již 5krát.

Error: (01/23/2019 03:20:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Služba Avast Antivirus byla neočekávaně ukončena. Tento stav nastal již 4krát.

Error: (01/23/2019 03:19:17 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Nastavení oprávnění specifické pro aplikaci neuděluje oprávnění Místní Aktivace pro serverovou aplikaci COM s identifikátorem CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
a APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
uživateli NT AUTHORITY\LOCAL SERVICE (SID: S-1-5-19) z adresy LocalHost (pomocí LRPC) běžící v kontejneru aplikací Není k dispozici – SID (Není k dispozici). Toto oprávnění zabezpečení lze změnit pomocí nástroje správy Služba komponent.

Error: (01/23/2019 03:02:19 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Avast Antivirus byla nečekaně ukončena. Stalo se to 3 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Spustit nakonfigurovaný program pro obnovení.

Error: (01/23/2019 03:01:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Avast Antivirus byla nečekaně ukončena. Stalo se to 2 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.

Error: (01/23/2019 03:01:14 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Avast Antivirus byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.


Windows Defender:
===================================
Date: 2019-01-23 10:55:24.023
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: Virus:DOS/EICAR_Test_File
ID: 2147519003
Závažnost: Vážné
Kategorie: Vir
Cesta: file:_C:\Users\pc\AppData\Local\Microsoft\Windows\INetCache\Low\IE\APJNAS2S\eicar[1].com;file:_C:\Users\pc\AppData\Local\Microsoft\Windows\INetCache\Low\IE\KWEZ1W3K\eicar[1].com
Původ zjišťování: Internet
Typ zjišťování: Konkrétní
Zdroj zjišťování: Ochrana v reálném čase
Uživatel: Lenovo-PC\pc
Název procesu: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Verze podpisu: AV: 1.283.3552.0, AS: 1.283.3552.0, NIS: 1.283.3552.0
Verze modulu: AM: 1.1.15500.2, NIS: 1.1.15500.2

Date: 2019-01-23 10:54:41.509
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: Virus:DOS/EICAR_Test_File
ID: 2147519003
Závažnost: Vážné
Kategorie: Vir
Cesta: file:_C:\Users\pc\AppData\Local\Microsoft\Windows\INetCache\Low\IE\APJNAS2S\eicar[1].com;file:_C:\Users\pc\AppData\Local\Microsoft\Windows\INetCache\Low\IE\KWEZ1W3K\eicar[1].com
Původ zjišťování: Internet
Typ zjišťování: Konkrétní
Zdroj zjišťování: Ochrana v reálném čase
Uživatel: Lenovo-PC\pc
Název procesu: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Verze podpisu: AV: 1.283.3552.0, AS: 1.283.3552.0, NIS: 1.283.3552.0
Verze modulu: AM: 1.1.15500.2, NIS: 1.1.15500.2

Date: 2019-01-23 10:54:40.390
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: Virus:DOS/EICAR_Test_File
ID: 2147519003
Závažnost: Vážné
Kategorie: Vir
Cesta: file:_C:\Users\pc\AppData\Local\Microsoft\Windows\INetCache\Low\IE\KWEZ1W3K\eicar[1].com
Původ zjišťování: Internet
Typ zjišťování: Konkrétní
Zdroj zjišťování: Ochrana v reálném čase
Uživatel: Lenovo-PC\pc
Název procesu: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Verze podpisu: AV: 1.283.3552.0, AS: 1.283.3552.0, NIS: 1.283.3552.0
Verze modulu: AM: 1.1.15500.2, NIS: 1.1.15500.2

Date: 2019-01-23 10:54:23.774
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: Virus:DOS/EICAR_Test_File
ID: 2147519003
Závažnost: Vážné
Kategorie: Vir
Cesta: file:_C:\Users\pc\AppData\Local\Microsoft\Windows\INetCache\Low\IE\KWEZ1W3K\eicar[1].com
Původ zjišťování: Internet
Typ zjišťování: Konkrétní
Zdroj zjišťování: Ochrana v reálném čase
Uživatel: Lenovo-PC\pc
Název procesu: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Verze podpisu: AV: 1.283.3552.0, AS: 1.283.3552.0, NIS: 1.283.3552.0
Verze modulu: AM: 1.1.15500.2, NIS: 1.1.15500.2

Date: 2019-01-23 10:53:52.469
Description:
Prohledávání Antivirová ochrana v programu Windows Defender zjistilo malware nebo jiný potenciálně nežádoucí software.
Další informace:
https://go.microsoft.com/fwlink/?linkid ... terprise=0
Název: Virus:DOS/EICAR_Test_File
ID: 2147519003
Závažnost: Vážné
Kategorie: Vir
Cesta: file:_C:\Users\pc\AppData\Local\Microsoft\Windows\INetCache\Low\IE\B8D047RI\eicar[1].com
Původ zjišťování: Internet
Typ zjišťování: Konkrétní
Zdroj zjišťování: Ochrana v reálném čase
Uživatel: Lenovo-PC\pc
Název procesu: C:\Program Files\internet explorer\iexplore.exe
Verze podpisu: AV: 1.283.3552.0, AS: 1.283.3552.0, NIS: 1.283.3552.0
Verze modulu: AM: 1.1.15500.2, NIS: 1.1.15500.2

Date: 2019-01-22 22:02:37.905
Description:
Funkce Ochrana v reálném čase u prohledávání Antivirová ochrana v programu Windows Defender zjistila chybu a došlo k jejímu selhání.
Funkce: Při přístupu
Kód chyby: 0x8007043c
Popis chyby: Tuto službu nelze spustit v nouzovém režimu.
Důvod: Antimalwarová ochrana přestala z neznámých důvodů fungovat. V některých případech lze tento problém vyřešit restartováním služby.

CodeIntegrity:
===================================

Date: 2019-01-23 16:22:12.022
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2019-01-23 16:02:33.988
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2019-01-23 15:54:08.245
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2019-01-23 15:44:39.715
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2019-01-23 15:44:28.864
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2019-01-23 15:31:18.728
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2019-01-23 15:21:44.747
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2019-01-23 15:03:21.513
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\guard64.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

==================== Memory info ===========================

Processor: Intel(R) Celeron(R) CPU 1005M @ 1.90GHz
Percentage of memory in use: 50%
Total physical RAM: 3961.77 MB
Available physical RAM: 1973.51 MB
Total Virtual: 7929.77 MB
Available Virtual: 5659.43 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:423.6 GB) (Free:258.93 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:22.63 GB) NTFS

\\?\Volume{d774ef43-8d46-4323-aedd-c1632eacb804}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.67 GB) NTFS
\\?\Volume{1936caad-d54e-4f30-995d-c04750113708}\ () (Fixed) (Total:0.44 GB) (Free:0.13 GB) NTFS
\\?\Volume{0a541b9c-c4f4-4e14-9275-c3ffd6063fe4}\ () (Fixed) (Total:0.44 GB) (Free:0.12 GB) NTFS
\\?\Volume{b1307f74-e87b-4a65-9d21-ad0395e9519a}\ (PBR_DRV) (Fixed) (Total:13.95 GB) (Free:2.47 GB) NTFS
\\?\Volume{d7d9c5b9-2874-493c-8dc8-70704f249990}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: F7456C97)

Partition: GPT.

==================== End of Addition.txt ============================

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20.01.2019
Ran by pc (administrator) on LENOVO-PC (23-01-2019 16:22:51)
Running from C:\Users\pc\AppData\Local\Microsoft\Windows\INetCache\IE\N9057YJ9
Loaded Profiles: pc (Available Profiles: pc)
Platform: Windows 10 Home Version 1803 17134.523 (X64) Language: Čeština (Česko)
Default browser not detected!
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.36.52.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Charity Engine) C:\Program Files\BOINC\boinctray.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(OLYMPUS IMAGING CORP.) C:\Program Files (x86)\OLYMPUS\OLYMPUS Master 2\MMonitor.exe
(Nokia) C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1812.3-0\MsMpEng.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1812.3-0\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Charity Engine) C:\Program Files\BOINC\charityengine.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17079376 2013-12-24] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191568 2013-12-24] (Lenovo(beijing) Limited)
HKLM\...\Run: [boinctray] => C:\Program Files\BOINC\boinctray.exe [69952 2018-01-19] (Charity Engine)
HKLM\...\Run: [boincmgr] => C:\Program Files\BOINC\charityengine.exe [8662848 2018-01-19] (Charity Engine)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [935104 2014-11-25] (Conexant Systems, Inc.)
HKLM\...\Run: [COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1585344 2018-06-18] (COMODO)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830616 2014-04-10] (Conexant Systems, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-06-03] (Synaptics Incorporated)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [508656 2019-01-13] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2012-07-27] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [167024 2012-07-27] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-19] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-29] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [ICQ Lite] => C:\Program Files (x86)\ICQLite\ICQLite.exe [3142236 2006-07-27] (ICQ Ltd.)
HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [561672 2015-06-12] (Vimicro)
HKU\S-1-5-21-2601864178-3848914015-3132111734-1001\...\Run: [OM2_Monitor] => C:\Program Files (x86)\OLYMPUS\OLYMPUS Master 2\MMonitor.exe [95800 2007-02-08] (OLYMPUS IMAGING CORP.)
HKU\S-1-5-21-2601864178-3848914015-3132111734-1001\...\Run: [NokiaSuite.exe] => C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1090912 2013-04-19] (Nokia)
HKU\S-1-5-21-2601864178-3848914015-3132111734-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [18630056 2018-09-10] (Piriform Ltd)
HKU\S-1-5-21-2601864178-3848914015-3132111734-1001\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\pc\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"
HKU\S-1-5-21-2601864178-3848914015-3132111734-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\pc\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe"
HKU\S-1-5-21-2601864178-3848914015-3132111734-1001\...\RunOnce: [Uninstall 18.222.1104.0007\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\pc\AppData\Local\Microsoft\OneDrive\18.222.1104.0007\amd64"
HKU\S-1-5-21-2601864178-3848914015-3132111734-1001\...\RunOnce: [Uninstall 18.222.1104.0007] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\pc\AppData\Local\Microsoft\OneDrive\18.222.1104.0007"
HKLM\...\Drivers32-x32: [msacm.clmp3enc] => C:\Program Files (x86)\Lenovo\Power2Go\CLMP3Enc.ACM [217088 2005-05-14] (CyberLink Corp.)
HKLM\Software\...\Authentication\Credential Providers: [{50968FF7-10C1-4fb3-98B0-CD654D6CB97E}] -> C:\Program Files\Lenovo\Bluetooth Software\\BtwCP.dll [2012-11-16] (Broadcom Corporation.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 62.129.50.20 85.135.32.100
Tcpip\..\Interfaces\{05d0f73f-6071-4e11-b989-a194a55ed1cb}: [DhcpNameServer] 62.129.50.20 85.135.32.100
Tcpip\..\Interfaces\{37512357-45f4-4165-add8-856f58a5accd}: [DhcpNameServer] 62.129.50.20 85.135.32.100

Internet Explorer:
==================
HKU\S-1-5-21-2601864178-3848914015-3132111734-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=i ... ar=msnhome
HKU\S-1-5-21-2601864178-3848914015-3132111734-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/
SearchScopes: HKU\S-1-5-21-2601864178-3848914015-3132111734-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src ... 02&pc=UE04
SearchScopes: HKU\S-1-5-21-2601864178-3848914015-3132111734-1001 -> {2BAB6B7E-AABB-4F02-A3E8-A918D99E5A43} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_7436
SearchScopes: HKU\S-1-5-21-2601864178-3848914015-3132111734-1001 -> {3D23D3E5-B460-45E7-9143-8F0D86F064C2} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_7436
SearchScopes: HKU\S-1-5-21-2601864178-3848914015-3132111734-1001 -> {44E2C7FD-3437-4E09-A114-042C9FE08974} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_7436
SearchScopes: HKU\S-1-5-21-2601864178-3848914015-3132111734-1001 -> {4B3DF2BA-F050-4C87-8DC3-4973B8CC9B57} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... earch_7436
SearchScopes: HKU\S-1-5-21-2601864178-3848914015-3132111734-1001 -> {52FB254F-2CAD-4877-A001-1B59F034E14C} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid=QuickSearch_7436
SearchScopes: HKU\S-1-5-21-2601864178-3848914015-3132111734-1001 -> {6977BE67-897D-4687-9829-D9CE2839A5CB} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_7436
SearchScopes: HKU\S-1-5-21-2601864178-3848914015-3132111734-1001 -> {94403DD0-B264-4E2F-8A0E-78F91F468DD8} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... earch_7436
SearchScopes: HKU\S-1-5-21-2601864178-3848914015-3132111734-1001 -> {AC721D5D-0683-4305-854E-45500830A1AA} URL =
SearchScopes: HKU\S-1-5-21-2601864178-3848914015-3132111734-1001 -> {C7A4C6D6-1F16-427D-AD2B-541B7F9DAD92} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... earch_7436
SearchScopes: HKU\S-1-5-21-2601864178-3848914015-3132111734-1001 -> {DF3D58E6-8795-4344-B5BF-A60B453F65CA} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_7436
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2018-05-25] (Google Inc.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2018-11-26] (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2018-05-25] (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2018-05-25] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2018-05-25] (Google Inc.)
Toolbar: HKU\S-1-5-21-2601864178-3848914015-3132111734-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2018-05-25] (Google Inc.)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-11-26] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-11-26] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-11-26] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-11-26] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-11-26] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-11-26] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-11-26] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-11-26] (Microsoft Corporation)

FireFox:
========
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => not found
FF Plugin: @mcafee.com/MSC,version=10 -> C:\Program Files\mcafee\msc\npMcSnFFPl64.dll [No File]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-11-26] (Microsoft Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll [No File]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2018-11-26] (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin -> C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll [2013-04-19] ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-20] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-20] (Google Inc.)

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [7834368 2019-01-22] (AVAST Software)
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [357816 2019-01-22] (AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9669920 2018-11-02] (Microsoft Corporation)
R2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [10815296 2018-06-18] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2876096 2018-06-18] (COMODO)
R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [337888 2016-05-03] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [249032 2015-06-03] (Synaptics Incorporated)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1812.3-0\NisSrv.exe [3880120 2019-01-23] (Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1812.3-0\MsMpEng.exe [114208 2019-01-23] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [37304 2019-01-22] (AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [203488 2019-01-22] (AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [223056 2019-01-23] (AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [196264 2019-01-22] (AVAST Software)
R0 aswblog; C:\WINDOWS\System32\drivers\aswblog.sys [320888 2019-01-22] (AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [58160 2019-01-22] (AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [15488 2019-01-22] (AVAST Software)
R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [239808 2019-01-22] (AVAST Software)
S3 aswHwid; C:\WINDOWS\System32\drivers\aswHwid.sys [46584 2019-01-22] (AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42488 2019-01-22] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [166792 2019-01-23] (AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [111992 2019-01-22] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [88144 2019-01-22] (AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1034056 2019-01-22] (AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [474648 2019-01-22] (AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [218056 2019-01-22] (AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [380144 2019-01-22] (AVAST Software)
R1 CFRMD; C:\WINDOWS\System32\DRIVERS\CFRMD.sys [40224 2014-12-25] (Windows (R) Win 7 DDK provider)
S0 cmdboot; C:\WINDOWS\System32\DRIVERS\cmdboot.sys [17944 2018-05-23] (COMODO)
R1 cmderd; C:\WINDOWS\System32\DRIVERS\cmderd.sys [44056 2018-05-23] (COMODO)
R1 cmdGuard; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [832032 2018-05-23] (COMODO)
R1 cmdhlp; C:\WINDOWS\system32\DRIVERS\cmdhlp.sys [50768 2018-05-23] (COMODO)
R1 inspect; C:\WINDOWS\system32\DRIVERS\inspect.sys [134400 2018-05-23] (COMODO)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253664 2018-07-12] (Malwarebytes)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-06-03] (Synaptics Incorporated)
R3 vm331avs; C:\WINDOWS\System32\Drivers\vm331avs.sys [802312 2015-06-12] (Vimicro Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46680 2019-01-23] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [330936 2019-01-23] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [62136 2019-01-23] (Microsoft Corporation)
S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

=================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-01-23 15:50 - 2019-01-23 15:50 - 000000000 ___HD C:\OneDriveTemp
2019-01-23 15:06 - 2019-01-22 22:36 - 000361352 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2019-01-23 14:00 - 2019-01-23 14:00 - 000000000 ____D C:\rsit
2019-01-23 14:00 - 2019-01-23 14:00 - 000000000 ____D C:\Program Files\trend micro
2019-01-23 13:27 - 2019-01-23 16:22 - 000000000 ____D C:\FRST
2019-01-23 10:45 - 2019-01-23 10:45 - 000223056 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswf9d9876fa2715cb2.tmp
2019-01-23 10:45 - 2019-01-23 10:45 - 000223056 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2019-01-22 22:42 - 2019-01-22 22:36 - 000080776 _____ (AVAST Software) C:\Users\pc\Desktop\Avast.exe
2019-01-22 22:36 - 2019-01-23 10:45 - 000166792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2019-01-22 22:36 - 2019-01-23 10:45 - 000166792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw8153dbc6dd0799d8.tmp
2019-01-22 22:36 - 2019-01-22 22:36 - 001034056 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2019-01-22 22:36 - 2019-01-22 22:36 - 001034056 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw2e2c78bff93f027b.tmp
2019-01-22 22:36 - 2019-01-22 22:36 - 000474648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2019-01-22 22:36 - 2019-01-22 22:36 - 000474648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswdbd6076a9c2daa4c.tmp
2019-01-22 22:36 - 2019-01-22 22:36 - 000380144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2019-01-22 22:36 - 2019-01-22 22:36 - 000380144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw4a69fe015974b6d4.tmp
2019-01-22 22:36 - 2019-01-22 22:36 - 000239808 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHdsKe.sys
2019-01-22 22:36 - 2019-01-22 22:36 - 000239808 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswc785fd2635fb55aa.tmp
2019-01-22 22:36 - 2019-01-22 22:36 - 000218056 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2019-01-22 22:36 - 2019-01-22 22:36 - 000218056 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw7d28d174528622e8.tmp
2019-01-22 22:36 - 2019-01-22 22:36 - 000203488 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2019-01-22 22:36 - 2019-01-22 22:36 - 000203488 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw80547346c615216c.tmp
2019-01-22 22:36 - 2019-01-22 22:36 - 000111992 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2019-01-22 22:36 - 2019-01-22 22:36 - 000111992 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswb87143c0ab2f714e.tmp
2019-01-22 22:36 - 2019-01-22 22:36 - 000088144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2019-01-22 22:36 - 2019-01-22 22:36 - 000088144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswa7f92779bf0f8c1a.tmp
2019-01-22 22:36 - 2019-01-22 22:36 - 000046584 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2019-01-22 22:36 - 2019-01-22 22:36 - 000046584 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw9bdd2cc06a5a8fd7.tmp
2019-01-22 22:36 - 2019-01-22 22:36 - 000042488 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2019-01-22 22:36 - 2019-01-22 22:36 - 000042488 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw718b022ac77e3034.tmp
2019-01-22 22:36 - 2019-01-22 22:36 - 000037304 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswcace32d4d1d98c5e.tmp
2019-01-22 22:36 - 2019-01-22 22:36 - 000037304 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2019-01-22 22:36 - 2019-01-22 22:36 - 000015488 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswf1bf3a9656d4177d.tmp
2019-01-22 22:36 - 2019-01-22 22:36 - 000015488 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswElam.sys
2019-01-22 22:36 - 2019-01-22 22:35 - 000320888 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswblog.sys
2019-01-22 22:36 - 2019-01-22 22:35 - 000320888 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw92e821abd50b4f65.tmp
2019-01-22 22:36 - 2019-01-22 22:35 - 000196264 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswe39bd507510ff700.tmp
2019-01-22 22:36 - 2019-01-22 22:35 - 000196264 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2019-01-22 22:36 - 2019-01-22 22:35 - 000058160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2019-01-22 22:36 - 2019-01-22 22:35 - 000058160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw9f073033bbefaf70.tmp
2019-01-22 22:35 - 2019-01-22 22:35 - 000000000 ____D C:\Program Files\AVAST Software
2019-01-22 22:03 - 2019-01-22 22:03 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2019-01-22 21:28 - 2019-01-23 15:08 - 000003990 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2019-01-22 20:20 - 2019-01-22 20:20 - 000000000 ____D C:\WINDOWS\System32\Tasks\Avast Software
2019-01-22 19:11 - 2019-01-22 19:11 - 000052328 _____ () C:\WINDOWS\system32\Drivers\staport.sys
2019-01-22 17:41 - 2019-01-23 14:38 - 000000000 ____D C:\AdwCleaner
2019-01-20 13:13 - 2019-01-20 13:15 - 000000000 ___HD C:\Users\pc\MicrosoftEdgeBackups
2019-01-16 21:32 - 2019-01-23 14:18 - 000000000 ____D C:\WINDOWS\Minidump
2019-01-13 18:58 - 2019-01-01 08:12 - 009084216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2019-01-13 18:58 - 2019-01-01 08:12 - 007520104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2019-01-13 18:58 - 2019-01-01 07:55 - 025856512 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2019-01-13 18:58 - 2019-01-01 07:50 - 022715392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2019-01-13 18:58 - 2019-01-01 07:42 - 004939776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2019-01-13 18:58 - 2019-01-01 07:37 - 006571584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-01-13 18:58 - 2019-01-01 07:29 - 022016512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2019-01-13 18:58 - 2019-01-01 07:14 - 004514816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2019-01-13 18:57 - 2019-01-01 14:50 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2019-01-13 18:57 - 2019-01-01 14:47 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowslivelogin.dll
2019-01-13 18:57 - 2019-01-01 14:46 - 012710912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2019-01-13 18:57 - 2019-01-01 14:45 - 000714752 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2019-01-13 18:57 - 2019-01-01 14:45 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
2019-01-13 18:57 - 2019-01-01 14:43 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2019-01-13 18:57 - 2019-01-01 14:20 - 011902976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2019-01-13 18:57 - 2019-01-01 14:20 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windowslivelogin.dll
2019-01-13 18:57 - 2019-01-01 14:18 - 000500736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2019-01-13 18:57 - 2019-01-01 14:17 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll
2019-01-13 18:57 - 2019-01-01 08:14 - 001221432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2019-01-13 18:57 - 2019-01-01 08:14 - 001063224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2019-01-13 18:57 - 2019-01-01 08:14 - 001029944 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2019-01-13 18:57 - 2019-01-01 08:14 - 000566568 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2019-01-13 18:57 - 2019-01-01 08:14 - 000134968 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2019-01-13 18:57 - 2019-01-01 08:14 - 000076088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2019-01-13 18:57 - 2019-01-01 08:13 - 003292152 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2019-01-13 18:57 - 2019-01-01 08:13 - 001363536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2019-01-13 18:57 - 2019-01-01 08:13 - 000709728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2019-01-13 18:57 - 2019-01-01 08:13 - 000436024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2019-01-13 18:57 - 2019-01-01 08:13 - 000170808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2019-01-13 18:57 - 2019-01-01 08:12 - 002765344 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2019-01-13 18:57 - 2019-01-01 08:12 - 002465792 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2019-01-13 18:57 - 2019-01-01 08:12 - 002421288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2019-01-13 18:57 - 2019-01-01 08:12 - 000713272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2019-01-13 18:57 - 2019-01-01 08:12 - 000268304 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2019-01-13 18:57 - 2019-01-01 08:12 - 000128824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2019-01-13 18:57 - 2019-01-01 08:12 - 000043536 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2019-01-13 18:57 - 2019-01-01 07:50 - 004383744 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2019-01-13 18:57 - 2019-01-01 07:48 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
2019-01-13 18:57 - 2019-01-01 07:48 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2019-01-13 18:57 - 2019-01-01 07:48 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Print.Workflow.Source.dll
2019-01-13 18:57 - 2019-01-01 07:47 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2019-01-13 18:57 - 2019-01-01 07:47 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2019-01-13 18:57 - 2019-01-01 07:46 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll
2019-01-13 18:57 - 2019-01-01 07:46 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2019-01-13 18:57 - 2019-01-01 07:46 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2019-01-13 18:57 - 2019-01-01 07:45 - 007573504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2019-01-13 18:57 - 2019-01-01 07:45 - 002368512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2019-01-13 18:57 - 2019-01-01 07:45 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2019-01-13 18:57 - 2019-01-01 07:44 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
2019-01-13 18:57 - 2019-01-01 07:44 - 001549824 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2019-01-13 18:57 - 2019-01-01 07:44 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2019-01-13 18:57 - 2019-01-01 07:44 - 000662528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2019-01-13 18:57 - 2019-01-01 07:44 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.Workflow.dll
2019-01-13 18:57 - 2019-01-01 07:43 - 001805312 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2019-01-13 18:57 - 2019-01-01 07:42 - 002247680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2019-01-13 18:57 - 2019-01-01 07:42 - 001371136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2019-01-13 18:57 - 2019-01-01 07:42 - 000717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2019-01-13 18:57 - 2019-01-01 07:41 - 001159680 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2019-01-13 18:57 - 2019-01-01 07:41 - 000899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2019-01-13 18:57 - 2019-01-01 07:41 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2019-01-13 18:57 - 2019-01-01 07:41 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2019-01-13 18:57 - 2019-01-01 07:37 - 002478664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2019-01-13 18:57 - 2019-01-01 07:37 - 002253696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2019-01-13 18:57 - 2019-01-01 07:37 - 001989040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2019-01-13 18:57 - 2019-01-01 07:37 - 000880048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2019-01-13 18:57 - 2019-01-01 07:37 - 000581808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2019-01-13 18:57 - 2019-01-01 07:37 - 000381240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2019-01-13 18:57 - 2019-01-01 07:22 - 019405312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2019-01-13 18:57 - 2019-01-01 07:17 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountTokenProvider.dll
2019-01-13 18:57 - 2019-01-01 07:16 - 005775872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2019-01-13 18:57 - 2019-01-01 07:16 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll
2019-01-13 18:57 - 2019-01-01 07:16 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2019-01-13 18:57 - 2019-01-01 07:15 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2019-01-13 18:57 - 2019-01-01 07:15 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2019-01-13 18:57 - 2019-01-01 07:15 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2019-01-13 18:57 - 2019-01-01 07:15 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2019-01-13 18:57 - 2019-01-01 07:14 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2019-01-13 18:57 - 2019-01-01 07:14 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2019-01-13 18:57 - 2019-01-01 07:13 - 001628160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2019-01-13 18:57 - 2019-01-01 07:13 - 000594432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2019-01-13 18:57 - 2019-01-01 07:13 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2019-01-13 18:57 - 2019-01-01 07:12 - 001036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2019-01-13 18:57 - 2019-01-01 07:12 - 000795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2019-01-13 18:57 - 2019-01-01 07:12 - 000778240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2019-01-13 18:57 - 2019-01-01 07:12 - 000516608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2019-01-13 18:57 - 2019-01-01 06:23 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim
2019-01-13 18:57 - 2018-12-19 05:49 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2019-01-13 17:08 - 2019-01-13 17:48 - 000000000 ____D C:\Users\pc\AppData\Local\PlaceholderTileLogoFolder
2019-01-13 14:18 - 2019-01-13 14:18 - 000000000 ____D C:\Users\pc\AppData\Local\D3DSCache
2019-01-13 14:15 - 2019-01-13 14:15 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2019-01-13 08:43 - 2019-01-13 08:43 - 000000020 ___SH C:\Users\pc\ntuser.ini
2019-01-13 06:13 - 2019-01-23 15:58 - 000004210 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
2019-01-13 06:13 - 2019-01-23 15:50 - 000003360 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2601864178-3848914015-3132111734-1001
2019-01-13 06:13 - 2019-01-23 14:59 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2019-01-13 06:13 - 2019-01-23 14:49 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-01-13 06:13 - 2019-01-20 13:15 - 000003472 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1540403141
2019-01-13 06:13 - 2019-01-20 13:15 - 000003400 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2019-01-13 06:13 - 2019-01-20 13:15 - 000003278 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1527710218
2019-01-13 06:13 - 2019-01-20 13:15 - 000003176 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2019-01-13 06:13 - 2019-01-20 13:15 - 000002590 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask
2019-01-13 06:13 - 2019-01-20 13:15 - 000002334 _____ C:\WINDOWS\System32\Tasks\MirageAgent
2019-01-13 06:13 - 2019-01-20 13:15 - 000002194 _____ C:\WINDOWS\System32\Tasks\McAfee Remediation (Prepare)
2019-01-13 06:13 - 2019-01-20 13:15 - 000002096 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2019-01-13 06:13 - 2019-01-20 13:15 - 000002040 _____ C:\WINDOWS\System32\Tasks\Synaptics TouchPad Enhancements
2019-01-13 06:13 - 2019-01-13 06:13 - 000002812 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2601864178-3848914015-3132111734-1001
2019-01-13 06:13 - 2019-01-13 06:13 - 000000000 ____D C:\WINDOWS\System32\Tasks\WPD
2019-01-13 06:13 - 2019-01-13 06:13 - 000000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2019-01-13 06:13 - 2019-01-13 06:13 - 000000000 ____D C:\WINDOWS\System32\Tasks\S-1-5-21-2601864178-3848914015-3132111734-1001
2019-01-13 06:13 - 2019-01-13 06:13 - 000000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2019-01-13 06:13 - 2019-01-13 06:13 - 000000000 ____D C:\WINDOWS\System32\Tasks\COMODO
2019-01-13 06:13 - 2018-08-18 21:16 - 000004146 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1534623388
2019-01-13 06:12 - 2019-01-13 06:13 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2019-01-13 06:12 - 2019-01-13 06:13 - 000007623 _____ C:\WINDOWS\diagerr.xml
2019-01-13 06:03 - 2019-01-23 15:46 - 000838564 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-01-13 05:51 - 2019-01-13 05:51 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2019-01-13 05:48 - 2019-01-23 15:50 - 000002393 _____ C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-01-13 05:48 - 2019-01-22 21:15 - 000000000 ____D C:\Users\pc
2019-01-13 05:48 - 2019-01-13 05:48 - 000000000 _SHDL C:\Users\pc\Šablony
2019-01-13 05:48 - 2019-01-13 05:48 - 000000000 _SHDL C:\Users\pc\Soubory cookie
2019-01-13 05:48 - 2019-01-13 05:48 - 000000000 _SHDL C:\Users\pc\Poslední
2019-01-13 05:48 - 2019-01-13 05:48 - 000000000 _SHDL C:\Users\pc\Okolní tiskárny
2019-01-13 05:48 - 2019-01-13 05:48 - 000000000 _SHDL C:\Users\pc\Okolní síť
2019-01-13 05:48 - 2019-01-13 05:48 - 000000000 _SHDL C:\Users\pc\Nabídka Start
2019-01-13 05:48 - 2019-01-13 05:48 - 000000000 _SHDL C:\Users\pc\Dokumenty
2019-01-13 05:48 - 2019-01-13 05:48 - 000000000 _SHDL C:\Users\pc\Documents\Obrázky
2019-01-13 05:48 - 2019-01-13 05:48 - 000000000 _SHDL C:\Users\pc\Documents\Hudba
2019-01-13 05:48 - 2019-01-13 05:48 - 000000000 _SHDL C:\Users\pc\Documents\Filmy
2019-01-13 05:48 - 2019-01-13 05:48 - 000000000 _SHDL C:\Users\pc\Data aplikací
2019-01-13 05:48 - 2019-01-13 05:48 - 000000000 _SHDL C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2019-01-13 05:48 - 2019-01-13 05:48 - 000000000 _SHDL C:\Users\pc\AppData\Local\Data aplikací
2019-01-13 05:45 - 2019-01-13 05:45 - 000000000 ____D C:\Program Files\Dolby Digital Plus
2019-01-13 05:44 - 2019-01-13 05:44 - 000000000 ____D C:\ProgramData\USOShared
2019-01-13 05:44 - 2018-04-12 00:33 - 002752000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2019-01-13 05:43 - 2016-05-03 22:30 - 000081416 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2019-01-13 05:43 - 2016-05-03 22:30 - 000077832 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2019-01-13 05:40 - 2019-01-23 15:42 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-01-13 05:40 - 2019-01-23 14:49 - 000234144 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-01-13 05:39 - 2019-01-13 06:14 - 000000000 ____D C:\Windows.old
2019-01-13 05:35 - 2019-01-13 05:39 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2019-01-13 05:33 - 2019-01-13 05:35 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2019-01-13 05:33 - 2019-01-13 05:33 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2019-01-13 05:24 - 2019-01-13 05:24 - 023861760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 020383832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 019525120 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 013572608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 012500992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 007987712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 006813744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 006527056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 005657600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 004866560 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 004789952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 004559872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 004491264 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2019-01-13 05:24 - 2019-01-13 05:24 - 004404720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 004331008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 003711488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 003611368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2019-01-13 05:24 - 2019-01-13 05:24 - 003444224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2019-01-13 05:24 - 2019-01-13 05:24 - 003397632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2019-01-13 05:24 - 2019-01-13 05:24 - 002841312 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 002824704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themeui.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 002590296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2019-01-13 05:24 - 2019-01-13 05:24 - 002563984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 002535032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 002405888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 002394960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2019-01-13 05:24 - 2019-01-13 05:24 - 002371296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 002331480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 002307240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2019-01-13 05:24 - 2019-01-13 05:24 - 002206528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL
2019-01-13 05:24 - 2019-01-13 05:24 - 002161008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 002084864 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2019-01-13 05:24 - 2019-01-13 05:24 - 002062392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 002016768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2019-01-13 05:24 - 2019-01-13 05:24 - 001946752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001932288 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeangle.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001862656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsservices.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001784680 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001773056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001710240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001611584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001559368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001537024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001508352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdt.exe
2019-01-13 05:24 - 2019-01-13 05:24 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001452544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001397104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001379816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001342976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001308672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001305088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001295360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001288920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001274368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe
2019-01-13 05:24 - 2019-01-13 05:24 - 001274368 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloSI.PCShell.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001242112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001153536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001150312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001148800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001144664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001143096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001130760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001112600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001098064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001034096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001032704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001020064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001017168 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001017088 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001012408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000988640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000950272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000908800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2019-01-13 05:24 - 2019-01-13 05:24 - 000908288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000861744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000861096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000860160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000842240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000839680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000814592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000785760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000770152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000753056 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000745472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2019-01-13 05:24 - 2019-01-13 05:24 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000704000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000669696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000668160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000661056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000660480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000658432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000625664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000619520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000500552 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000482304 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000481880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000472136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000471040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000457056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certreq.exe
2019-01-13 05:24 - 2019-01-13 05:24 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2019-01-13 05:24 - 2019-01-13 05:24 - 000416024 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000402944 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000320512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ninput.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2019-01-13 05:24 - 2019-01-13 05:24 - 000269104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2019-01-13 05:24 - 2019-01-13 05:24 - 000260800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000257536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MixedReality.Broker.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000247984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RESAMPLEDMO.DLL
2019-01-13 05:24 - 2019-01-13 05:24 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloShellRuntime.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000232488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RESAMPLEDMO.DLL
2019-01-13 05:24 - 2019-01-13 05:24 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prnntfy.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpd_ci.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000221216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeManagerObj.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2019-01-13 05:24 - 2019-01-13 05:24 - 000216576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sensrsvc.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys
2019-01-13 05:24 - 2019-01-13 05:24 - 000181288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TtlsAuth.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TtlsCfg.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Analog.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdeploy.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000129296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpshell.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000123424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\raschap.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpshell.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bowser.sys
2019-01-13 05:24 - 2019-01-13 05:24 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\EASPolicyManagerBrokerHost.exe
2019-01-13 05:24 - 2019-01-13 05:24 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSHEIF.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSHEIF.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000018716 _____ C:\WINDOWS\SysWOW64\srms-apr.dat
2019-01-13 05:24 - 2019-01-13 05:24 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2019-01-13 05:24 - 2019-01-13 05:24 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\EasPolicyManagerBrokerPS.dll
2019-01-13 05:23 - 2019-01-13 05:24 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollUI.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 021388752 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 013873664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 009084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 008623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 007057408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 006661632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 006647296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 006586880 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 006043496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 005883904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 005821544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 005505024 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 005391360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 004708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 004527800 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 004469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 004393472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 004050432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 004049408 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 003999232 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 003932672 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 003733320 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 003649024 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 003640832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 003601920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Service.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 003553792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 003492864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 003396608 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 003381248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 003376640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 003320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 002966528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 002929664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 002922496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 002900992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 002874368 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 002868536 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 002825728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 002789376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 002719736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 002700288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 002584576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 002571128 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 002487088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 002449408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 002417976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 002364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 002328064 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmsipc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 002258944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 002178136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 002173440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 002126336 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 002052096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 002019840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001986560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001980776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001943328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001921944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 001856512 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001817600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001805656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001787904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001724928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001724416 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001719808 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001703936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Controls.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001679360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001676800 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001665920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001665024 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001661440 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001659904 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001655296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmsipc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001649760 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001639560 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001634944 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001626656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001620472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001616824 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001610552 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001584128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001581568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001560576 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdt.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 001557504 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 001551360 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001543680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001530368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001516120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001490144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001487360 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001469952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001462824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001457240 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2019-01-13 05:23 - 2019-01-13 05:23 - 001456640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001454648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001427968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001421312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001376672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001356800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001328632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001304064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001299704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001285432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 001264640 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001257672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 001254400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001251736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001235968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001225216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001211904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001192448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001189376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001188512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001171968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001140480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2019-01-13 05:23 - 2019-01-13 05:23 - 001128448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001127936 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdprt.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001114112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001110528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001054720 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 001048712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001046944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001035256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 001027000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001011872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001006080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 001000448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000993792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000990720 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2019-01-13 05:23 - 2019-01-13 05:23 - 000986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000982912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000981920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000978944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000978432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000976384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000972800 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2019-01-13 05:23 - 2019-01-13 05:23 - 000945568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000943616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000941056 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000933888 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000933376 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\autoconv.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000930616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000917408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000907776 _____ (Microsoft Corporation) C:\WINDOWS\system32\autofmt.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000906752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.PhoneNumberFormatting.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000897536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000889344 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000884224 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000884224 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\winipcsecproc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000878592 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000871424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000871424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000864768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2019-01-13 05:23 - 2019-01-13 05:23 - 000858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000856576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000851968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autoconv.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000849408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000848384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000831488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autofmt.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000829960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000808960 _____ C:\WINDOWS\system32\MBR2GPT.EXE

2019-01-13 05:23 - 2019-01-13 05:23 - 000807936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winipcsecproc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000792376 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000790528 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000790416 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000778752 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2019-01-13 05:23 - 2019-01-13 05:23 - 000775680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000766480 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000761344 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000760888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000743936 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintRenderAPIHost.DLL
2019-01-13 05:23 - 2019-01-13 05:23 - 000743320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000740864 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000740352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000736256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000723360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000717112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedRealitySvc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000705024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000702464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000695296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2019-01-13 05:23 - 2019-01-13 05:23 - 000689464 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFDSConMgrSvc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000678400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000677888 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HeadTrackerStorage.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000676864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Devices.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000662312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000661160 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000648192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000645320 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000636944 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000632296 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpx.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000630784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000622080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000622080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs4.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000613144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000612360 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs3.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000582144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2019-01-13 05:23 - 2019-01-13 05:23 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000572416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000568720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000560488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000555008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000549760 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000548864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000540984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000539168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000537912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuietHours.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000528384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000528384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000527264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000527160 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000523264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000522752 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2019-01-13 05:23 - 2019-01-13 05:23 - 000517120 _____ (Microsoft Corporation) C:\WINDOWS\system32\certreq.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000510392 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000508416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000506184 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000505616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000500536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\system32\winipcfile.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000481280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000474624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs2.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXP.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000463672 _____ (Microsoft Corporation) C:\WINDOWS\system32\coml2.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\das.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Activities.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000453104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpx.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000452112 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000443216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000433168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000431104 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000424000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000399872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvctpSvc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000396304 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000387584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000386048 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000386048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Diagnostics.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000384520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coml2.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ninput.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000375608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000368448 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winipcfile.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoMetadataHandler.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000347136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000335672 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\NmaDirect.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioCredProv.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollUI.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000324000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000314368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Proximity.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticLogCSP.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Diagnostics.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvrcp.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000309560 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000301568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000295224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.th.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000286824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000286200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000281080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExecModelClient.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\scecli.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Proxy.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000264704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NmaDirect.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\PushToInstall.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardSvr.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000254464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BioCredProv.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\prnntfy.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000253544 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl
2019-01-13 05:23 - 2019-01-13 05:23 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win81.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\TtlsAuth.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000236728 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000228768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000228136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ucx01000.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Cortana.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthprops.cpl
2019-01-13 05:23 - 2019-01-13 05:23 - 000223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\TtlsExt.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\TtlsCfg.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000217088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput8.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000216064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Geolocation.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndiswan.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilot.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000192920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VideoHandlers.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000185120 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput8.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPTaskScheduler.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enrollmentapi.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.XamlHost.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Diagnostics.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000164768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdeploy.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManagerAPI.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft.Bluetooth.Proxy.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000145408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000144696 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win8rtm.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000139792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000134936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.XamlHost.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000130312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\officecsp.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000115640 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthci.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSAssessment.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProv2faHelper.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSoftwareInstallationClient.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000101192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUser.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000093600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000088472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ofdeploy.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fileinfo.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\INETRES.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\INETRES.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProv2faHelper.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ApiSetHost.AppExecutionAlias.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000077040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CompPkgSup.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFDSConMgr.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000072768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WindowsTrustedRT.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000069944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdBth.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000064648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LanguageOverlayUtil.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthAvrcpAppSvc.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edpnotify.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdBth.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000058088 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000050208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel.appcore.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardBi.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000046592 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\cellulardatacapabilityhandler.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnsruprov.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhf.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msisip.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsTelemetry.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\DsmUserTask.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
2019-01-13 05:23 - 2019-01-13 05:23 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dumpstorport.sys
2019-01-13 05:23 - 2019-01-13 05:23 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfnet.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msisip.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\CSystemEventsBrokerClient.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfnet.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2019-01-13 05:23 - 2019-01-13 05:23 - 000018716 _____ C:\WINDOWS\system32\srms-apr.dat
2019-01-13 05:23 - 2019-01-13 05:23 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 016592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 008189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 007900984 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 007436216 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 006032384 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 005951488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 005625352 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 004970360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 004929024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 004771840 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 004710912 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 003392000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 003348992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 003293696 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 003283512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 003212800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 003179760 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 003148288 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 003090432 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 002904064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 002893824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 002892288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 002822656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 002739200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 002697216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Controls.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 002611200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 002548736 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 002546592 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 002224640 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 002061824 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001953280 _____ C:\WINDOWS\system32\rdpnano.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001935008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001919488 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001826816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001798552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001792808 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001768448 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001767096 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001742272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001724928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001675264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001668096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdprt.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001659296 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001613288 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001589248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001567744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001566720 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001535488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 001513032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001462784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dui70.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001457152 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001373696 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001364184 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001322376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001318400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001308672 _____ C:\WINDOWS\system32\FaceProcessor.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 001285120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001213472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 001209888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001174448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001097728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 001077504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001069568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 001032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001026456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 001023488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001018880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 001016984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 001004544 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000953856 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 000916992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000910848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000899920 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000885760 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000857088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2019-01-13 05:22 - 2019-01-13 05:22 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000823296 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000811520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000806320 _____ C:\WINDOWS\SysWOW64\locale.nls
2019-01-13 05:22 - 2019-01-13 05:22 - 000806320 _____ C:\WINDOWS\system32\locale.nls
2019-01-13 05:22 - 2019-01-13 05:22 - 000797184 _____ (Microsoft Corporation) C:\WINDOWS\system32\certca.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000793592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000788216 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000777512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000777400 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000766704 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000748512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000735560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000723416 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000721024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000706040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000693248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000692240 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000678840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000670720 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000667648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000665224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000659096 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000652288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certca.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000642088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000611640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000607648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000607136 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000606448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000606208 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000604984 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 000603648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000602112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000594224 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 000573952 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000573504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000567256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000565048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2019-01-13 05:22 - 2019-01-13 05:22 - 000560136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000558592 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\PerceptionSimulationExtensions.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000553248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000550728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000542888 _____ C:\WINDOWS\system32\FaceProcessorCore.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000515072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000497864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000494488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 000491416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000482384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000480568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000473600 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000466944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000463872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000462880 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 000460288 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreCommonProxyStub.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs1.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000434584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoMetadataHandler.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000421176 _____ (Microsoft Corporation) C:\WINDOWS\system32\xbgmengine.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\eeprov.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000413920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000413176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 000396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000395776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000382872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000380728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000376120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000373248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000368656 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000361544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageHandlers.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000350208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 000347704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Proximity.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000338352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000326024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 000316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000313592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000300032 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000275968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000272408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000269336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000249088 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Core.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000230304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpRelayTransport.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scecli.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL
2019-01-13 05:22 - 2019-01-13 05:22 - 000205312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreCommonProxyStub.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000203568 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000194456 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HoloShellRuntime.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000183992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000175624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\appsruprov.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdrom.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000158624 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spacebridge.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000155112 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\datamarketsvc.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000141312 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\raschap.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageLiveTileTask.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 000130456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000128920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scmbus.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000125600 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptxml.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000118872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\eShims.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000116632 _____ (Microsoft Corporation) C:\WINDOWS\system32\DTUHandler.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000114080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppHostRegistrationVerifier.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApiSetHost.AppExecutionAlias.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000105376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000105368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000099208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptxml.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttpcom.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000097176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000094112 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000092688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000089984 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000084288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageOverlayUtil.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcnfs.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000083360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttpcom.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storqosflt.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000075160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 000072800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000061736 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvhostsvc.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000061032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000058168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\iorate.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000057960 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel.appcore.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000057440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.ShellCommon.Broker.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000052736 _____ C:\WINDOWS\system32\runexehelper.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollCtrl.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000048544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\tokenbinding.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmapi.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mmcss.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollCtrl.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tokenbinding.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmtask.exe
2019-01-13 05:22 - 2019-01-13 05:22 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000031648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhv.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\seclogon.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000029600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\uefi.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netevent.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\netevent.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\DTUHandlerPS.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmgid.sys
2019-01-13 05:22 - 2019-01-13 05:22 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2019-01-13 05:22 - 2019-01-13 05:22 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2019-01-13 05:08 - 2019-01-13 05:08 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2019-01-13 05:08 - 2019-01-13 05:08 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2019-01-13 05:08 - 2019-01-13 05:08 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2019-01-13 05:08 - 2019-01-13 05:08 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2019-01-13 05:08 - 2019-01-13 05:08 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2019-01-13 05:08 - 2019-01-13 05:08 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2019-01-13 05:08 - 2019-01-13 05:08 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2019-01-13 05:08 - 2019-01-13 05:08 - 000000000 ____D C:\Program Files\Reference Assemblies
2019-01-13 05:08 - 2019-01-13 05:08 - 000000000 ____D C:\Program Files\MSBuild
2019-01-13 05:08 - 2019-01-13 05:08 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2019-01-13 05:08 - 2019-01-13 05:08 - 000000000 ____D C:\Program Files (x86)\MSBuild
2019-01-13 05:06 - 2019-01-13 05:06 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll
2019-01-13 05:06 - 2019-01-13 05:06 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll
2019-01-13 05:06 - 2019-01-13 05:06 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll
2019-01-13 05:06 - 2019-01-13 05:06 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll
2019-01-13 05:06 - 2019-01-13 05:06 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2019-01-13 05:06 - 2019-01-13 05:06 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2019-01-13 05:01 - 2019-01-13 05:01 - 000058524 _____ C:\WINDOWS\system32\srms.dat
2018-12-27 18:40 - 2019-01-23 14:18 - 000000000 ___DC C:\WINDOWS\Panther

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-01-23 15:50 - 2018-05-26 15:23 - 000000000 ___RD C:\Users\pc\OneDrive
2019-01-23 15:46 - 2018-04-12 16:50 - 001619134 _____ C:\WINDOWS\system32\perfh005.dat
2019-01-23 15:46 - 2018-04-12 16:50 - 000413114 _____ C:\WINDOWS\system32\perfc005.dat
2019-01-23 15:46 - 2018-04-12 00:36 - 000000000 ____D C:\WINDOWS\INF
2019-01-23 15:45 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-01-23 15:44 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-01-23 15:25 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\registration
2019-01-23 15:06 - 2018-04-12 00:38 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2019-01-23 14:59 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files\Windows Defender
2019-01-23 14:54 - 2018-05-27 09:44 - 000000000 __SHD C:\Users\pc\IntelGraphicsProfiles
2019-01-23 14:48 - 2018-04-11 22:04 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2019-01-23 14:45 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\TextInput
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\tk-TM
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\te-IN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\sw-KE
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\prs-AF
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\or-IN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\mn-MN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\ky-KG
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\km-KH
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\is-IS
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\id-ID
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\bn-BD
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\be-BY
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\as-IN
2019-01-23 14:44 - 2018-04-12 16:51 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ___SD C:\WINDOWS\system32\UNP
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ___SD C:\WINDOWS\system32\F12
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ___RD C:\WINDOWS\PrintDialog
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\ta-in
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\si-lk
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\setup
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\oobe
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\appraiser
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\am-et
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\ShellExperiences
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\ShellComponents
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\Provisioning
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2019-01-23 14:44 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2019-01-23 14:44 - 2018-04-11 22:04 - 000000000 ____D C:\WINDOWS\system32\Dism
2019-01-23 14:18 - 2018-05-26 06:19 - 000000000 ____D C:\Users\pc\AppData\Local\CrashDumps
2019-01-23 13:47 - 2018-04-12 00:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-01-22 23:09 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\NDF
2019-01-22 22:34 - 2018-05-24 18:18 - 000000000 ____D C:\ProgramData\AVAST Software
2019-01-22 20:35 - 2018-05-26 09:21 - 000000000 ____D C:\Users\pc\Desktop\dokumenty
2019-01-22 19:49 - 2018-07-12 17:06 - 000000000 ____D C:\Users\pc\AppData\Local\AVAST Software
2019-01-22 15:34 - 2018-04-12 00:38 - 000000000 ___HD C:\Program Files\WindowsApps
2019-01-22 15:33 - 2018-06-18 02:53 - 000592616 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2019-01-21 13:52 - 2018-05-26 07:11 - 000000000 ____D C:\ProgramData\BOINC
2019-01-21 13:43 - 2018-05-25 06:06 - 000000000 ____D C:\Users\pc\AppData\Roaming\Opera Software
2019-01-21 13:43 - 2018-05-25 06:06 - 000000000 ____D C:\Users\pc\AppData\Local\Opera Software
2019-01-21 07:31 - 2018-05-23 20:46 - 000001133 _____ C:\Users\pc\Desktop\Cyberlink Power2Go.lnk
2019-01-21 07:30 - 2018-05-27 16:35 - 000000000 ____D C:\Program Files\rempl
2019-01-17 17:15 - 2018-05-24 18:55 - 000012224 _____ C:\WINDOWS\system32\Drivers\fvstore.dat
2019-01-15 15:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\appcompat
2019-01-13 17:48 - 2018-05-23 20:46 - 000000000 ____D C:\Users\pc\AppData\Local\Packages
2019-01-13 14:21 - 2018-07-19 15:55 - 000000000 ____D C:\ProgramData\Packages
2019-01-13 08:44 - 2018-08-28 19:24 - 000000000 ___RD C:\Users\pc\3D Objects
2019-01-13 08:44 - 2018-05-23 20:38 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-01-13 08:43 - 2018-05-27 09:43 - 000000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2019-01-13 06:14 - 2018-04-11 22:04 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2019-01-13 06:13 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files\windows nt
2019-01-13 06:02 - 2018-05-26 14:37 - 000023020 _____ C:\WINDOWS\system32\emptyregdb.dat
2019-01-13 05:53 - 2018-05-26 09:18 - 000000000 ____D C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2019-01-13 05:53 - 2018-05-26 07:11 - 000000000 ____D C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Charity Engine
2019-01-13 05:53 - 2018-05-26 06:35 - 000000000 ____D C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ
2019-01-13 05:50 - 2018-05-23 20:46 - 000000000 ____D C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2019-01-13 05:49 - 2013-12-24 01:43 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2019-01-13 05:49 - 2013-12-24 01:43 - 000000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2019-01-13 05:47 - 2018-05-26 14:16 - 000000000 ____D C:\Program Files (x86)\USB Camera
2019-01-13 05:47 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\System
2019-01-13 05:44 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\USOPrivate
2019-01-13 05:39 - 2018-06-13 14:37 - 000000000 ____D C:\Program Files\CONEXANT
2019-01-13 05:39 - 2018-05-27 15:51 - 000000000 ____D C:\WINDOWS\system32\MRT
2019-01-13 05:39 - 2018-05-26 17:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Runtime Software
2019-01-13 05:39 - 2018-05-26 09:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uTorrent
2019-01-13 05:39 - 2018-05-26 08:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WiFi Channel Scanner
2019-01-13 05:39 - 2018-05-26 08:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia
2019-01-13 05:39 - 2018-05-26 07:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OLYMPUS Master 2
2019-01-13 05:39 - 2018-05-26 07:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2019-01-13 05:39 - 2018-05-26 06:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ICQ 5.1
2019-01-13 05:39 - 2018-05-26 06:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2019-01-13 05:39 - 2018-05-24 18:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO
2019-01-13 05:39 - 2018-04-12 16:50 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2019-01-13 05:39 - 2018-04-12 16:50 - 000000000 ____D C:\WINDOWS\system32\WCN
2019-01-13 05:39 - 2018-04-12 00:41 - 000000000 ____D C:\WINDOWS\Setup
2019-01-13 05:39 - 2018-04-12 00:38 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2019-01-13 05:39 - 2018-04-12 00:38 - 000000000 __RHD C:\Users\Public\Libraries
2019-01-13 05:39 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2019-01-13 05:39 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\spool
2019-01-13 05:39 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2019-01-13 05:39 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2019-01-13 05:39 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2019-01-13 05:39 - 2013-12-24 01:50 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneKey Recovery
2019-01-13 05:39 - 2013-12-24 01:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(SM) center
2019-01-13 05:39 - 2013-12-24 01:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2019-01-13 05:39 - 2013-12-24 01:22 - 000000000 ____D C:\WINDOWS\SysWOW64\sda
2019-01-13 05:39 - 2013-12-24 01:22 - 000000000 ____D C:\WINDOWS\SysWOW64\Atheros_L1e
2019-01-13 05:39 - 2013-12-24 01:11 - 000000000 ____D C:\Program Files\Intel
2019-01-13 05:36 - 2018-04-12 16:50 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2019-01-13 05:36 - 2018-04-12 16:50 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2019-01-13 05:36 - 2018-04-12 16:50 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2019-01-13 05:36 - 2018-04-12 16:50 - 000000000 ____D C:\WINDOWS\system32\winrm
2019-01-13 05:36 - 2018-04-12 16:50 - 000000000 ____D C:\WINDOWS\system32\slmgr
2019-01-13 05:36 - 2018-04-12 16:50 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2019-01-13 05:36 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\IME
2019-01-13 05:36 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\IME
2019-01-13 05:35 - 2018-06-13 14:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Conexant
2019-01-13 05:35 - 2018-05-26 14:16 - 000000000 ____D C:\Program Files\Synaptics
2019-01-13 05:35 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2019-01-13 05:35 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files\Common Files\system
2019-01-13 05:08 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2019-01-13 05:08 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\MUI
2019-01-13 05:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2019-01-13 05:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2019-01-13 05:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2019-01-13 05:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2019-01-13 05:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2019-01-13 05:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2019-01-13 05:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\et-EE
2019-01-13 05:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\es-MX
2019-01-12 04:44 - 2018-12-11 01:04 - 000000000 ____D C:\Users\pc\Downloads\opera autoupdate
2019-01-09 09:29 - 2018-05-27 15:50 - 132790320 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2019-01-07 10:37 - 2018-12-16 15:31 - 000000818 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pomocník s aktualizací Windows 10.lnk
2019-01-07 10:37 - 2018-05-26 14:54 - 000000000 ____D C:\Windows10Upgrade
2019-01-02 20:41 - 2018-04-12 00:41 - 000835480 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2019-01-02 20:41 - 2018-04-12 00:41 - 000179600 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2019-01-01 19:12 - 2018-05-26 09:18 - 000001279 _____ C:\Users\pc\Desktop\Revo Uninstaller.lnk
2019-01-01 19:12 - 2018-05-26 09:12 - 000000958 _____ C:\Users\pc\Desktop\µTorrent.lnk
2019-01-01 19:12 - 2018-05-26 07:33 - 000001134 _____ C:\Users\pc\Desktop\OLYMPUS Master 2.lnk
2019-01-01 19:12 - 2013-12-24 01:49 - 000001979 _____ C:\Users\pc\Desktop\Microsoft Office 2013 Activation.lnk

==================== Files in the root of some directories =======

2018-07-12 15:42 - 2018-07-12 15:42 - 000000000 _____ () C:\ProgramData\cisC06.exe
2018-06-13 11:03 - 2018-06-13 11:03 - 000000017 _____ () C:\Users\pc\AppData\Local\resmon.resmoncfg

Some files in TEMP:
====================
2019-01-23 14:57 - 2019-01-23 14:57 - 000001536 _____ () C:\Users\pc\AppData\Local\Temp\NOSEventMessages.dll

Some zero byte size files/folders:
==========================
C:\Windows\SysWOW64\sys_dll.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\dllhost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\dllhost.exe => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2019-01-13 05:40

==================== End of FRST.txt ============================

Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
C:\ProgramData\cisC06.exe
C:\Users\pc\AppData\Local\Temp
C:\WINDOWS\system32\Drivers\asw8153dbc6dd0799d8.tmp
C:\WINDOWS\system32\Drivers\asw2e2c78bff93f027b.tmp
C:\WINDOWS\system32\Drivers\aswdbd6076a9c2daa4c.tmp
C:\WINDOWS\system32\Drivers\asw4a69fe015974b6d4.tmp
C:\WINDOWS\system32\Drivers\aswc785fd2635fb55aa.tmp
C:\WINDOWS\system32\Drivers\asw7d28d174528622e8.tmp
C:\WINDOWS\system32\Drivers\asw80547346c615216c.tmp
C:\WINDOWS\system32\Drivers\aswb87143c0ab2f714e.tmp
C:\WINDOWS\system32\Drivers\aswa7f92779bf0f8c1a.tmp
C:\WINDOWS\system32\Drivers\asw9bdd2cc06a5a8fd7.tmp
C:\WINDOWS\system32\Drivers\asw718b022ac77e3034.tmp
C:\WINDOWS\system32\Drivers\aswcace32d4d1d98c5e.tmp
C:\WINDOWS\system32\Drivers\aswf1bf3a9656d4177d.tmp
C:\WINDOWS\system32\Drivers\asw92e821abd50b4f65.tmp
C:\WINDOWS\system32\Drivers\aswe39bd507510ff700.tmp
C:\WINDOWS\system32\Drivers\asw9f073033bbefaf70.tmp
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
SearchScopes: HKU\S-1-5-21-2601864178-3848914015-3132111734-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src ... 02&pc=UE04
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2018-05-25] (Google Inc.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2018-05-25] (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2018-05-25] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2018-05-25] (Google Inc.)
Toolbar: HKU\S-1-5-21-2601864178-3848914015-3132111734-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2018-05-25] (Google Inc.)
FF Plugin: @mcafee.com/MSC,version=10 -> C:\Program Files\mcafee\msc\npMcSnFFPl64.dll [No File]
FF Plugin-x32: @mcafee.com/MSC,version=10 -> C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll [No File]
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => -> No File
Task: {05271C34-8390-45CE-AC41-99000A1B283A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-05-24] (Google Inc.)
Task: {49C26A9B-E81E-4EFF-BDCE-C2E04963CE80} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-05-24] (Google Inc.)
AlternateDataStreams: C:\Users\pc\Downloads\HomeTicket.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\pc\Downloads\HomeTicket.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\pc\Downloads\IE10-Setup-Seven32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\pc\Downloads\IE10-Setup-Seven32.exe:$CmdZnID [29]
AlternateDataStreams: C:\Users\pc\Downloads\podklady_zadost_Konrad.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\pc\Downloads\Windows10Upgrade28084.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\pc\Downloads\Windows10Upgrade28084.exe:$CmdZnID [26]

EmptyTemp:
End

Uložte do C:\Users\pc\AppData\Local\Microsoft\Windows\INetCache\IE\N9057YJ9 jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 20.01.2019
Ran by pc (23-01-2019 18:02:18) Run:1
Running from C:\Users\pc\Desktop
Loaded Profiles: pc (Available Profiles: pc)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
C:\ProgramData\cisC06.exe
C:\Users\pc\AppData\Local\Temp
C:\WINDOWS\system32\Drivers\asw8153dbc6dd0799d8.tmp
C:\WINDOWS\system32\Drivers\asw2e2c78bff93f027b.tmp
C:\WINDOWS\system32\Drivers\aswdbd6076a9c2daa4c.tmp
C:\WINDOWS\system32\Drivers\asw4a69fe015974b6d4.tmp
C:\WINDOWS\system32\Drivers\aswc785fd2635fb55aa.tmp
C:\WINDOWS\system32\Drivers\asw7d28d174528622e8.tmp
C:\WINDOWS\system32\Drivers\asw80547346c615216c.tmp
C:\WINDOWS\system32\Drivers\aswb87143c0ab2f714e.tmp
C:\WINDOWS\system32\Drivers\aswa7f92779bf0f8c1a.tmp
C:\WINDOWS\system32\Drivers\asw9bdd2cc06a5a8fd7.tmp
C:\WINDOWS\system32\Drivers\asw718b022ac77e3034.tmp
C:\WINDOWS\system32\Drivers\aswcace32d4d1d98c5e.tmp
C:\WINDOWS\system32\Drivers\aswf1bf3a9656d4177d.tmp
C:\WINDOWS\system32\Drivers\asw92e821abd50b4f65.tmp
C:\WINDOWS\system32\Drivers\aswe39bd507510ff700.tmp
C:\WINDOWS\system32\Drivers\asw9f073033bbefaf70.tmp
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
SearchScopes: HKU\S-1-5-21-2601864178-3848914015-3132111734-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src ... 02&pc=UE04
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2018-05-25] (Google Inc.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2018-05-25] (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2018-05-25] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2018-05-25] (Google Inc.)
Toolbar: HKU\S-1-5-21-2601864178-3848914015-3132111734-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2018-05-25] (Google Inc.)
FF Plugin: @mcafee.com/MSC,version=10 -> C:\Program Files\mcafee\msc\npMcSnFFPl64.dll [No File]
FF Plugin-x32: @mcafee.com/MSC,version=10 -> C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll [No File]
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => -> No File
Task: {05271C34-8390-45CE-AC41-99000A1B283A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-05-24] (Google Inc.)
Task: {49C26A9B-E81E-4EFF-BDCE-C2E04963CE80} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-05-24] (Google Inc.)
AlternateDataStreams: C:\Users\pc\Downloads\HomeTicket.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\pc\Downloads\HomeTicket.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\pc\Downloads\IE10-Setup-Seven32.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\pc\Downloads\IE10-Setup-Seven32.exe:$CmdZnID [29]
AlternateDataStreams: C:\Users\pc\Downloads\podklady_zadost_Konrad.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\pc\Downloads\Windows10Upgrade28084.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\pc\Downloads\Windows10Upgrade28084.exe:$CmdZnID [26]

EmptyTemp:
End
*****************

Processes closed successfully.
C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat => moved successfully
C:\ProgramData\cisC06.exe => moved successfully
C:\Users\pc\AppData\Local\Temp => moved successfully
C:\WINDOWS\system32\Drivers\asw8153dbc6dd0799d8.tmp => moved successfully
C:\WINDOWS\system32\Drivers\asw2e2c78bff93f027b.tmp => moved successfully
C:\WINDOWS\system32\Drivers\aswdbd6076a9c2daa4c.tmp => moved successfully
C:\WINDOWS\system32\Drivers\asw4a69fe015974b6d4.tmp => moved successfully
C:\WINDOWS\system32\Drivers\aswc785fd2635fb55aa.tmp => moved successfully
C:\WINDOWS\system32\Drivers\asw7d28d174528622e8.tmp => moved successfully
C:\WINDOWS\system32\Drivers\asw80547346c615216c.tmp => moved successfully
C:\WINDOWS\system32\Drivers\aswb87143c0ab2f714e.tmp => moved successfully
C:\WINDOWS\system32\Drivers\aswa7f92779bf0f8c1a.tmp => moved successfully
C:\WINDOWS\system32\Drivers\asw9bdd2cc06a5a8fd7.tmp => moved successfully
C:\WINDOWS\system32\Drivers\asw718b022ac77e3034.tmp => moved successfully
C:\WINDOWS\system32\Drivers\aswcace32d4d1d98c5e.tmp => moved successfully
C:\WINDOWS\system32\Drivers\aswf1bf3a9656d4177d.tmp => moved successfully
C:\WINDOWS\system32\Drivers\asw92e821abd50b4f65.tmp => moved successfully
C:\WINDOWS\system32\Drivers\aswe39bd507510ff700.tmp => moved successfully
C:\WINDOWS\system32\Drivers\asw9f073033bbefaf70.tmp => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
HKU\S-1-5-21-2601864178-3848914015-3132111734-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => removed successfully
HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => not found
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7} => removed successfully
HKLM\Software\Classes\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7} => removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7} => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7} => removed successfully
"HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{2318C2B1-4965-11d4-9B18-009027A5CD4F}" => removed successfully
HKLM\Software\Classes\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F} => removed successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{2318C2B1-4965-11d4-9B18-009027A5CD4F}" => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F} => removed successfully
"HKU\S-1-5-21-2601864178-3848914015-3132111734-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F}" => removed successfully
HKLM\Software\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => not found
HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10 => removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@mcafee.com/MSC,version=10 => removed successfully
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\MBAMShlExt => removed successfully
HKLM\Software\Classes\CLSID\{57CE581A-0CB6-4266-9CA0-19364C90A0B3} => not found
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => not found
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\MBAMShlExt => removed successfully
HKLM\Software\Classes\CLSID\{57CE581A-0CB6-4266-9CA0-19364C90A0B3} => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{05271C34-8390-45CE-AC41-99000A1B283A}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{05271C34-8390-45CE-AC41-99000A1B283A}" => removed successfully
"C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA" => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{49C26A9B-E81E-4EFF-BDCE-C2E04963CE80}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49C26A9B-E81E-4EFF-BDCE-C2E04963CE80}" => removed successfully
"C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore" => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
C:\Users\pc\Downloads\HomeTicket.pdf => ":$CmdTcID" ADS could not remove.
C:\Users\pc\Downloads\HomeTicket.pdf => ":$CmdZnID" ADS removed successfully
C:\Users\pc\Downloads\IE10-Setup-Seven32.exe => ":$CmdTcID" ADS could not remove.
C:\Users\pc\Downloads\IE10-Setup-Seven32.exe => ":$CmdZnID" ADS removed successfully
C:\Users\pc\Downloads\podklady_zadost_Konrad.pdf => ":$CmdTcID" ADS could not remove.
C:\Users\pc\Downloads\Windows10Upgrade28084.exe => ":$CmdTcID" ADS could not remove.
C:\Users\pc\Downloads\Windows10Upgrade28084.exe => ":$CmdZnID" ADS removed successfully

=========== EmptyTemp: ==========

BITS transfer queue => 7888896 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 24359585 B
Java, Flash, Steam htmlcache => 1124 B
Windows/system/drivers => 243239527 B
Edge => 17920 B
Chrome => 0 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
LocalService => 0 B
NetworkService => 1864 B
NetworkService => 0 B
pc => 110677710 B

RecycleBin => 0 B
EmptyTemp: => 368.3 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 18:03:39 ====

Smazáno. Nastala nějaká změna?

zatím žádná změna

Udělejte ještě sken AVPTool: http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 . Utilitu stáhněte, spusťte, nechte pracovat a po skončení akce smažte vše, co najde.

sken našel dva trojany,smazal jsem,odinstaloval pak nainstaloval avast pořád stejné,dokonce stránky podpory avastu nejdou otevřít,píše chyba INET_E_RESOURCE_NOT_FOUND

Jaký máte internetový prohlížeč?